ffffffffffffff, r0, &(0x7f0000000140)=0x80000001, 0x1)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62)
fallocate(r0, 0xb, 0x4367f374, 0x3f)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x20, 0x0)
fchmodat(r2, &(0x7f00000015c0)='./file1\x00', 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61278d897824db3, @perf_config_ext, 0x3020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400000, 0x123)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x2d)
openat(r3, &(0x7f0000000080)='./file1\x00', 0x0, 0x76)
sendfile(r1, r3, 0x0, 0x100000001)

08:27:39 executing program 7:
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x3, @loopback}, 0x0, 0x0, 0x1}, 0x0)
dup2(r4, r3)
ioctl$DVD_READ_STRUCT(r3, 0x5390, &(0x7f0000000180)=@physical={0x0, 0x1, [{0x6, 0xf, 0x1, 0xc, 0x4, 0x1, 0x1, 0xa, 0xd, 0x0, 0xd4, 0x5, 0x2dc}, {0x9, 0x3, 0x5, 0x7, 0x1, 0x1, 0x3, 0x0, 0x8, 0x0, 0x3a6, 0x3, 0x7f}, {0x2, 0x5, 0xd, 0x9, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x10001, 0x80, 0xacab}, {0x7, 0x9, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x8, 0x1, 0x9, 0x2, 0x3f}]})
read(r2, &(0x7f0000000000)=""/13, 0xd)
syz_io_uring_setup(0x7681, &(0x7f0000000a40)={0x0, 0x8668, 0x4, 0x3, 0x329}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000009c0)=<r5=>0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r0, r5, &(0x7f0000000a00)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x5, 0x4b12255c, 0x0, 0x80000001, 0x12, 0x0, {0x2, r10}}, 0x61)
openat(r3, &(0x7f0000000040)='.\x00', 0x80000, 0x18)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x9, 0x0, 0x4307, 0x40a21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0xc757a2261a8a0ef, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack_expect\x00')
dup3(r12, r11, 0x0)

08:27:39 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, 0x0)
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  483.362045] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:27:39 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
sendmsg$nl_generic(r0, 0x0, 0x4000053)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r2}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r2, 0xe, r1, 0xb)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380))
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x1, 0x9, 0x3f, 0x0, 0x5d7, 0x20004, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x5, @perf_bp={&(0x7f0000000080), 0x1}, 0x9084, 0x1f, 0x0, 0x0, 0x10001, 0x9d, 0x6, 0x0, 0x8, 0x0, 0x8}, r2, 0x3, r6, 0xb)
write$cgroup_int(r0, &(0x7f0000000040), 0x12)

08:27:39 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x7f, 0x0, 0x7, 0x0, 0x40, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x72100000, 0x0, @perf_config_ext={0x0, 0x7014}, 0x0, 0x1f, 0x0, 0x3, 0x7fffffff, 0x8, 0x101, 0x0, 0x8, 0x0, 0x81}, 0xffffffffffffffff, 0x10, r0, 0x2)
mount$cgroup(0x0, &(0x7f0000001900)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@noprefix}]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r2}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r2, 0xe, r1, 0xb)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1f, 0x4, 0x6, 0x8, 0x0, 0xfff, 0x20130, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb7b8, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x608e, 0x80000000, 0x10001, 0x7, 0x3, 0x4800c798, 0x200, 0x0, 0x3, 0x0, 0x80}, r2, 0xc, 0xffffffffffffffff, 0x8)

08:27:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:27:40 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, 0x0)
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  484.024111] cgroup: noprefix used incorrectly
[  484.106914] cgroup: noprefix used incorrectly
08:27:40 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x14420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50802, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, r0, 0x0)
syncfs(0xffffffffffffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/254, 0xfe, 0x2023, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1, 0x3f, 0x4, 0x0, 0x200, 0x1008, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x20b, 0x80}, 0xeb3ac57920cdd650, 0x0, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x5a82, 0x0, 0x80000000}, 0x0, 0x4, r6, 0xa)
sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010062, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080))
dup2(r1, r2)

08:27:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
r5 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r5, r4)
socketpair(0x2, 0x6, 0x8, &(0x7f0000000000))
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0010f4", @ANYRES16=r10, @ANYBLOB="010000000000000000008800000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:27:40 executing program 3:
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x9, 0x0, 0x8, 0x1, 0x96112ae6acac6326, {0x0, r0}}, 0x3ff)
semctl$IPC_RMID(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x6, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x3, 0x400, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4, 0x9, 0x1800}], 0x4)
semop(0x0, &(0x7f0000000000)=[{0x4, 0xfff}], 0x1)
semtimedop(0x0, &(0x7f0000000240)=[{0x4, 0x0, 0x1000}], 0x1, 0x0)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
semtimedop(0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)={0x77359400})
semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000002e40)=""/4111)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
r3 = semget$private(0x0, 0x1, 0x104)
semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000001c0)=""/69)
semop(r3, &(0x7f0000000180)=[{0x0, 0x1, 0x800}, {0x2, 0x5, 0x1000}, {0x0, 0xfe, 0x1000}, {0x3, 0x101, 0xc00}, {0x3, 0x4, 0x3000}], 0x5)
setresuid(0x0, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
semop(r1, &(0x7f0000000040)=[{0x4, 0x7}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4)

[  484.230474] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  484.734281] audit: type=1400 audit(1730017660.925:114): avc:  denied  { create } for  pid=5267 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
08:27:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:27:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:27:53 executing program 3:
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x9, 0x0, 0x8, 0x1, 0x96112ae6acac6326, {0x0, r0}}, 0x3ff)
semctl$IPC_RMID(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x6, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x3, 0x400, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4, 0x9, 0x1800}], 0x4)
semop(0x0, &(0x7f0000000000)=[{0x4, 0xfff}], 0x1)
semtimedop(0x0, &(0x7f0000000240)=[{0x4, 0x0, 0x1000}], 0x1, 0x0)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
semtimedop(0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)={0x77359400})
semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000002e40)=""/4111)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
r3 = semget$private(0x0, 0x1, 0x104)
semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f00000001c0)=""/69)
semop(r3, &(0x7f0000000180)=[{0x0, 0x1, 0x800}, {0x2, 0x5, 0x1000}, {0x0, 0xfe, 0x1000}, {0x3, 0x101, 0xc00}, {0x3, 0x4, 0x3000}], 0x5)
setresuid(0x0, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
semop(r1, &(0x7f0000000040)=[{0x4, 0x7}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4)

08:27:53 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x1f, 0xdc, 0xfb, 0x0, 0x2, 0x2050, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x72, 0x7, @perf_config_ext={0x5, 0x81}, 0x800, 0x40, 0x4, 0x2, 0x8, 0x2, 0x3f, 0x0, 0x100, 0x0, 0x1000009}, 0x0, 0xb, 0xffffffffffffffff, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340))
lseek(r1, 0x0, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r4, r4)
ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000300))
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write(r5, &(0x7f0000000480)="2a569f373871544b5ad401472b7b77b23bf07e17aeed4879af2e9e7b6489c5ddd39cf7a790112351d2d6c4603300ee758a258e138b6f1f362b916761facc252509bc96", 0x43)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0))
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
syz_io_uring_setup(0x5701, &(0x7f0000000100)={0x0, 0x92f4, 0x0, 0x1, 0x133}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000002c0))

08:27:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500))
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:27:53 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, 0x0)
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:27:53 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x14420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50802, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, r0, 0x0)
syncfs(0xffffffffffffffff)
recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/254, 0xfe, 0x2023, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1, 0x3f, 0x4, 0x0, 0x200, 0x1008, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x20b, 0x80}, 0xeb3ac57920cdd650, 0x0, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x5a82, 0x0, 0x80000000}, 0x0, 0x4, r6, 0xa)
sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010062, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080))
dup2(r1, r2)

08:27:53 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x7f, 0x0, 0x7, 0x0, 0x40, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x72100000, 0x0, @perf_config_ext={0x0, 0x7014}, 0x0, 0x1f, 0x0, 0x3, 0x7fffffff, 0x8, 0x101, 0x0, 0x8, 0x0, 0x81}, 0xffffffffffffffff, 0x10, r0, 0x2)
mount$cgroup(0x0, &(0x7f0000001900)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@noprefix}]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r2}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r2, 0xe, r1, 0xb)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1f, 0x4, 0x6, 0x8, 0x0, 0xfff, 0x20130, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb7b8, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x608e, 0x80000000, 0x10001, 0x7, 0x3, 0x4800c798, 0x200, 0x0, 0x3, 0x0, 0x80}, r2, 0xc, 0xffffffffffffffff, 0x8)

08:27:54 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
close_range(r1, r0, 0x0)
fcntl$addseals(r1, 0x409, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0xc, 0x1}, 0x9)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3)
futimesat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}})
r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
add_key(0x0, 0x0, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
unshare(0x48020200)

[  498.055220] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  498.060057] cgroup: noprefix used incorrectly
08:27:54 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:27:54 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0c00110020"], 0x28}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$revoke(0x3, 0x0)
r5 = add_key(&(0x7f0000000440)='trusted\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="25f9b7edcd35216c5a6700d9883aeee5f1cc56c6f68b57ee5404638c90f8f26796ba130725", 0x25, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000002c0)="c1eeccca7ccf594a5ca880f7af6b22111a5870a12850182aacccba447ded95d24b8e4d93e552fd5253fa7a1fd980fc3363a87bea8e", 0x35, r5)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182})
unshare(0x48020200)

08:27:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:27:54 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:27:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x1f, 0xdc, 0xfb, 0x0, 0x2, 0x2050, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x72, 0x7, @perf_config_ext={0x5, 0x81}, 0x800, 0x40, 0x4, 0x2, 0x8, 0x2, 0x3f, 0x0, 0x100, 0x0, 0x1000009}, 0x0, 0xb, 0xffffffffffffffff, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340))
lseek(r1, 0x0, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r4, r4)
ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000300))
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write(r5, &(0x7f0000000480)="2a569f373871544b5ad401472b7b77b23bf07e17aeed4879af2e9e7b6489c5ddd39cf7a790112351d2d6c4603300ee758a258e138b6f1f362b916761facc252509bc96", 0x43)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0))
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
syz_io_uring_setup(0x5701, &(0x7f0000000100)={0x0, 0x92f4, 0x0, 0x1, 0x133}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000002c0))

08:27:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500))
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  498.591858] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'.
08:27:54 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  498.723417] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'.
08:27:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:27:54 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x204, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x200}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x879}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xb640}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ea}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
r10 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r10, r9)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)

[  498.843924] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:28:09 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:28:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:09 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500))
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:09 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x5f, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

08:28:09 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x204, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x200}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x879}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xb640}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ea}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}]}, 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
r10 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r10, r9)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)

08:28:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:28:09 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1f}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0)

08:28:09 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:09 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_pgetevents(0x0, 0x6, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  513.225773] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:28:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:09 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x9, 0x13, 0x8, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]})
r3 = creat(&(0x7f0000000040)='./file1\x00', 0xc8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/295])
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil)
r4 = open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26)
inotify_add_watch(r4, &(0x7f0000000140)='./file2\x00', 0x2000001)
acct(&(0x7f00000001c0)='./file1\x00')
openat(r3, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0)
mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1b6008a, 0x0)

08:28:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x22800)
getdents(r0, &(0x7f00000001c0)=""/217, 0xd9)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'user_u'}}]})

08:28:09 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mknodat$loop(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)

08:28:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  513.880066] SELinux: security_context_str_to_sid(user_u) failed for (dev sda, type ext4) errno=-22
[  513.887481] SELinux: security_context_str_to_sid(user_u) failed for (dev sda, type ext4) errno=-22
08:28:10 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:10 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = dup2(r9, r9)
r11 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r11, r10)
r12 = getpgid(0x0)
r13 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000002240)=ANY=[@ANYBLOB="501800003f00000225bd7000ffdbdf2501000000d0027980c2004c005cf24ebf9f3f9e43b190291bc6f2d89fa0531ed995857b056f9ba4e7935ed21253489d1bcd08a141f767d826512f24cf24a3ef064ca63c7f8e4dbf7fa3b40c7e98b9a73949d2355f5e069015f05fdf6e33dbbf0ff801987f93582f3a3d9af0677c854050c52a1c4feeb4e51886f09ecde10090bc6125976414cece39c7cb22468f3958eadf523bea39ded1be80543d617359c9253c26698fed26f3d37d168edde2671bd80e02a8c78551e6aba75a962dcf4a1c9aac19a0d586ed8d24fb240000140027002001000000000000000000000000000108001300450e00002f143666b96ba215cd2d479e2ae1a660149f5132afe251fe6ea46d6a9bf1483167b8597cf8f187c4d8ee350d7686e15f5b2d4ac7ba295964750e8859d0c01022dbf459c6a6cf10d3d1edfd1961d221f6ed7496af614f6576d1b7951db2a81705cc67cd71b574878ea69d75a9ae3e03f21ddf2ce66d4bceefcd074f95a1408d38fa270086ba5b3c1ce6ab1bf1f148e28443f03d4667bdf5691787b8f655880133c487be37c409d628486abc92df477fb513a40fab54fd9b43949610b9b3addfb3676e90ce3d35c0e5014c2f5fb7180636a484281934c66fbb2d9188060dba8cde9aad55ca9ed6040060009c038e694f20806ae857f9fa8580999a5fa9f60b7e6b59c98c851f5a1e66ee5ad715e524bdfdeaea2642cdd2668fbe74200e9839e818d71728742d42587571591cdd5e536ff4dddb6025f4c9511589903440e0fbb0edfeaeebe341aaba66f874912d726b7df5e25ca830d1ea837d35ca6a16050b39ebc6ed9525e6e3e15f7c352b7a64fa68f86edd42916090bd108912c0c76da7a3b47bd613b400969c2ba1ef9aeef8ff648f0d15eb2585e7a41f8d0e248ee7ac5be65cd5a87044160cf643ac8b34c6037539189151ea7302163b69eefa2203caec79c3a6e04be602e9fe77725bd569c8b5a007dd305308005800", @ANYRES32=r3, @ANYBLOB="040031000400530008004900", @ANYRES32=r10, @ANYBLOB="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"/791, @ANYRES32, @ANYBLOB="08001300", @ANYRES32=r12, @ANYBLOB="f003c42e76c5f2d11aa8dedc722d9b9d343c5ddc63ccd246f7695c23bfa9f5fdb2b36e9055a2b6745b89a66f58d6927139b2b62eeb00ac08908128d713b9069f752b0c6e40043eda5801005d0fdb87f0b4c03be1470a6a8407726634267e94b73ca071580f96ddd5dded21d93335f4d8a8131963ac414aecf17c4c1c82495d9626c7dea532630dd42a0b97f7ab063e8c8f3ca3afa26bfe0be5991423b1075cc002bd78f759c749f0048972ecb115f8220d4e5674ba34f93876b476bbd5af43f208006500", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4b765875698356c2d3889a99fe05b16c5f700dbeb9f3ae27de3a9c4158027cb15f8b5f12242c168e896007f6eb50000014882f7a9adbc89d5a544bbe387029c702ed9f002c48fcd43fd4e3ce509afafd7a28b1314b654146da60bf479e0b27d1af6e29382370275ddf5d8cf3979f963bd2c89f4648bf7bee5fb9cf0e44ea733a8ccaa236482d6169ff1089efecd2c9252c57ae356b0646f3aca58069560b4ef8dd376d030f3d45e0c62ebee70b716e3c065520d1ef294fa3c25b464febf4722f70903908646a86b0d4765261c62a86b731476e847caf9a5d025d4e3c2c3a3b1be7eb535a48dfbd2b35d88f3b3f670a078a8c66012b9af309401587e3177fe3c0cb04007400cac14c99d34a52710ad8636a7e887b34f2930275fca77b1ccc869af421241324ea8fa60f749465eb9daf2a729f72f3616f9d1449a7455fa10f1a4aa3471bbac397ff2f276a79b07a6ab780cd067fd3084f74af181eb4df71f4ab2e4bcbe175baeb7f1da04010ed6c7cab424bc668ec2b4c95662a239524eb1305bae0aeef7a55602fad7b7d4b33299df574132a344e75"], 0x1850}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000080)

[  514.000388] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  514.008218] Process accounting resumed
08:28:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  514.052817] Process accounting resumed
08:28:10 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:10 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x9, 0x13, 0x8, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]})
r3 = creat(&(0x7f0000000040)='./file1\x00', 0xc8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="9789cdc1a58bb7b4ce6b9173a41ae2f452523a45992f9f476b7ba2f081093dc8980abc25f70553a138eaf8f2cd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffb66b332d87a3c99b80c16f30138338d307659a86f92a1fa5aad70a1fee7f0ba05253576f1ab39ef6db19356ec8c68bb1f33d13476a0a7b83ef656825ea987d8c6a71a3fcb5f74032d8a349dcb4ef671f279f976c1d425412284b9f305d4de4d5908d688e31a1dbadaebee08b94739c4cd311d4f900f6cc75a96d573f6d25905dc87ef460a51b61a526e3aaa14cd01b668c3fb09b9cbe1c6c1922fcf126e15bb87546b3c3468fb911beadef4a20000037e2c4e9457d23fb8c0c9eed0281d162800"/295])
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil)
r4 = open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26)
inotify_add_watch(r4, &(0x7f0000000140)='./file2\x00', 0x2000001)
acct(&(0x7f00000001c0)='./file1\x00')
openat(r3, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0)
mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1b6008a, 0x0)

08:28:10 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3304, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r1, 0xffffffffffffffff, r1], 0x9}, 0x2a)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  514.792360] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  514.856951] Process accounting resumed
08:28:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:24 executing program 3:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x9, 0x13, 0x8, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]})
r3 = creat(&(0x7f0000000040)='./file1\x00', 0xc8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/295])
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil)
r4 = open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26)
inotify_add_watch(r4, &(0x7f0000000140)='./file2\x00', 0x2000001)
acct(&(0x7f00000001c0)='./file1\x00')
openat(r3, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0)
mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1b6008a, 0x0)

08:28:24 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:24 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:24 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:24 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = dup2(r9, r9)
r11 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r11, r10)
r12 = getpgid(0x0)
r13 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000002240)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="040031000400530008004900", @ANYRES32=r10, @ANYBLOB="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"/791, @ANYRES32, @ANYBLOB="08001300", @ANYRES32=r12, @ANYBLOB="f003c42e76c5f2d11aa8dedc722d9b9d343c5ddc63ccd246f7695c23bfa9f5fdb2b36e9055a2b6745b89a66f58d6927139b2b62eeb00ac08908128d713b9069f752b0c6e40043eda5801005d0fdb87f0b4c03be1470a6a8407726634267e94b73ca071580f96ddd5dded21d93335f4d8a8131963ac414aecf17c4c1c82495d9626c7dea532630dd42a0b97f7ab063e8c8f3ca3afa26bfe0be5991423b1075cc002bd78f759c749f0048972ecb115f8220d4e5674ba34f93876b476bbd5af43f208006500", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1850}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000080)

08:28:24 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:24 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  528.471395] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  528.533291] Process accounting resumed
08:28:38 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:38 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:38 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:38 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="654ae612c98e7e942f0a620b8101274f708d2ab208c97a2065d29015f19e80317f0072374437e1cc3452a99258e4c083e6f79d1f4b2503b3e370b3b51a17816233c24ce9dd0da53c90082e162726346d44ccc00d8477cd0c78134bacfb8f213656924b5b0b94f3e044371b3d09100830ee100a02e8f920923d9b43e57d854258469213aeb2c6989a498b94df46a9e66ec7fe8799e6d8649333bd1ed3961a087fda0c195ebea604b9ac953466a13863f4b796a07f", 0xb4})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
kcmp(r3, r4, 0x1, r0, r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)

08:28:38 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000ac0), 0xfffffffffffffffe, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0xae99, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

08:28:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  542.313914] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:28:38 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:38 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:38 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:38 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  542.572088] audit: type=1326 audit(1730017718.762:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  542.575037] audit: type=1326 audit(1730017718.765:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  542.582109] audit: type=1326 audit(1730017718.772:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  542.605652] audit: type=1326 audit(1730017718.796:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
08:28:38 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  542.698216] audit: type=1326 audit(1730017718.889:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  542.703665] audit: type=1326 audit(1730017718.889:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5489 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
08:28:38 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000ac0), 0xfffffffffffffffe, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0xae99, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

08:28:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  542.855731] audit: type=1326 audit(1730017719.046:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5547 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  542.858688] audit: type=1326 audit(1730017719.050:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5547 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  543.167729] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:28:39 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:39 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="654ae612c98e7e942f0a620b8101274f708d2ab208c97a2065d29015f19e80317f0072374437e1cc3452a99258e4c083e6f79d1f4b2503b3e370b3b51a17816233c24ce9dd0da53c90082e162726346d44ccc00d8477cd0c78134bacfb8f213656924b5b0b94f3e044371b3d09100830ee100a02e8f920923d9b43e57d854258469213aeb2c6989a498b94df46a9e66ec7fe8799e6d8649333bd1ed3961a087fda0c195ebea604b9ac953466a13863f4b796a07f", 0xb4})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
kcmp(r3, r4, 0x1, r0, r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)

08:28:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="654ae612c98e7e942f0a620b8101274f708d2ab208c97a2065d29015f19e80317f0072374437e1cc3452a99258e4c083e6f79d1f4b2503b3e370b3b51a17816233c24ce9dd0da53c90082e162726346d44ccc00d8477cd0c78134bacfb8f213656924b5b0b94f3e044371b3d09100830ee100a02e8f920923d9b43e57d854258469213aeb2c6989a498b94df46a9e66ec7fe8799e6d8649333bd1ed3961a087fda0c195ebea604b9ac953466a13863f4b796a07f", 0xb4})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
kcmp(r3, r4, 0x1, r0, r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)

08:28:39 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:39 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  543.859744] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  543.896477] audit: type=1326 audit(1730017720.087:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5558 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
[  543.902219] audit: type=1326 audit(1730017720.093:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5558 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f68fec1cb19 code=0x7ffc0000
08:28:54 executing program 7:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:54 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="654ae612c98e7e942f0a620b8101274f708d2ab208c97a2065d29015f19e80317f0072374437e1cc3452a99258e4c083e6f79d1f4b2503b3e370b3b51a17816233c24ce9dd0da53c90082e162726346d44ccc00d8477cd0c78134bacfb8f213656924b5b0b94f3e044371b3d09100830ee100a02e8f920923d9b43e57d854258469213aeb2c6989a498b94df46a9e66ec7fe8799e6d8649333bd1ed3961a087fda0c195ebea604b9ac953466a13863f4b796a07f", 0xb4})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
kcmp(r3, r4, 0x1, r0, r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)

08:28:54 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:28:54 executing program 1:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:54 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:28:54 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  558.616296] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:28:54 executing program 7:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:28:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  558.787336] kauditd_printk_skb: 7 callbacks suppressed
[  558.787348] audit: type=1326 audit(1730017734.974:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5610 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d098eeb19 code=0x7ffc0000
[  558.799078] audit: type=1326 audit(1730017734.989:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5610 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f3d098eeb19 code=0x7ffc0000
[  558.862130] audit: type=1326 audit(1730017735.053:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5610 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d098eeb19 code=0x7ffc0000
08:28:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  559.514436] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:09 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:09 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:09 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:09 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:09 executing program 7:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:09 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  573.177806] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:09 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="654ae612c98e7e942f0a620b8101274f708d2ab208c97a2065d29015f19e80317f0072374437e1cc3452a99258e4c083e6f79d1f4b2503b3e370b3b51a17816233c24ce9dd0da53c90082e162726346d44ccc00d8477cd0c78134bacfb8f213656924b5b0b94f3e044371b3d09100830ee100a02e8f920923d9b43e57d854258469213aeb2c6989a498b94df46a9e66ec7fe8799e6d8649333bd1ed3961a087fda0c195ebea604b9ac953466a13863f4b796a07f", 0xb4})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
kcmp(r3, r4, 0x1, r0, r9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)

[  573.580282] audit: type=1326 audit(1730017749.770:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
[  573.596405] audit: type=1326 audit(1730017749.786:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
[  573.616215] audit: type=1326 audit(1730017749.807:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
[  573.628102] audit: type=1326 audit(1730017749.819:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
[  573.640411] audit: type=1326 audit(1730017749.831:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
[  573.643104] audit: type=1326 audit(1730017749.831:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a80ccb19 code=0x7ffc0000
08:29:23 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:23 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:23 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:23 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:23 executing program 3:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x24040101)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000)
mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x100000000000000}})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
lseek(r1, 0x800, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)

08:29:23 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204a, 0x0, 0x2, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x5d1f, &(0x7f0000000080)={0x0, 0x804c, 0x25, 0x2, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80080, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup2(r6, r6)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x800)
dup2(r8, r7)
signalfd4(r8, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0xd31f, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r9=>0x0, &(0x7f00000003c0)=<r10=>0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r12 = dup2(r11, r11)
r13 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r13, r12)
sendmsg$802154_dgram(r12, &(0x7f0000000280)={&(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000240)={&(0x7f0000000d40)="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", 0x1000}, 0x1, 0x0, 0x0, 0x800}, 0x80)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x810, r0, 0x0)
clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

08:29:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
getdents64(r3, &(0x7f00000003c0)=""/180, 0xb4)
chdir(&(0x7f0000000040)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000100)=ANY=[], 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0, <r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x80, "5fabd34a60e47f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000041a40)={0x300e9534, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x4, "d3c0b79ce0c4a3"})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000380)='./file1\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000300)=""/126, 0x7e}], 0x2)

08:29:23 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  587.577449] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:23 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:23 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x44000, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "227bdf943ca69499ccbe58722d91afcd"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000804)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r8, r7)
r9 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r9, 0x76d3, 0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x10)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000540)={0x9, 0x0, &(0x7f0000000500)=[r9, 0xffffffffffffffff]}, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ff0200100000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x449b, 0x3c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x0, 0x2, 0x5, 0x1fc5, 0x4, 0x1, 0x7, 0x2, 0x9]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0014}, 0x46091)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r10], 0x17c}}, 0x0)

08:29:23 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:23 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, r2)
sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x28, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0)

[  588.052566] netlink: 'syz-executor.3': attribute type 28 has an invalid length.
[  588.085099] netlink: 'syz-executor.3': attribute type 28 has an invalid length.
[  588.107844] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:24 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  588.128624] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.1'.
08:29:39 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:39 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:39 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:39 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:39 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  603.423009] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  603.455654] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:39 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:39 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  603.821839] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  603.902961] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:54 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(r0, r1)

08:29:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  618.389463] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  618.390399] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:54 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:54 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(r0, r1)

08:29:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(r0, r1)

08:29:55 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:55 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  619.399491] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  619.434997] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:29:55 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:29:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:29:55 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:29:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x80, &(0x7f0000000200)="718bc9c0eb3a8cd8e8e9068a13b39e0171eab3e29cd291a90ea3a328184b23f20565b910e0f48e45c14629da7875c144461c6c04f359d80d6c864e2fb1856fa92c021c1662f85f2edca8587ead56b15c80ca28")
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  619.766530] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  619.798756] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:30:10 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(r0, r1)

08:30:11 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:11 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:11 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:11 executing program 3:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x24040101)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @local}, 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000100)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', <r4=>0x0, 0x0, 0xb9, 0x5, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x1, 0x1ff, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', <r5=>0x0, 0x29, 0x3, 0x40, 0x7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x10, 0x711, 0xfffffffb}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)={0x1b4, 0x0, 0x100, 0x70bd27, 0x1f, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20040001}, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000)
mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x100000000000000}})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
lseek(r6, 0x800, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x100000001)

08:30:11 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:11 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  635.032235] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:30:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:11 executing program 3:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:25 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:25 executing program 1:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = syz_io_uring_complete(0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x121481, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x8, 0x0, 0x0, 0x0, "8f6a961ac84e3753b92f2e191adb9f5c1c3d054d00dea9513272e8afcecfe50a9cb25ef3830643de61c7bee8d518a7b3733a1fea3150599d380d0c996c241112", "6ee47a4f239f48f0cdd306d43838b126dda0761c05a6eaf3079d0384ed5c46b9"})
ioctl$LOOP_SET_STATUS(r1, 0x4c07, 0x0)

08:30:25 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(r0, r1)

08:30:25 executing program 3:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:25 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:25 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  649.951945] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:30:26 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x800, 0x0)
link(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)='./file0/file0\x00')
rename(&(0x7f00000000c0)='./file0/file1/file0\x00', &(0x7f0000000140)='./file0/file0\x00')

08:30:26 executing program 3:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:26 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:26 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:26 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:30:26 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:26 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:26 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  650.801145] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:30:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:27 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:27 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:41 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:41 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:41 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:41 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:41 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:41 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:30:41 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:41 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  665.188679] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  665.245703] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:30:55 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:55 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:30:55 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:55 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:30:55 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  679.323298] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  679.336795] cgroup: fork rejected by pids controller in /syz6
08:30:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:55 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:30:55 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:30:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:30:55 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:30:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:30:55 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  679.840647] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:31:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:17 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
dup2(r0, r1)

08:31:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:17 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  701.766098] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:31:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
dup2(r0, r1)

08:31:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:17 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:31:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:18 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:18 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:31:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  702.548017] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  702.871832] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:32 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:31:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:31:32 executing program 5:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:32 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:32 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
dup2(r0, r1)

[  716.645268] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:32 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:31:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  716.865714] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
[  716.925247] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:47 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:47 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:47 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, 0x0)
socket$netlink(0x10, 0x3, 0x1e)

08:31:47 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:47 executing program 5:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="574be90ce9e6edf1f939b23601b7c90063f2fe260f4a4c20e8d0b84cb21f4a8b3980fff938995e13c9221959fc82a99c5c9162b1114644766c8ac1678899e73266cb2df8b20e65c918f631e6beeec381a8ea62c7583071f456232b260b20b5b893f9bb4bd7f441fc00789149e443534cd9ee070fcfc8cd12538af6e5652f28cf6c2d6635332f20c64b2d6610813a1cc0ade7ec0225d4380f6c5608842b659affa2a7ffa1136458c68dc5c9fd39535885e1524a8c", 0xb4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000010000000000140000000000000000000000000000000000000005a5e8dc30406461291c400fd7457b0cc42c0bfa0479d44ee801fb7182b5c106fee581556ceb09d4cd561a2721c8336668e24307ac6571d37187f183e8a24053cbe89018956b610368b9219b46688eaab4deeb1b63a06f89037286c5ff9a76891ed80faa3ce46ded27e0b7af135809f6c27dbe2d617f62784985aa5a83fb75e5c5c101708df8181d294507669dc5c1f080b81bea4f9d8156e71c789e5078e8a834ef5ea6873d2d8f42660daf23e530e05e2d1e"], 0x30}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  732.195213] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:31:48 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:48 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, 0x0)
socket$netlink(0x10, 0x3, 0x1e)

08:31:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:49 executing program 5:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:49 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:31:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:49 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:49 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:49 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, 0x0)
socket$netlink(0x10, 0x3, 0x1e)

08:31:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:31:49 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:31:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:03 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={0x0})
socket$netlink(0x10, 0x3, 0x1e)

08:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:03 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:04 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:04 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={0x0})
socket$netlink(0x10, 0x3, 0x1e)

08:32:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:04 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:18 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:18 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={0x0})
socket$netlink(0x10, 0x3, 0x1e)

08:32:18 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:19 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:19 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:32:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:19 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:19 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  764.538225] perf: interrupt took too long (10278 > 9941), lowering kernel.perf_event_max_sample_rate to 19000
08:32:33 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:33 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioprio_get$pid(0x1, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x8}, r5, 0x3, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r6, r3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

08:32:33 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:32:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0x1000003)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6)
lseek(0xffffffffffffffff, 0x2200, 0x1)
lseek(r2, 0x2, 0x2)
acct(&(0x7f0000000040)='./file0\x00')
sendfile(r0, 0xffffffffffffffff, 0x0, 0x3)
unshare(0x4a060400)

08:32:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:34 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:34 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:34 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioprio_get$pid(0x1, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x8}, r5, 0x3, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r6, r3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

08:32:34 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:32:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0x1000003)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6)
lseek(0xffffffffffffffff, 0x2200, 0x1)
lseek(r2, 0x2, 0x2)
acct(&(0x7f0000000040)='./file0\x00')
sendfile(r0, 0xffffffffffffffff, 0x0, 0x3)
unshare(0x4a060400)

08:32:34 executing program 2:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0x1000003)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6)
lseek(0xffffffffffffffff, 0x2200, 0x1)
lseek(r2, 0x2, 0x2)
acct(&(0x7f0000000040)='./file0\x00')
sendfile(r0, 0xffffffffffffffff, 0x0, 0x3)
unshare(0x4a060400)

08:32:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:35 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:35 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x0)

08:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  779.688104] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  779.690405] EXT4-fs (loop4): get root inode failed
[  779.691035] EXT4-fs (loop4): mount failed
[  780.475500] perf: interrupt took too long (40664 > 12847), lowering kernel.perf_event_max_sample_rate to 4000
08:32:49 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:49 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioprio_get$pid(0x1, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x8}, r5, 0x3, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r6, r3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

08:32:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:32:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:49 executing program 2:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:32:49 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x0)

08:32:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  793.894614] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  793.914400] EXT4-fs (loop4): get root inode failed
[  793.915171] EXT4-fs (loop4): mount failed
08:32:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:32:50 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  794.249386] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  794.251046] EXT4-fs (loop4): get root inode failed
[  794.251696] EXT4-fs (loop4): mount failed
08:33:03 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioprio_get$pid(0x1, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x8}, r5, 0x3, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r6, r3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

08:33:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:03 executing program 2:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x0)

08:33:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  807.937323] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  807.939193] EXT4-fs (loop4): get root inode failed
[  807.939936] EXT4-fs (loop4): mount failed
08:33:04 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioprio_get$pid(0x1, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x8}, r5, 0x3, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r6, r3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

08:33:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:04 executing program 3:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012a00))
r1 = getgid()
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x204000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}], [{@appraise_type}, {@measure}, {@uid_gt}, {@subj_user={'subj_user', 0x3d, '/proc/self/attr/current\x00'}}, {@uid_lt={'uid<', 0xee00}}]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r2=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@msize={'msize', 0x3d, 0x9}}, {@version_u}, {@access_any}, {@access_uid={'access', 0x3d, r2}}], [{@hash}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}})

08:33:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:04 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e) (fail_nth: 1)

08:33:04 executing program 1:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x80000, 0x0)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./mnt\x00', 0x0)
r1 = openat(r0, &(0x7f0000000000)='./mnt\x00', 0x20000, 0x0)
open(&(0x7f00000001c0)='./mnt\x00', 0x10000, 0x30)
mkdirat(r1, &(0x7f0000000180)='./mnt\x00', 0x2a)

[  808.619905] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024)
[  808.631569] tmpfs: Unknown parameter 'appraise_type'
[  808.643013] tmpfs: Unknown parameter 'appraise_type'
[  808.648710] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  808.650560] EXT4-fs (loop4): get root inode failed
[  808.651267] EXT4-fs (loop4): mount failed
08:33:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:19 executing program 1:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = pkey_alloc(0x0, 0x0)
r1 = pkey_alloc(0x0, 0x5)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x6, 0x0, 0x2)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, r0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800)
readv(0xffffffffffffffff, &(0x7f0000000280), 0x0)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff)
sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0)
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8800000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x5d91, 0x4)
dup2(r2, 0xffffffffffffffff)

08:33:19 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:19 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:19 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:19 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0xd0, 0x4, 0x1, {0x0, r1, r0}}, 0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @remote, 0x8001}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000200)={{0x2, 0xf9}, 'port0\x00', 0x89, 0x30878, 0xfff, 0x5, 0x8, 0x80000001, 0x8, 0x0, 0x3})
r3 = syz_io_uring_setup(0x4103, &(0x7f00000000c0)={0x0, 0xf55e, 0x10, 0x1, 0x36c}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000040), &(0x7f0000000140))
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x1, @mcast1, 0x200}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="be9fff0fb4d193fe3f82ad4edc78ab214f03a8735e8dee3b344afef6", 0x1c}, {&(0x7f0000000580)="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", 0x1000}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x448}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x400041, 0x0)
syz_io_uring_setup(0x985, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000400))
syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2}, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

08:33:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x1, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
setpgid(0xffffffffffffffff, r1)
r2 = syz_io_uring_setup(0x55db, &(0x7f0000000080)={0x0, 0xbaaa, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0xa0040, 0x23456}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
r6 = syz_open_procfs(0x0, &(0x7f0000001580)='cgroup\x00')
fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000000)=0x5)
readv(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
openat(r6, &(0x7f0000000140)='./file0\x00', 0x8300, 0x100)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r6, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040))
syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[  823.221581] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  823.229625] EXT4-fs (loop4): get root inode failed
[  823.230317] EXT4-fs (loop4): mount failed
08:33:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:19 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000010000001800efd9b6fb04972c23fcba018670dc3992d9029b8543f4574c33f560701430236c2151719c8b750a6d1afb33d1b2e0d64f618ca9014062a72ff1d29692d97e3a54a0d02f472e98e3f705a2e07d990b4f74b4ff8b4627deda69883c81a6b4c857c97804ac7212185b254dfcc74e3db519ec704895128e159958179bc50f09000000000000005ad12728e3c62fa477b45c64740be8b480f2880368e21c3ef9ebc05bfb5c7bef28abd01bfe7a2667ea8a83980388cabce569fd93f4493c12836c8d540a1330bafbd5070c75b8e9d472e043a050e735cd994588f8a0712b9cf982f61ff759cb8ae3086d836fe89c79f6f798c44b9142f06225ef5d6a91005d3d8fa297d46ece9788844a843d4448fa6000f8225c1f0059776b3e1ea940b5087966f75b33723f03b185bf10c1bb4ee82dbd03913034a7937691c4cda80c66d6b17e143b66afb9c09f404debe46fdfb81ae5c93946d3bede83b4a9efd5f60cbc6e216107bed987dbef478956a1be8e83a56e1084a1017f78ec9aae02aaf11c5f369c78d520cd48ce6c2dd6cec0c309ee74b415fdd859ebbd48fe050a59814d0e667a496e52d35a95f3d05c36d07b3eae5b5c50b536c4072d5659dfcad8d43a0c1c2d76300f24ad1a711d0014eec94c1e2c773c494e5ec6dd107cb995cde218eb010d99ed948db5259a8681e80e2b2fae24f65602ec809fdf27b24534e380b967070a6ecf66814b03deffe2db3db63660b22f0656047ee74ab231d40ee5a811d0f40192e73614d898d124eb9954664b05da82759f296167b79db74f588c969bef6552200e31cd2f51545a21b2cd6123fa51fbd7c3df80e184a11f2227b3cffd7a5d8ea3f6e89fd20d892bcb", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000012400)='PMM', 0x3, 0x20000}], 0x0, &(0x7f0000012f00))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x103)

08:33:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  823.926986] audit: type=1400 audit(1730018000.118:141): avc:  denied  { map } for  pid=8372 comm="syz-executor.1" path="/proc/8372/cgroup" dev="proc" ino=21216 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
[  824.102194] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  824.107008] EXT4-fs (loop4): get root inode failed
[  824.107790] EXT4-fs (loop4): mount failed
[  824.846489] EXT4-fs warning (device loop3): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount
[  824.846489] 
08:33:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:34 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:34 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:34 executing program 1:
r0 = creat(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[])
creat(&(0x7f0000000100)='./file0\x00', 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x7, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@loopback}, 0x14)
setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4)
fsmount(r0, 0x1, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)={0x16, 0x17, 0x2, {0xfffffffffffffeaa, './file0'}}, 0x16)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03)
r3 = dup2(r1, r2)
fcntl$getown(r3, 0x9)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RREMOVE(r4, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7)

08:33:34 executing program 6:
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/if_inet6\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r3 = accept(r2, 0x0, &(0x7f0000000140))
fcntl$setown(r3, 0x8, r0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200))
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
io_pgetevents(r4, 0x4, 0x8000000000000db, &(0x7f0000000040)=[{}, {}], &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:34 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  838.282924] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  838.284706] EXT4-fs (loop4): get root inode failed
[  838.285358] EXT4-fs (loop4): mount failed
08:33:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:34 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:34 executing program 1:
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x0, 0x8})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000400)=ANY=[@ANYBLOB="6769643d55c39ee5b2029e954d4a27d4b0deb9c5ee5b339994437992513b5c", @ANYRESHEX=0x0, @ANYBLOB="09b3a91c92f19fecbbf073ad48f69577706c9113a228636bf1989b3d11e9f5d30b765257d4ad17eee97bd34702e143eb03aa5777995adc29205d1ecf8d65849ec59dd3a76f057e1684ea6d4abea3cc45dbc8b3d0a9a2ff63571ccaa6bfa06529d63bb0f9eb79a54d4fad04999df95073d3e07c23378ce28e4c23f0c291449578555c2ddd4c971d6a0075217e79a48b47e2e11a633f967a69dc3b31a019e09aa01539072acf8e27a16893151fb82d3dcf1ffdf5914f68d0397d3f"])
syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x9b7a, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x1c210, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x9)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3)
r0 = pkey_alloc(0x0, 0x0)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)

08:33:34 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  839.310427] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  839.312629] EXT4-fs (loop4): get root inode failed
[  839.313443] EXT4-fs (loop4): mount failed
08:33:35 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:35 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
io_setup(0x4, &(0x7f0000000040)=<r1=>0x0)
io_pgetevents(r1, 0x100, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)={&(0x7f0000000140)={[0x9]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[  839.524341] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  839.527200] EXT4-fs (loop4): get root inode failed
[  839.527886] EXT4-fs (loop4): mount failed
08:33:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:33:49 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:49 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x301000, 0x80)
ioctl$TCFLSH(r1, 0x5427, 0x0)
io_submit(0x0, 0x0, 0x0)
close(r0)
r2 = fcntl$dupfd(r0, 0x406, r1)
openat(r2, &(0x7f0000000140)='./file1\x00', 0x10100, 0x142)
io_setup(0x3ff, &(0x7f00000000c0)=<r3=>0x0)
io_pgetevents(r3, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
ioctl$TIOCEXCL(r1, 0x540c)
socket$netlink(0x10, 0x3, 0x1e)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "65d0ef0145e9a285", "1af6efbb7aa1566847fc007a2f840ec1", "6407a6d8", "3120ba0e0f3e3b10"}, 0x28)

08:33:49 executing program 1:
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x9, 0x9, 0x9, 0x0, 0x5, 0x80000, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0xa800, 0xfffffffffffffff7, 0x56de, 0x9, 0xa279, 0x40, 0x8, 0x0, 0xb9, 0x0, 0xff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffff, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008801)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200))
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x8, 0x401, 0x0, 0x0, {0xd, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004}, 0x8041)
sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
setsockopt$packet_int(r8, 0x107, 0x3, &(0x7f0000000240)=0x4, 0x4)

08:33:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:49 executing program 2:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:33:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:33:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  853.473145] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  853.474885] EXT4-fs (loop4): get root inode failed
[  853.475783] EXT4-fs (loop4): mount failed
08:33:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:33:49 executing program 1:
getresuid(0x0, 0x0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = getgid()
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x204000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}], [{@appraise_type}, {@measure}, {@uid_gt}, {@subj_user={'subj_user', 0x3d, '/proc/self/attr/current\x00'}}, {@uid_lt={'uid<', 0xee00}}]})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x2230, {0x40, 0x1, 0x3}, 0x0, r0, r1, 0x1, 0x2, 0xfffffffffffffc01, 0x5028, 0x5, 0x3f, 0xcd4, 0x100010000000000, 0x8000, 0x0, 0x2, 0x3ff, 0x7, 0x3, 0x7}}, 0xa0)
add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="7f80", 0x2, 0xfffffffffffffffe)

[  853.729900] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  853.732065] EXT4-fs (loop4): get root inode failed
[  853.732872] EXT4-fs (loop4): mount failed
08:34:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:34:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})

08:34:03 executing program 6:
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x0, 0x590000)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x303e, 0x501000)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x1e)

08:34:03 executing program 1:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8501)
fchdir(r1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="5b54e8e5b22d"}, 0x14)
r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc008}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xc4, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x40}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff2cdb}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x715bac93}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)

08:34:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  867.584324] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
08:34:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
r5 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r5, r4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000010}, 0x40)

[  867.586032] EXT4-fs (loop4): get root inode failed
[  867.586775] EXT4-fs (loop4): mount failed
08:34:03 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read(0xffffffffffffffff, 0x0, 0x25)
pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xffff, 0x0, 0x8}, {0x9, 0x0, 0x5, 0x20}, {0x2, 0x81, 0x80}, {0x4, 0x0, 0x5, 0x5250e802}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d8798"])
ftruncate(0xffffffffffffffff, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
pipe2(&(0x7f0000000280), 0x0)

08:34:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000010000001800efd9b6fb04972c23fcba018670dc3992d9029b8543f4574c33f560701430236c2151719c8b750a6d1afb33d1b2e0d64f618ca9014062a72ff1d29692d97e3a54a0d02f472e98e3f705a2e07d990b4f74b4ff8b4627deda69883c81a6b4c857c97804ac7212185b254dfcc74e3db519ec704895128e159958179bc50f09000000000000005ad12728e3c62fa477b45c64740be8b480f2880368e21c3ef9ebc05bfb5c7bef28abd01bfe7a2667ea8a83980388cabce569fd93f4493c12836c8d540a1330bafbd5070c75b8e9d472e043a050e735cd994588f8a0712b9cf982f61ff759cb8ae3086d836fe89c79f6f798c44b9142f06225ef5d6a91005d3d8fa297d46ece9788844a843d4448fa6000f8225c1f0059776b3e1ea940b5087966f75b33723f03b185bf10c1bb4ee82dbd03913034a7937691c4cda80c66d6b17e143b66afb9c09f404debe46fdfb81ae5c93946d3bede83b4a9efd5f60cbc6e216107bed987dbef478956a1be8e83a56e1084a1017f78ec9aae02aaf11c5f369c78d520cd48ce6c2dd6cec0c309ee74b415fdd859ebbd48fe050a59814d0e667a496e52d35a95f3d05c36d07b3eae5b5c50b536c4072d5659dfcad8d43a0c1c2d76300f24ad1a711d0014eec94c1e2c773c494e5ec6dd107cb995cde218eb010d99ed948db5259a8681e80e2b2fae24f65602ec809fdf27b24534e380b967070a6ecf66814b03deffe2db3db63660b22f0656047ee74ab231d40ee5a811d0f40192e73614d898d124eb9954664b05da82759f296167b79db74f588c969bef6552200e31cd2f51545a21b2cd6123fa51fbd7c3df80e184a11f2227b3cffd7a5d8ea3f6e89fd20d892bcb", @ANYRES32=<r4=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r5, r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r2, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r5, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r7, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])

08:34:04 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  868.261009] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  868.261343] EXT4-fs (loop4): get root inode failed
[  868.261350] EXT4-fs (loop4): mount failed
08:34:04 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read(0xffffffffffffffff, 0x0, 0x25)
pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xffff, 0x0, 0x8}, {0x9, 0x0, 0x5, 0x20}, {0x2, 0x81, 0x80}, {0x4, 0x0, 0x5, 0x5250e802}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d8798"])
ftruncate(0xffffffffffffffff, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
pipe2(&(0x7f0000000280), 0x0)

08:34:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:34:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  868.475312] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  868.476996] EXT4-fs (loop4): get root inode failed
[  868.482918] EXT4-fs (loop4): mount failed
08:34:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)

08:34:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:17 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read(0xffffffffffffffff, 0x0, 0x25)
pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xffff, 0x0, 0x8}, {0x9, 0x0, 0x5, 0x20}, {0x2, 0x81, 0x80}, {0x4, 0x0, 0x5, 0x5250e802}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d8798"])
ftruncate(0xffffffffffffffff, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
pipe2(&(0x7f0000000280), 0x0)

08:34:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:34:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x20000006, 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000080)={&(0x7f0000000040)={[0x1]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:34:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  881.823256] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  881.832201] EXT4-fs (loop4): get root inode failed
[  881.832915] EXT4-fs (loop4): mount failed
08:34:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})

08:34:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})

08:34:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

08:34:18 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x7, 0x3, &(0x7f0000000500)=[{}, {}, {}], 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={[0x7ff]}, 0x8})
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
io_setup(0x1000, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
io_submit(r3, 0x2, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xd38, r4, &(0x7f0000000140)="41b389d1ad39806c843cb436cb8923469cb03ceae502b869365c5869f23ac7f40c5e20902da80744470b0d8ae0fbd2871d", 0x31, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000300)="b7a7cdd756258c0431a9d4c7854ca1b282528692fd870f94ec8aacc501903d5f8bd3b3cbc93f3daba16ebaa46273ebf37489ef8bfc90563d84f78314916fd873b6a73639351c6c05e6bf06f032e17e0f2b4a64adba1159768f198f5d4e197525c3ae85295293344b0adf132a3f37d4a04b675ca748598ee25d67db0939844f2901597aa8f73708dae17596fd1f78d4501f16d5825c099a82787f5d3bda", 0x9d, 0x100000001, 0x0, 0x2, r0}])
io_pgetevents(r2, 0x4000000006, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r5, &(0x7f0000000000)='1', 0x1}])
io_getevents(r6, 0x0, 0x1, &(0x7f0000000600)=[{}], 0x0)
io_setup(0x6, &(0x7f0000000440))
socket$netlink(0x10, 0x3, 0x1e)

[  882.107448] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  882.111249] EXT4-fs (loop4): get root inode failed
[  882.111928] EXT4-fs (loop4): mount failed
08:34:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})

08:34:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  882.439349] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  882.456762] EXT4-fs (loop4): get root inode failed
[  882.457992] EXT4-fs (loop4): mount failed
08:34:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:34:32 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r0, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3304, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

08:34:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000000)='1', 0x1}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r5=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r6, r6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r6, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})

08:34:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x1e)

08:34:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:32 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  896.760586] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  896.762657] EXT4-fs (loop4): mount failed
08:34:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {r0}}, './file1\x00'})
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@cachetag}, {@version_u}, {@msize={'msize', 0x3d, 0xf4f}}, {@privport}, {@msize={'msize', 0x3d, 0x100000001}}], [{@hash}, {@subj_role={'subj_role', 0x3d, '[zU.\'\x11'}}, {@fsname={'fsname', 0x3d, '/dev/snd/seq\x00'}}]}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x202200)
write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xc8, 0x3f, 0x81, 0x7, 0x2, 0x6, 0x81, 0x103, 0x40, 0x5a, 0x81a2, 0x7, 0x38, 0x1, 0x1, 0x1}, [{0x1, 0x80000000, 0xe3f1, 0x10001, 0x9, 0x400, 0x1, 0xf4}], "4b0dccd0bb6478569266824b9c08ac922f3f44878640a669027b61eccbbc46de52c2ebd4887b55f996e44e6fbb792e61612c5c82805cbc38efd7cb93e7a0410ff5690026fea83e240af5423581d2e1b776dd7375e0cdd30b4bad98ad9bb9cdc209816ac7df6013d47a820833491eb7d6ffe18707a01960eb66e8e6e468b3bab644b1a8e0c4595f240cb7", ['\x00']}, 0x202)
socket$netlink(0x10, 0x3, 0x1e)

08:34:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

08:34:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r0, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3304, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000010000001800efd9b6fb04972c23fcba018670dc3992d9029b8543f4574c33f560701430236c2151719c8b750a6d1afb33d1b2e0d64f618ca9014062a72ff1d29692d97e3a54a0d02f472e98e3f705a2e07d990b4f74b4ff8b4627deda69883c81a6b4c857c97804ac7212185b254dfcc74e3db519ec704895128e159958179bc50f09000000000000005ad12728e3c62fa477b45c64740be8b480f2880368e21c3ef9ebc05bfb5c7bef28abd01bfe7a2667ea8a83980388cabce569fd93f4493c12836c8d540a1330bafbd5070c75b8e9d472e043a050e735cd994588f8a0712b9cf982f61ff759cb8ae3086d836fe89c79f6f798c44b9142f06225ef5d6a91005d3d8fa297d46ece9788844a843d4448fa6000f8225c1f0059776b3e1ea940b5087966f75b33723f03b185bf10c1bb4ee82dbd03913034a7937691c4cda80c66d6b17e143b66afb9c09f404debe46fdfb81ae5c93946d3bede83b4a9efd5f60cbc6e216107bed987dbef478956a1be8e83a56e1084a1017f78ec9aae02aaf11c5f369c78d520cd48ce6c2dd6cec0c309ee74b415fdd859ebbd48fe050a59814d0e667a496e52d35a95f3d05c36d07b3eae5b5c50b536c4072d5659dfcad8d43a0c1c2d76300f24ad1a711d0014eec94c1e2c773c494e5ec6dd107cb995cde218eb010d99ed948db5259a8681e80e2b2fae24f65602ec809fdf27b24534e380b967070a6ecf66814b03deffe2db3db63660b22f0656047ee74ab231d40ee5a811d0f40192e73614d898d124eb9954664b05da82759f296167b79db74f588c969bef6552200e31cd2f51545a21b2cd6123fa51fbd7c3df80e184a11f2227b3cffd7a5d8ea3f6e89fd20d892bcb", @ANYRES32=<r4=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r5, r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r2, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r5, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r7, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])

08:34:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)

08:34:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:33 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r0, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3304, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[  897.578913] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  897.587487] EXT4-fs (loop4): mount failed
08:34:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)

08:34:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:34:47 executing program 6:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0)
recvmmsg$unix(r1, &(0x7f0000003080)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/72, 0x48}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000018c0)=""/73, 0x49}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/13, 0xd}, {&(0x7f00000019c0)=""/185, 0xb9}, {&(0x7f0000001a80)=""/20, 0x14}, {&(0x7f0000001ac0)=""/70, 0x46}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x7, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d40)=""/223, 0xdf}, {&(0x7f0000002e40)=""/251, 0xfb}], 0x2, &(0x7f0000002f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c050000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}], 0x3, 0x40, &(0x7f0000003140)={0x0, 0x3938700})
io_setup(0xe6, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000300)="0803266ba10c66c700b5e31ca9715104537b730a250b0de4632a93f3b04e00ac8823b2d01c71b7706da40e0884f399ebc096909caa93bd0ec0ee5b7b5de6c9d094c23a1e2304427e1c69df8e57a57de65fe235d792e1f73c583585842f76951aa69110881e81cc2d4422b9523c47db0ab6af352ce9fba9d5542b480cb0554ec39b9146542fc710ea50542b8b4d4b270ea93a4acd2d85e8bc7f091dbd44e36eae211df224", 0xa4, 0x5}])
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:34:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)

08:34:47 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:34:47 executing program 0:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  911.428761] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  911.429744] EXT4-fs (loop4): mount failed
08:34:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:34:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:34:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})

08:34:47 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000040))
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:34:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)

[  911.868340] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  911.870826] EXT4-fs (loop4): get root inode failed
[  911.871551] EXT4-fs (loop4): mount failed
08:35:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:03 executing program 0:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

08:35:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)

08:35:03 executing program 6:
syz_io_uring_setup(0x3167, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r5, r5)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r5, {0x6, 0x6}}, './file0\x00'})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r7=>0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresuid(0xffffffffffffffff, r8, 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x88400, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r8}}, {@noextend}, {@version_u}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x2}}], [{@dont_hash}]}})
io_pgetevents(r7, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
bind$bt_sco(r9, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
socket$netlink(0x10, 0x3, 0x1e)

08:35:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

[  927.314985] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  927.317976] EXT4-fs (loop4): get root inode failed
[  927.318798] EXT4-fs (loop4): mount failed
08:35:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

08:35:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

08:35:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000010000001800efd9b6fb04972c23fcba018670dc3992d9029b8543f4574c33f560701430236c2151719c8b750a6d1afb33d1b2e0d64f618ca9014062a72ff1d29692d97e3a54a0d02f472e98e3f705a2e07d990b4f74b4ff8b4627deda69883c81a6b4c857c97804ac7212185b254dfcc74e3db519ec704895128e159958179bc50f09000000000000005ad12728e3c62fa477b45c64740be8b480f2880368e21c3ef9ebc05bfb5c7bef28abd01bfe7a2667ea8a83980388cabce569fd93f4493c12836c8d540a1330bafbd5070c75b8e9d472e043a050e735cd994588f8a0712b9cf982f61ff759cb8ae3086d836fe89c79f6f798c44b9142f06225ef5d6a91005d3d8fa297d46ece9788844a843d4448fa6000f8225c1f0059776b3e1ea940b5087966f75b33723f03b185bf10c1bb4ee82dbd03913034a7937691c4cda80c66d6b17e143b66afb9c09f404debe46fdfb81ae5c93946d3bede83b4a9efd5f60cbc6e216107bed987dbef478956a1be8e83a56e1084a1017f78ec9aae02aaf11c5f369c78d520cd48ce6c2dd6cec0c309ee74b415fdd859ebbd48fe050a59814d0e667a496e52d35a95f3d05c36d07b3eae5b5c50b536c4072d5659dfcad8d43a0c1c2d76300f24ad1a711d0014eec94c1e2c773c494e5ec6dd107cb995cde218eb010d99ed948db5259a8681e80e2b2fae24f65602ec809fdf27b24534e380b967070a6ecf66814b03deffe2db3db63660b22f0656047ee74ab231d40ee5a811d0f40192e73614d898d124eb9954664b05da82759f296167b79db74f588c969bef6552200e31cd2f51545a21b2cd6123fa51fbd7c3df80e184a11f2227b3cffd7a5d8ea3f6e89fd20d892bcb", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)

08:35:03 executing program 6:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x5, 0x0, 0xfd, 0xb, 0x7, 0x3}, 0x20)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:35:04 executing program 0:
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:04 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:04 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:04 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

[  928.222776] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[  928.224329] EXT4-fs (loop4): get root inode failed
[  928.225065] EXT4-fs (loop4): mount failed
08:35:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)

08:35:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[  928.572702] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  928.574197] EXT4-fs (loop4): group descriptors corrupted!
08:35:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:18 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:18 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x183000, 0x80)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = socket$netlink(0x10, 0x3, 0x1e)
r3 = dup(r2)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup2(r6, r6)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r8, r7)
dup2(r3, r7)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040), 0x4)

08:35:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x8)

08:35:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])

08:35:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  942.962014] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  942.963237] EXT4-fs (loop4): group descriptors corrupted!
08:35:19 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)

08:35:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:19 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])
io_pgetevents(r1, 0x40000000006, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000040)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
signalfd4(r0, &(0x7f0000000200)={[0x6]}, 0x8, 0x0)

08:35:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)

[  943.237711] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  943.240421] EXT4-fs (loop4): group descriptors corrupted!
08:35:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:32 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:35:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:32 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:32 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x40, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x20000003]}, 0xfcdf})
socket$netlink(0x10, 0x3, 0x1e)

08:35:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000010000001800efd9b6fb04972c23fcba018670dc3992d9029b8543f4574c33f560701430236c2151719c8b750a6d1afb33d1b2e0d64f618ca9014062a72ff1d29692d97e3a54a0d02f472e98e3f705a2e07d990b4f74b4ff8b4627deda69883c81a6b4c857c97804ac7212185b254dfcc74e3db519ec704895128e159958179bc50f09000000000000005ad12728e3c62fa477b45c64740be8b480f2880368e21c3ef9ebc05bfb5c7bef28abd01bfe7a2667ea8a83980388cabce569fd93f4493c12836c8d540a1330bafbd5070c75b8e9d472e043a050e735cd994588f8a0712b9cf982f61ff759cb8ae3086d836fe89c79f6f798c44b9142f06225ef5d6a91005d3d8fa297d46ece9788844a843d4448fa6000f8225c1f0059776b3e1ea940b5087966f75b33723f03b185bf10c1bb4ee82dbd03913034a7937691c4cda80c66d6b17e143b66afb9c09f404debe46fdfb81ae5c93946d3bede83b4a9efd5f60cbc6e216107bed987dbef478956a1be8e83a56e1084a1017f78ec9aae02aaf11c5f369c78d520cd48ce6c2dd6cec0c309ee74b415fdd859ebbd48fe050a59814d0e667a496e52d35a95f3d05c36d07b3eae5b5c50b536c4072d5659dfcad8d43a0c1c2d76300f24ad1a711d0014eec94c1e2c773c494e5ec6dd107cb995cde218eb010d99ed948db5259a8681e80e2b2fae24f65602ec809fdf27b24534e380b967070a6ecf66814b03deffe2db3db63660b22f0656047ee74ab231d40ee5a811d0f40192e73614d898d124eb9954664b05da82759f296167b79db74f588c969bef6552200e31cd2f51545a21b2cd6123fa51fbd7c3df80e184a11f2227b3cffd7a5d8ea3f6e89fd20d892bcb", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r3, r3)

08:35:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:32 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  956.968797] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  956.970037] EXT4-fs (loop4): group descriptors corrupted!
08:35:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

08:35:33 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:35:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  957.181204] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  957.182503] EXT4-fs (loop4): group descriptors corrupted!
08:35:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)

08:35:33 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:35:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:46 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])

08:35:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:35:46 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x1ce)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000000)={&(0x7f0000000080)={[0xfffffffffffffffe]}, 0x2c})
socket$netlink(0x10, 0x3, 0x1e)

08:35:46 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:46 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:46 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:35:47 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:35:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  971.080045] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  971.081340] EXT4-fs (loop4): group descriptors corrupted!
08:35:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:35:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)

[  972.114979] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  972.116205] EXT4-fs (loop4): group descriptors corrupted!
08:36:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:03 executing program 6:
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
syz_open_procfs(r0, &(0x7f0000000040)='oom_score_adj\x00')
socket$netlink(0x10, 0x3, 0x1e)

08:36:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:03 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:36:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[  987.077320] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  987.078747] EXT4-fs (loop4): group descriptors corrupted!
08:36:03 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:36:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:03 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r6, r5)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x2}}, './file1\x00'})
dup2(r1, r1)
fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000300)=@v2={0x5, 0x3, 0xb, 0x1, 0xea, "5e87be0006f52670ae151dab6bf5d67fc273f0a3b86dc9b88865cd1ca8160afb20b9bcc48293f2f4ba3193dbc9ea072828a3fe74004d54fb4a012a07f8367928224fbb5193e95b8c4e4217ece8d614ac1204278a08cf759b8f6379dc9f12ff68e6b3a545af0054fe6040db04bc07186228ade389a60af48f9e4a0f05b8729f9964209a9ae41082db24a003a502c136b9ddc1ea116edaec491cfbf70571ac467e4cf8b1781813cd94ea150124af3fb7be42272b01d0d213145dd914c86ae99374bb351c3fb962360f4f94bdc244cf273c7db55bdd74169b70ec1672500d22fe1884305aad356b8ede45fa"}, 0xf3, 0x2)
io_setup(0x3ff, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x1e)

[  987.513084] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  987.514424] EXT4-fs (loop4): group descriptors corrupted!
08:36:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:17 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:36:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_pgetevents(r2, 0xd612, 0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x1e)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
r5 = memfd_create(&(0x7f0000000200)='(:(+:]\x00', 0x0)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = dup3(r3, r0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r11 = dup2(r10, r10)
r12 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r12, r11)
r13 = syz_mount_image$iso9660(&(0x7f0000001940), &(0x7f0000001980)='./file1\x00', 0xd6c4, 0x8, &(0x7f0000002e40)=[{&(0x7f00000019c0)="f41d8b7253d9a055056a40c83700be87e41235bf8e117489b4439bd82649e561f3131f3aba7578307828e8afe4923bf064783812e528e6ec47a151b908412afd243a0344157d4aca4595f4f0c33d47a351f5c355fd3fc8fe681b3442e8d63a0997aab472cbe64c7fb2ce816153e93ce11d8cad43f879e4b7a4a205db2877209d6f0fbafeba5f5013291777e50831cbb63f912efb69de954d0c9af1731d43d69b30e0b0762d2eb731b17e2138e5ef41ae495a32d7e76263e30bf353422571f3405852b3a52be20615520797336cc98bb0cbd5fb2c2ffd3c60cfdf40b0d5", 0xdd, 0x1}, {&(0x7f0000001ac0)="f862ea6d8a656463b347527f60b7334476b45d82189def4a328265fe459103523ca5753ff94e7f5b9ad0a371a70feb12fb5b55c5f773b7bd1b7924765d9753efe8b206df1f0e0943ffab2f4582747ef8af031d0aae32e84d4088b5fd749ffa4a28473c5f23cd0059611aa5ae0197fee35e3cd7aa33e79ac8b5292997ec976c54d3300977", 0x84, 0xfffffffeffffffff}, {&(0x7f0000001b80)="f2d3f6", 0x3, 0x6}, {&(0x7f0000001bc0)="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", 0x1000, 0x6}, {&(0x7f0000002bc0)="63a7c99b9c998704078231949efc400339fccafa6621504df1a2ff8d944f4c70792ced785028131122c26ce6997850fdc307e6a0a2459978699df393835200e58bdf571174a41ffad21b68d768c09e6544f84b13ea0c70a04541363715304fa30ff67d08388a21198f91386dbc4a240b9a14c7d86378492c0145a613223658e974a5d1c412ab2034a766eb1a9b501e12916b321b7c54cf8f408e4453abfdfda4f1e1f0d5c85d136458b6c7302076", 0xae, 0xe4}, {&(0x7f0000002c80)="4186a897ab37334c30d7bafa3485f7a94019208a664b0e7357ca841e97c2af7a02809557b39a1688fba9620eef644a057418bd9dbac16f9095204d82864ca545a10be0e9febba34e11b9111e08f32734f10e69c0122aa2fcbc8073647999dc37200ca8085feab2dff00fa5d78895eaa2bb170e4664b6cff0e6019ed04d7eb2830de31b9765b1e1773b", 0x89, 0x401}, {&(0x7f0000002d40)="94be239c473149b97bc109ad280c0452702a904cfb24775533f9b3f4ffffccfac918bfdd2dc607bedd14d2faf1a11a9a98f5d1402268e7106a8ba3e616b5026a1b9439322499a1edc9f8835ca540367ac8be91f9390d966e221406b03658b7178821f744c2f7bc633486c5ffb659a9b5c469", 0x72}, {&(0x7f0000002dc0)="94e5edc4e4e14ababcb27eb2100007347e0813cda53bd22efd1acd2d4adfde8c1295f3d5882b24702e9240ee6ecf39fd2d94d6faa5d4aeff43b73c2f724d375d6705fc508a868fddc956c38705e6746142403d054d1e59a82e05a86fe2e0e9c6c121c40d2679bc2fe9a1c993078601ca3d5878e97edac4a8369fa0ad4eeb63", 0x7f, 0x3}], 0x20000, &(0x7f0000002f00)={[{@hide}, {@map_normal}, {@map_acorn}], [{@smackfshat={'smackfshat', 0x3d, '-'}}]})
io_submit(r1, 0xa, &(0x7f0000003140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3ff, r3, &(0x7f0000000300)="5dc1d72f989648d8e65e4846de4845f96827841b1a20b3757237c431c1a04d4404588ee19464fb3eefe557a68cc5b59ea8080f741f63e08389ddeb2e5d13353a7a928d4e53927aecd815e76d0b65d82b6f2fb1f978c4a11646c44f121adc1affa67a620b5ca6e033f8caf31ecad197712435a0bd1c27c90ccb256a0148aa1350fcb50fe7517dd794f35447bf953b4b34c5a68b666d265de5ea4019fe31b986dcac12638f21d1f4151b1de8182bd0a7634a85cb54a0bea4cee41b4f7b9ee33bc17e3d9fe6bd55a0076f17294b579cf4665e67961a5934e14829c4b28fa07c528cc5c4a570eb49d0f1a6c90d33", 0xec, 0x5, 0x0, 0x1, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3ff, r3, &(0x7f0000000400)="3abb64818381cdeccedf0dec03837e7b461aa8103d5a19b7aafbb620eacbd4ba1eb4712da3a5a736e53c5de38233cc55ee11c37fff27f4e0ad5e2edc05fb62231c0e4813d6b427ea3e7b29d9648ba7f637f4d14826b5d68539372c4e6fe947daec5d5b88bf83903530a2ac179bb3b74688106f7a4a464a04b1a68b88bcfb190b0c0a24370f0480c2a56291032d63aae39cf16ab98ed0925e897b18e1e65d09f6bf516342728272ca6ec0156a4ae0f8ae726ec6950f6d0f9f6eed376a9e00526dfea69442c19ca67c7186d43c048e6e0b90602d4590eaaa16fe0555c5583b73c54e80eaa05168da0cbf798d6ca9a7f205a5205c", 0xf3, 0x4, 0x0, 0x1, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000500)="285dfc91d3c3ac1bad78cf4ed96dd3486a7837f037d13171423c9490e805dc900910383dbf8b764c21fc4c420d6447c9122948ae2effc863bc3a53b4a490ebbc1370311cc46ed2cdb32b12521484be99ec9bb6fbd779937442d5bb81c257c7af68e7dcbd6862b544bcc7bba7744ffdd32335320eb9c1c2368ea7595f9d9f23e81a6730b1c86a2f9d935bdc15b50bcfd495e271a35733e18dd86b021cf843766b4c65e93891acdb6e15986c8f968fa2db9379", 0xb2, 0x81, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000005c0)="77ab4a62a8351531cb81570985881c6cb7", 0x11, 0x0, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000000640)="672e618a2dae65fd6ee54e243aa1ea95829aaad87e277377f2b3d19461ebbfbd255aaab5a17274534bd359e3598a2cf6d693cb4fae5ddcc0a65ace199ef1c71d2867c5c85e", 0x45, 0xbd, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0xfff9, r0, &(0x7f0000000700)="337057789651cd0aef841badd0ebdcb6155bbdd9b43e2d11a439abfb0d28b7b3c4602737f48339559515c8a29f2c20dbee6e6653d3c0d65134c971b0c3f1b434dea32ef6f522412821059c50b652e7485ed445b874e042626662c3372ed3d25be9113a86d1f139b60b4f271ad7ecdedfd9ce0b40b4684e43d95e765e25ebdb30b4b3a07a206eea", 0x87, 0x0, 0x0, 0x1, r0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, r6, &(0x7f0000000800)="87a4c2f172328bf5067f1d8ce4c51736b77fe7ede5e36e3d8a1bfc7fc261b4227a60ad5f5a325d3066bb0475a7c85cf9a901a6", 0x33, 0x400, 0x0, 0x0, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x3, r11, &(0x7f0000000940)="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", 0x1000, 0x2}, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x7, 0x9, r13, &(0x7f0000002f40)="94f083165da3342c13868305c88c8dfe5e731f2e5fd4454cf06efa56ac0e2a9e3f34ab5565fa0d03c4dd077e8e4991202ceff70a2de87f8f1fa05dae178c320a258144da6d277c9f1351e2a02751979f528eba36fe1321d69df84ec03727936606b3e13cbe4f20d0e83aed3225b5b38ee75acc57f75e36f1e527f1cddee8d79b84a5d9f990b433024ca1be48996aec40db4a10a88fe9c364c8ba68c4d98f3d9260b12ad2f6f2e95ffd8a7630632e5d8ec6b33ab6ba9f8691112f278800890fb7dca16f96c837e746663ee40f79131bc7ac64085d83d03f0fa70f14e384b8528eb0e90fbaa1a27d5e97986263f70e31436e39e5eff8", 0xf5, 0x40, 0x0, 0x2, r0}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000003080)="0d034ba7c34a770163ffb45f0d7bff10a0dd04f8d4177e1be6e0746c3070c1cca46ce7de5509ee6d01b35f804b5ebd7cc4a0424e87953480f1847b72ed22760ff486886d2afd12eed167100e9d64ed9b24e3c7b337aff13a6b8030be72481e9b9f51e56f3d0e13395b01bb2b00038279894e9e5c5635f56a7c15604f42d2", 0x7e, 0x5, 0x0, 0x2}])

08:36:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1001.416417] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1001.417651] EXT4-fs (loop4): group descriptors corrupted!
08:36:17 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:17 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)=ANY=[@ANYBLOB="0100dbee6399aba6ba9b0000", @ANYRES32=<r2=>r0, @ANYBLOB="06000000000000002e2f66696c656b00"])
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x10003}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r11 = dup2(r10, r10)
r12 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r12, r11)
io_submit(r1, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x39b, 0xffffffffffffffff, &(0x7f0000000040)="2342b16e985536eb038b9414c99877e15c370e80fe5d911270e99803e7305bf2de02e2af238ba60897c7e46abc48132271", 0x31, 0xfffffffffffffff9, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x9f6, 0xffffffffffffffff, &(0x7f0000000300)="525952261fe79919e8e2c10d7950c2bab8bb7ff353559da6e296b9131ae95ef800d8c5d92aef727302782714d42420485a77f6060b9de574918c394dd049efbab5a17c44d594b248dc2633ff3487017552cebe34b4bbe05b06f2e9df97c4221799645dbb52eddc224f6409a2d9c12f6494c190b0472d81c7c542a8ddbbfc727809572d3c236d0f257accae30d471072d3b7af43e9d08", 0x96, 0xfffffffffffffbff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000200)="27b2fca18fdc1ebc3b3f3f315d25c68fb0dfdd82c0d346b7d9b421cbde052f78bd5c0490712700427f7c4628f4dc40d1188ab3db36fb55ef8c23f3", 0x3b, 0x3ff}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000000440)="6d73f0a4abff67e29b550d83bf709d5a704794a181ff5ea3849aa1516c9f107ecff1b03cc0013cc9a0420524dbf2d02643f3bd7968100a8ebf2ca60081f603593075d969b7cd9806bf8aeec3f9999d90d719ef90f6d9198770f50956190846de50a4e87f7884de5f88edd8c8a6ae", 0x6e, 0xffffffffffffffff, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000500)="9293f26e420e07997922b985008df3d47784ad09b87d4a6f207296ee53e909cd493c26bffeec2ecc79047aff30599a73e328a8446694dfa5c56cfe0b35ae191edd278b4478955492f5b9f92dc3dbe9a7eb3c2749e4cf0d115ff2a9fb425ddc84e5cc8955b3dc00503d125be40f3040f5316676ba62b080207326486c5d315285deb7c0329593896f7713dab17d35cc7a6bc5a075c0034f356891be", 0x9b, 0x2, 0x0, 0x1, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000600)="2a47ace32d9ccad2952ed0a3625d5a2d4fee15192403a470f76fbc728fcd41fe098f404b42bdd3afb1d1487927605cd717fa105e7552a544c14afd7cf2c7e78055125656fdcefbbf8b9d66fdaac3ca9b94d51d222e633af9273c6ea1e907635b62720b2934497fded9eb6b05db5640f382168c1034d0cf4647149930d60c69f5067076065803e95e6ca9c5cd3ee318a30df036c5fa4714d0d560007b87dbf5f51068d43ffd4a427f87c491da54f702ef58df3ec4c1643a07f4ceac1e9b051139b5a4a351f451ab823cff0ec54e9d55a60d6c34e63a85ed622f9bc048dbfd065fb5a8", 0xe2, 0x9, 0x0, 0x3, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000000780)="1c4210fdab0062882ef2f03d481d91477c91761fc519a0a365a0a4a4ce2c3ce95f18266c337a0052322cda5a4c7aec5b191688c3b3b5dc474f21323ed16306fe50f202f98849d3d4a196553fb48c011debaee504cf75ad50c78d3a2127d79a27c194e5bf105c17c3d43b842568705ec9d04dc0f332e9a96a9620f3cf2f898ecef249a9a3daf5a46c88e072d818bbe348b1f80011474d19dcb5ad36d0c063c9b5574dcee7754c0dbcf52b294c089392b3d766e1caef6cb872b8483e412354f017ed9bd9fa339ad7bc0b191531e6ccf1b6583e223d220f24c95a883e6859bd8af1577e0ca7cc31e4695f287c711045cb272b47857c", 0xf4, 0x80, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x1c, r0, &(0x7f0000000940)="57c4ad9fe28578f2d4a305add99812d1c27dd5ca700f71", 0x17, 0x0, 0x0, 0x1, r0}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000009c0)="597d41f00fa16dd779118ec5fc261bcf5eeab774441ab86a23773f0b6aa1fffb8499acdfd06fd1696918fcce22e56225b050a3d24a89e6776655ab91352d3352988ddd7fc1fc2407a68207af46baa4ebab0d5a731d7181625b9387213bc53e1ff54ad0e4", 0x64, 0x0, 0x0, 0x2, r6}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0xfff7, r0, &(0x7f0000000a80)="e4bb56d175587bb789b113ad4ee84df1995c3b02a0db089890a2884b43e346a8ce5925b2c439d1258df13dd65e212b057a87c6c19336a34f07d23f210de2efb82b1f1c595bdb91e9d115f4190f601918e57b1b13251ae8e0a89715d9cbde7847404b30d199e66cd777a9b33aecf0ed92de3f1cdcfad33dc7a3942f5ba7c829f18623def529ca9f185d5c9db214ff4dcb892d284552125437a8da13f1ffb185b7cdbb6e0f94d59e5a1452314876479948ed551e890916d3a940c03cd1c80949b022d0af8b997e6e", 0xc7, 0xffffffffffff2bad, 0x0, 0x3, r11}])
socket$netlink(0x10, 0x3, 0x1e)

08:36:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1002.070978] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1002.072155] EXT4-fs (loop4): group descriptors corrupted!
08:36:32 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:32 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:36:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
io_pgetevents(r2, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)={&(0x7f0000000140)={[0x3]}, 0x8})
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:36:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:32 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:32 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1016.384406] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1016.385530] EXT4-fs (loop4): group descriptors corrupted!
08:36:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:32 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:36:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
fadvise64(r0, 0x10001, 0xfff, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0x0)
syz_io_uring_setup(0x7fa1, &(0x7f0000000300)={0x0, 0x891d, 0x0, 0x3, 0x86, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000380)={0x77359400}, 0x1, 0x1}, 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r5=>0x0)
write$cgroup_int(r4, &(0x7f0000000040), 0x12)
io_pgetevents(r5, 0x6, 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:36:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1017.049959] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1017.051217] EXT4-fs (loop4): group descriptors corrupted!
08:36:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:33 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

[ 1017.894593] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1017.899068] EXT4-fs (loop4): group descriptors corrupted!
08:36:47 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:47 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:47 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:47 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:47 executing program 6:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x600040, 0x0)
recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000140)=""/61, 0x3d}], 0x3, &(0x7f0000000540)=""/193, 0xc1}, 0x3739}, {{&(0x7f0000000640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/29, 0x1d}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)=""/25, 0x19}, {&(0x7f0000001940)=""/150, 0x96}], 0x2, &(0x7f0000001a00)=""/252, 0xfc}, 0x7f}, {{&(0x7f0000001b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000001b80)=""/120, 0x78}], 0x1, &(0x7f0000001c00)=""/240, 0xf0}, 0x3}, {{&(0x7f0000001d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d80)=""/185, 0xb9}, {&(0x7f0000001e40)=""/92, 0x5c}, {&(0x7f0000001ec0)=""/102, 0x66}, {&(0x7f0000001f40)=""/125, 0x7d}], 0x4, &(0x7f0000002000)=""/129, 0x81}, 0x3fff8000}, {{&(0x7f00000020c0)=@tipc=@id, 0x80, &(0x7f0000003440)=[{&(0x7f0000002140)=""/182, 0xb6}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/84, 0x54}, {&(0x7f00000022c0)=""/4, 0x4}, {&(0x7f0000002300)=""/109, 0x6d}, {&(0x7f0000002380)=""/175, 0xaf}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x7, &(0x7f00000034c0)=""/205, 0xcd}, 0x2}, {{&(0x7f00000035c0)=@pppoe, 0x80, &(0x7f0000003780)=[{&(0x7f0000003640)=""/244, 0xf4}, {&(0x7f0000003740)=""/14, 0xe}], 0x2, &(0x7f00000037c0)}, 0x7}], 0x7, 0x101, &(0x7f00000039c0)={0x77359400})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x4585, &(0x7f0000000cc0)={0x0, 0x0, 0x8, 0x1, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000037c0), &(0x7f0000003a00))
io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1e)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0)

08:36:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:36:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:36:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:36:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1031.825752] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1031.826968] EXT4-fs (loop4): group descriptors corrupted!
08:36:48 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:36:48 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x0, 0x6, &(0x7f0000000500), &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180), 0x31})
io_setup(0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
pipe2(&(0x7f00000004c0), 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
io_pgetevents(r2, 0x9, 0x9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000640)={&(0x7f0000000280)={[0x100000001]}, 0x8})
dup2(r6, r6)
r7 = dup2(r5, r6)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r8, r7)
io_submit(r2, 0x3, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000080)="b77ac738ca888a3ff781731289a06e854a520f0214a1a33d272060cc8f7194204192ca6ed0d669f6", 0x28, 0x1, 0x0, 0x1, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1776, r0, &(0x7f0000000300)="5f990696b30950aae7de1639deb6bfbe90d07e550e5d825629d2540e36c448533c2f78a3e85f83179090f3a362c998c60e65a14f6b50817981f194af434afd2acec10878f99150dd264dd76bc1f9ebe791aa75d6660a847a5090c2db59d20b367834600d689ccb2e84bc47af40069f6b755b", 0x72, 0x6, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f0000000380)="d33501ad445613d9bb864d51e3aee0433fd3ac12f4b77c042939814ccaf1ba705efce8c1b44bd949f2aaf53311c6f0bd8b5469f5d76aa5e89e85e55a7adba71873ab18438fd80021efc38ab867fc05c1db7b03b2d07648fe9962c1f15abb5eea902cbddcc6dcd5d051afe6f153d8ec5f246836266535567eebaf2c1bbdd33eddf8a94dd8d5aff9693af4068cc257218005a989485db6dab65e0c40f66566585f9817", 0xa2, 0x9, 0x0, 0x1}])
socket$netlink(0x10, 0x3, 0x1e)

08:37:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:02 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1046.086193] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1046.087449] EXT4-fs (loop4): group descriptors corrupted!
08:37:02 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:02 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x101241, 0x80)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0xbe4b4b2c0bc32361, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname}, {}, {@fscache}, {@noextend}], [{@pcr={'pcr', 0x3d, 0x39}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, ':^'}}, {@obj_user={'obj_user', 0x3d, ']#[^!%{'}}, {@seclabel}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
io_pgetevents(r4, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:37:02 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1046.361827] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1046.363214] EXT4-fs (loop4): group descriptors corrupted!
08:37:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:02 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:02 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1046.568057] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1046.569228] EXT4-fs (loop4): group descriptors corrupted!
08:37:18 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, @in_args={0x4}}, './file1\x00'})
ftruncate(r2, 0x9)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x1}, {0x2, 0x2a3c27de73d29d33, r3}, {0x2, 0x0, 0xee01}], {0x4, 0x3}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x7, 0xee01}, {0x8, 0x0, 0xee00}, {0x8, 0x2, 0xee00}], {0x10, 0x1}, {0x20, 0x8}}, 0x6c, 0x3)
socket$netlink(0x10, 0x3, 0x1e)

08:37:18 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:19 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1062.919950] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1062.921816] EXT4-fs (loop4): group descriptors corrupted!
08:37:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:34 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:34 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:34 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:34 executing program 6:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7a}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000080)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000c2b337000ffdbdf252000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040041)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@permit_directio}]}})
io_setup(0x3ff, &(0x7f00000000c0)=<r5=>0x0)
io_pgetevents(r5, 0x30, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x3938700}, 0x0)
io_setup(0x10001, &(0x7f0000000540)=<r6=>0x0)
io_pgetevents(r6, 0x6, 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_submit(r5, 0x3, &(0x7f00000007c0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x7ff, r1, &(0x7f0000000940)="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", 0x1000, 0xffffffff80000000, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x188, r1, &(0x7f00000006c0)="bff5b17bc7fdc1c51cc5c12e0d9fdae232e7ac216870a2660563660901e1492ad5072a6bd9ed43887dcc77df0529d33816fa4bee159ab04d1e79a3c8b67ef4", 0x3f, 0x7, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000001940)="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", 0x1000, 0x9, 0x0, 0x2, r1}])
socket$netlink(0x10, 0x3, 0x1e)

[ 1078.486421] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1078.487559] EXT4-fs (loop4): group descriptors corrupted!
08:37:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:34 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:34 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
r5 = dup2(r0, 0xffffffffffffffff)
io_submit(r1, 0x6, &(0x7f00000007c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="d98935e35a6b58d4c12558d3302df3c77b8e9b36570d98920685856ebc2e150c5dacabfd8d2302c6fd929743372a94b328a26f3be91a517d84b731d994137aff45ef230ec87f842dff", 0x49, 0x3, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000400)="8e5384f9926322f48ad6868ddd58f1c2124823f521c04b23bf27601b08cc7bfc52212abc482a0dc7e6f7977e9e1e63f0b91da45457f5409e57cc69e2d48a2cad3c39655d78898ce63d05239d7528692320a6e80fa9cd35675d237bb2cc295f6624cecd72bcd20e3049ff73168a561f579d4ab56864811f788193c38150a90f90539d59a5cb579ae1c8194fc4150613e2d63e3e00a6db2644", 0x98, 0x3, 0x0, 0x2, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000004c0)="964e91cf4d53473b8b0a1957ba21dde1f60a6767e77f947cd86500917f13e5beffb14d07ba5d64fc0b18dfe254d33ae66d1a594e6d6842d63b2cf8cbfdf026cb0d431af15ada80d222f133cbdce90840356d036229274388aa530246e89a296b5d1d614793223fff6741a9fa0a80facfdb22aacb8973fb16", 0x78, 0x1, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x290, 0xffffffffffffffff, &(0x7f00000005c0)="654ada24b038343f5b1334c1e0d81d153d7a4ff9dd77bc1cf3e4859af9831e4616dde2680075dd0c8236b88376c54eb53b279f8a034263bf7587db1acb28f896f4f47f990e9e79be2ad189c32a2230830402cb547fe5e3", 0x57, 0x4, 0x0, 0x2, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x8000, r0, &(0x7f0000000680)="ef1fe355cdc2efc7eb73f2e25f805060389860422e3f3d575c765f0de6f603622c1a07b21af62ae2e8fc36aa56372c641dc80edc8c1381be38886c92fd90701118a5abe46bc79951dbb4a513", 0x4c, 0x1, 0x0, 0x0, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x63, r0, &(0x7f0000000740)="f1fb11eeb33acabe49f0d8c4072c4d40efa75f4b128e56cd356054fe219689980f80cc0c13ff245d", 0x28, 0x7fffffff, 0x0, 0x3}])
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
r10 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r10, r9)
openat(r9, &(0x7f0000000040)='./file1\x00', 0x10200, 0x0)
socket$netlink(0x10, 0x3, 0x1e)

08:37:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1079.047881] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1079.049031] EXT4-fs (loop4): group descriptors corrupted!
08:37:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:35 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1079.339981] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:37:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:51 executing program 6:
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x24000010)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r5=>0x0)
io_setup(0x3, &(0x7f0000000200))
io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:37:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:37:51 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:51 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:37:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:37:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:37:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1095.483451] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:05 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:38:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1109.517756] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:06 executing program 6:
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x204, &(0x7f00000004c0)=<r2=>0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file1\x00'})
io_cancel(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x101, r7, &(0x7f0000000380)="39203fd9f315d12490761527fd07d8a2f8b363f1f5c89d1e6f1a3915505fc07b31f15c16fab77e3901ce817d55f1ae3d626d4ec098c0908e74678e9acddfac224298", 0x42, 0x40, 0x0, 0x2, r8}, &(0x7f0000000480))
io_setup(0x3ff, &(0x7f00000000c0)=<r9=>0x0)
io_pgetevents(r9, 0xdec, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8})
r10 = socket$netlink(0x10, 0x3, 0x1e)
sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x74}}, 0x863e0883a773b94)
syz_open_procfs(r0, &(0x7f0000000000)='net/vlan/vlan0\x00')

08:38:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1110.443229] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:07 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:07 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1111.576799] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:21 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:38:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:21 executing program 6:
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = clone3(&(0x7f0000000780)={0x10101080, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x18}, &(0x7f00000005c0)=""/196, 0xc4, &(0x7f00000006c0)=""/78, &(0x7f0000000740)=[r0], 0x1, {r1}}, 0x58)
clone3(&(0x7f0000000840)={0x40200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x9}, &(0x7f0000000200)=""/210, 0xd2, &(0x7f0000000440)=""/152, &(0x7f0000000800)=[r0, r2], 0x2, {r1}}, 0x58)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r3=>0x0)
io_pgetevents(r3, 0x80000000006, 0x0, &(0x7f0000000300), &(0x7f0000000080)={0x77359400}, &(0x7f0000000000)={&(0x7f0000000180)={[0x3]}, 0x8})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup2(r6, r6)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x27bf, 0x0, 0x1, 0x1ef})
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r8, r7)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r9, r9)
mount$9p_fd(0x0, &(0x7f0000000940)='./file1\x00', &(0x7f0000000980), 0x1400000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@nodevmap}, {@cache_mmap}, {@debug={'debug', 0x3d, 0xfffffffffffffffc}}], [{@euid_lt}]}})
socket$netlink(0x10, 0x3, 0x1e)

08:38:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1125.469776] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:36 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:36 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:36 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
io_pgetevents(r0, 0x8, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f0000000140), 0x8})

[ 1140.178053] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue
08:38:36 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:36 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:36 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:36 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:36 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000040)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:38:36 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:37 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:37 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:37 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:38:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1141.486832] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:38:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:38:52 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:38:52 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
syz_open_procfs(r1, &(0x7f0000000200)='net/route\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:38:52 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:38:52 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:38:52 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

[ 1156.373180] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:39:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:39:06 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:39:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:06 executing program 6:
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r3, 0xe, r2, 0xb)
r4 = syz_open_procfs(r0, &(0x7f0000000200)='net/raw\x00')
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x80800)
kcmp(r0, r3, 0x0, r4, r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r7=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000040)={0x201a})
epoll_wait(r1, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x40)
io_pgetevents(r7, 0x5, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:39:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:06 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

[ 1170.524254] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks)
08:39:06 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:39:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:06 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xff, 0x0, 0xf43, 0x836d, 0x9, 0x4})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'})
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
r8 = dup(r1)
r9 = signalfd4(r0, &(0x7f0000000500)={[0x1000]}, 0x8, 0x800)
r10 = pidfd_getfd(r1, r1, 0x0)
io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1000, 0xffffffffffffff36, 0x0, 0x1, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000300)="375e9e3361b721c09162f2a046c9948c5bf173822bf5fa26af8abed7a3274996ec160c899b974b9a70c086c3c927001ccf5b233b98bf798b31d9ca86348dee1435978340ec6bde5d01c6c0572fdf23cfeba7ece5c29a0a7a886822d76112f8727645c14bbeacb7554659a87a6959a9d45a57e3750b4b", 0x76, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="581549ac4602673e5c8dc0bd81b6bfd66ae9d7ba291770ebff617ed0dabc926c27795b1c67f379fe91187e96b0a34150416da86fbd029220fa7122f3be692fc4028a204e8df2e7d82809be8c464c5415aa370a355997d5857491a86045fa2beebbf12e54f1a85199", 0x68, 0xffff, 0x0, 0x3, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x1f, r8, &(0x7f0000000480)="eaaa16944a1942b2733bc771195c90e459993da68b4e6c65d23dedc0a60ac91b0d8dd80779e5d76e17d310da7dc891abc1471ffc6dc9c144c6e494a19a532d1731f2ddda7fa2703d147f812502611439acbcb2403b8c7fedc7c04061a29517bea66edb5789ffe770dec19351dd5dd42d54372aca258b", 0x76, 0x1, 0x0, 0x0, r9}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffffffffffff, &(0x7f0000000580)="66385f7ff233adbc8c5c0c9366fa091f74ad0a07a67a4a232f6482e283cab46f1591dcf091149908e5744c9c1b09b2c3977e6f4191692e1ce2a65bad1fe7a0d7b850c96a5253269f420527986e664ac98961e393f490a50d1b1814653acd96ec807cbb9dd369b7c32786e8afe3d00aa3c0d878b2e0e888dc3a161f45348b17a04f59b57d2aac2385c8e0a2a282831b39379077627cca9213836f8a9d121cad232f9f2990c89b0d496074d83b52c362b0beb8", 0xb2, 0x400, 0x0, 0x1, r10}])

08:39:07 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:07 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:07 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:07 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:07 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1171.482665] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1171.761543] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:21 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:21 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
fallocate(r0, 0x34, 0x80000000, 0x400)
r1 = socket(0xf, 0x4, 0x5a7a7dcf)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x4af744df})
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000100)={0x11, 0x4, r9, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x90}}, 0x1)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:39:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:21 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:22 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1186.044972] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:22 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:22 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:39:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:22 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0xff, 0x2})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r6, r5)
pidfd_send_signal(r5, 0x8, &(0x7f0000000040)={0xa, 0x318a, 0x9}, 0x0)

08:39:22 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1187.123768] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:37 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:37 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:37 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = syz_open_dev$vcsn(&(0x7f0000000500), 0x100000000, 0x410000)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r11 = dup2(r10, r10)
r12 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r12, r11)
io_submit(r1, 0x5, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1000, 0x0, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x1000, r0, &(0x7f0000000340)="0adcb32189d37b7ea8b3deab6bda3f7b71018598a52efb12e755ee0b2a93287e9f9b462d0f7ac2249d877017c70aa313cfdaa7aeeeab872ad001b7f462b9f01525036186e58fff9769224e1e695722e5c9ba0d1d3ce8fbac4ea93c0541ee4dd2a6d368e26b51ff5cf3ea581ccacf07b758fcfab14b08aff1b700cf838ec7f5c6c880c65c52ff7770bc84c6d01b246f976b85f807064e8d938969613a83d329582a74f385bf612f865e5f8e46360d9b5a6a541064cdfc48387fb0d8be9d741a48feeb5eb1b95ed4bb857d226e363b09f9d597921bc7747da473ba52e0bc01bc5719c978247d47009bb9e304f6", 0xec, 0x5, 0x0, 0x1, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000480)="54dcfe8077ca27bc4baf3ef470b2f10c5ccf2ef23ef2a7d441cc963e81881529b182734ead704d7f8eb4faec581c2ca7e800e6d0f31e52bb", 0x38, 0x958, 0x0, 0x2, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x9, r2, &(0x7f0000000540)="c8fa697a8c5ff78c42f2c68ff7c1690446ba742f486f947708cb21039d11057d8851048a0238365fb943b733817a75ee7deab10aabe2b5818cfbe5", 0x3b, 0x10001}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0xfc01, r7, &(0x7f00000005c0)="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", 0xfd, 0x0, 0x0, 0x0, r11}])
socket$netlink(0x10, 0x3, 0x1e)

08:39:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1201.314060] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:37 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:37 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:37 executing program 6:
r0 = creat(&(0x7f0000000480)='./file1/file0\x00', 0x2)
write(r0, &(0x7f00000004c0)="2460692d47602860ca1968d97494406c2cbc916ebd738a02e52f850b686407deba3e72e92333d952241319066c8ab91269ce507d550870c6ade3d07866bc7c1e751db631abab7b18e20aa986dd25946188753316f67a1c93f1f61bfd833ea8b87e417f2f43d7387f77f1ba636bb962f65a955e0d8a7e80c04a818716328d068b9a07f0c2bf94653020171adbea646b81ca300908d07d20a97579917bc83a5ee6e923673652b901452956a4dade7a186f501ea64b0111db185e6d1c17807881be8de2b8dc1843c8f4fe4d5257a2c6433c70443616dce27f9ae7f958d2b3b9a2e260ef249f3dd54162d521b0f6cdf338", 0xef)
clone3(&(0x7f00000008c0)={0x1841100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_io_uring_setup(0x104c, &(0x7f0000001b00)={0x0, 0xaa73, 0x1, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200))
syz_io_uring_setup(0x5d16, &(0x7f00000003c0)={0x0, 0xf7a, 0x0, 0x1, 0x230}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f00000005c0))
r5 = io_uring_setup(0x3c42, &(0x7f0000000300)={0x0, 0x1bc1, 0x20, 0x2, 0x308, 0x0, r1})
syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd=r5, 0x7, 0x0, 0x0, 0x20, 0x1, {0x1}}, 0x7)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
r10 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r10, r9)
io_submit(0x0, 0x6, &(0x7f0000001ac0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x20, 0xffffffffffffffff, &(0x7f0000000640)="f0fca888fe6d93a51afd77b6a62d9f3aac90a45183434afee261342e9bf899211021dec5d1d915ac389cf98c17c9d51159dc42a47e0076684b8fa50a41f611cf044ecb6cbe221434e0599da414eca8b5f68b7a7375e153bf3e65625e6eb1f84cb462053d832cf19518b9685b6a117a36e2275276b3faed944e592e4e99f3158297f015a33a491685133f3cae6894c0d6beb0fc90c62cd5ad31f577197d5cf4f602005bcde7cbf0dec4ac3737aad4a9b5dc037596ef78", 0xb6, 0x6, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x14d, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0xd2a, r1, &(0x7f0000000740)="b9295b80f63ba514f62c6cce8a2efe517569b09d2a7b167bbe4a40b083cd3d99b1d9db9395af087b606efe65d07b9baf9593fe7039846eea4acd69a005247c612c99ac9284070842d5ed3f22d25c6536d5c2129fb6ef66dbec2d1ecb2f0b05384b9522b27fe92154e4f3bff4d1e8c3386ef3394265cf99696d4fa65c88c0057d7658d068d65ecc1bdffdf1a51ee8f0774df52b27e08cfe889a95683c707501f9ef69e00ba2cbfb2036ebdfdc1dce124fdc33bad6", 0xb4, 0x6, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000840)="de5f316dc2313d8c75a023588348", 0xe, 0x100000000, 0x0, 0x0, r9}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x7f, r5, &(0x7f0000001940)="9b0cd250d64e3760b419af3742a96f2bb9b9f5671a0134149022c7a52d35f1d01f30861c8e54ed0ed904e78348c747cee698a64f859b3316ae6206d6e10a2685d6b610633b2b81b2f589dcd83a68c9f31aa71810ccae5f363d763d3c8261324afbad36b96e63f40b78237a742a978b2361fffd57932043a886589c0d3d469f6e9593883c6f573e5fa1b28ee28fd2bc72b0059e3082185476b1f604", 0x9b, 0x8, 0x0, 0x2}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000001a40)="0a45c389cd98a90e84b423f5e361", 0xe, 0x40, 0x0, 0x1, r1}])
io_pgetevents(r2, 0x7fff, 0x8, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000180)={[0x2]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[ 1201.655725] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:51 executing program 6:
clone3(&(0x7f00000008c0)={0x121000480, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x8044, 0x125, 0x20}, 0x18)
openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0)

08:39:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:39:51 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:51 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:39:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540), 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:39:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1215.306702] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:39:51 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:39:51 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:39:51 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:39:51 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x500, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:40:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:05 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:40:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540), 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

[ 1229.234624] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:40:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:05 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:40:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540), 0x0, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:05 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
pipe2(&(0x7f0000001940)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
io_submit(r2, 0x4, &(0x7f0000001b80)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8001, r3, &(0x7f0000000300)="87ec0b21504e56f66743da14b2729e2c697f4b1a46d34039b36ac77655a16c985ade2644daf6535ae496bfd868913d58e4ff4780b695e113a85498998df5ff904efd870cc30a0f7d5114b50e350aba38e8c2f62e47a8f0c058c8f2c58e88c3120267babdd1194951954a290b393ba738ce8b8e374532274527e853c39ebc6fd05b10070fc93ca3eebd9405aa53e8760089951539f97644c6e1552f168509230f4a3baa77155d7d482d9fa04b0dd9c9f34cbdb7a1a4e30aff33b30db7e0ca8cb25754ef6a835e5544b8c7487ac56f9e3c36a51feb70eab2153f78c38fd46b83fc647bf9c288af5274e3c9cef820", 0xed, 0x100000001, 0x0, 0x0, r4}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001980)="9105d5ff75723e27fe40f9eed5ce033b5752256cd87df4d196cf25053d3aa705af7badb16d5abca0df525d08bae61645df99ba5e93d8465e22931da7c0910eaf05abdf2ee7419d1eac1c5af143d0b88e67", 0x51, 0xffffffff, 0x0, 0x3, r0}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x4, 0x9, r0, &(0x7f0000001a40)="12aa46757e00380489880d7d8953b2ac950d731e27164160bc63f894b170f6b3c5ba464680b3223f526704abbddcde3470f507a45204c57a401baf089cad2470222eb556753c8e38a46b5e8ea05aa8fee2067b736c6fb8623c20114964440963092ddb1c241d2020e01c", 0x6a, 0x1f, 0x0, 0x2}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x1f, r0, &(0x7f0000001b00)="ba060d78bf1498e4382852d083c1228aa4c6cf0855c8bbe50441e3cde69dee3cccda4913db37659bd500fe38a78bb8fd4ffc9cf2dad7e1ef3e5f49f55e963e", 0x3f, 0x1, 0x0, 0x3, r0}])
r6 = accept4$unix(r0, 0x0, &(0x7f0000000080), 0x800)
r7 = syz_open_dev$sg(0x0, 0x0, 0x2001)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, <r8=>0x0}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f00000008c0)={r8, 0x5, 0x80000001})
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000940)={r8, "7649e09102ad6e3fda370c59b4055f59"})
io_setup(0x3ff, &(0x7f00000000c0)=<r9=>0x0)
io_pgetevents(r9, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
io_setup(0x7, &(0x7f0000000040)=<r10=>0x0)
io_destroy(r10)

[ 1229.776817] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:40:20 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:20 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = accept$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x1ffffffc, 0x10, 0x2, 0x10001ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r11 = dup2(r10, r10)
r12 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r12, r11)
io_submit(0x0, 0x6, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xf, 0x40, r0, &(0x7f0000000080)="41c77aa8c94ad1be5b5f4ea8130dbbc63c0614", 0x13, 0x6e8, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000000380)="737b3112a3870bcb2da2bb6c214bc5cc98630893b58137c72c1b8dd2390ef42982586e7f203ca246101386ffc3db03a111897f52a4eca2fb2d352c68e6c53ed4bb3485947f84324c081bc20200072f8ca97afd854823599561e73647fa2cbe3b4f3a7ce4cd5a708a3385400611b27aef37e8c663f827b4812de02625bee299877f0ee473a9a68c52b4fb9fec9774245bf037e2750f8b9576022a44350b8de4b1a65a75987d10204d1e33d4467a5dd01d44b2feec3c90f781751cf9c92ddc7497e3a9db9c4f4403fc7cf766cbcf7d75be556e7829349ac5cefccfab678e", 0xdd, 0x3, 0x0, 0x2, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x600, r0, &(0x7f00000004c0)="f4ddc6aecc8ae87cbd746db33ccc7fe1b4fbe95ee22418ad7d6f91a31d4f295f671c3ae28ed0578907d91c059480d2342f5d997eefb21491fa501f32415b40c8a519894928243cb0b96ce830193953092713adacc7f8a5b8a4d408dfd5cbf3c31437a93ab8e65167aa675e0cba2e0d2a4bd54afa", 0x74, 0x9, 0x0, 0x2, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xfa60, r0, &(0x7f0000000580)="51acbd491160923ce3d68a8903c6b7d1f4149c8e3e6d3620d4de2598dc2a71a934ea797006e8ddecd50677710f2dc9b01def9fbd121a36e1f2092208076a75c11d6785edd3902e2cf4cdb1f3dab214d156cf8328633453c87ebf75b93b48cf2739a0b589d1f70678cd3f45852af51b2e2539313d7d3a273923dbc76321aeb7f58d71aa63b2e2df57cc3d7d156f489dd3d81d65ef2974c87dbf896c80162335922e4c51586384c93403c78fb5cb81f43d5abcc46adfc35f53419ac43b27e26874b816ca1001abd896ac52", 0xca, 0x24000000000000, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x401, r0, &(0x7f00000006c0)="aedac063ff59de0d566e2c5e317ba5b2c83998", 0x13, 0x7, 0x0, 0x2, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x20, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1000, 0x3, 0x0, 0x2, r11}])
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:20 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:20 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:20 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1244.477630] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:40:20 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:20 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:20 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'team0\x00', {'veth0_to_bridge\x00'}, 0x5b83})
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:20 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1244.652698] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:40:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:34 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:34 executing program 6:
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3911, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x4, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
r9 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r9, r8)
r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff8]}, 0x8, 0x80800)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0xfffffbff, 0x0, &(0x7f0000000100)=[r4, r9, r10, 0xffffffffffffffff, r11]}, 0x5)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r12=>0x0)
io_pgetevents(r12, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, 0x0}])

08:40:34 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:34 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

[ 1258.645522] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:40:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:34 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:34 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xd76bdf2598e6b85e, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_loose}, {@nodevmap}, {@cache_loose}, {@version_L}, {@uname={'uname', 0x3d, '\'-.'}}, {@cache_none}], [{@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@audit}, {@fowner_gt}]}})
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1259.148362] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[ 1259.151571] EXT4-fs (loop4): get root inode failed
[ 1259.152365] EXT4-fs (loop4): mount failed
08:40:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:51 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:51 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:51 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:40:51 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1275.350484] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[ 1275.352505] EXT4-fs (loop4): get root inode failed
[ 1275.353195] EXT4-fs (loop4): mount failed
08:40:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0}])

08:40:51 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:40:51 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x200000026, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:40:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:40:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1276.294058] EXT4-fs error (device loop3): ext4_fill_super:4967: inode #2: comm syz-executor.3: iget: special inode unallocated
[ 1276.295688] EXT4-fs (loop3): get root inode failed
[ 1276.296322] EXT4-fs (loop3): mount failed
[ 1276.449883] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated
[ 1276.451593] EXT4-fs (loop4): get root inode failed
[ 1276.452231] EXT4-fs (loop4): mount failed
08:41:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:06 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080))
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:41:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:41:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1290.388028] EXT4-fs (loop4): invalid first ino: 0
08:41:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1290.441007] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (8 blocks)
08:41:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:06 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})

08:41:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1291.387113] EXT4-fs (loop4): invalid first ino: 0
[ 1291.518137] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1291.519357] EXT4-fs (loop3): group descriptors corrupted!
08:41:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:21 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f0000000080)={&(0x7f0000000040)={[0x1]}, 0x8})
socket$netlink(0x10, 0x3, 0xe)

08:41:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:41:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:41:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1305.402462] EXT4-fs (loop4): invalid first ino: 0
08:41:21 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x20000006, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:41:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1306.199150] EXT4-fs (loop4): unsupported inode size: 0
[ 1306.199964] EXT4-fs (loop4): blocksize: 2048
08:41:42 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x9, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r1 = socket$netlink(0x10, 0x3, 0x1e)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r1, 0x400000000000000, 0x9, 0x3ff})
r3 = accept(0xffffffffffffffff, &(0x7f0000000300)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x10000010})

08:41:42 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:42 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, 0x0, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:41:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1326.274769] EXT4-fs (loop4): unsupported inode size: 0
[ 1326.275516] EXT4-fs (loop4): blocksize: 2048
08:41:42 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:41:42 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, 0x0, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:42 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r5=>0x0)
io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4)
io_submit(r5, 0x2, &(0x7f0000000580)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000380)="25a8af7b3e7e37cf3c58f9e64a9b6d64969223b0c67a139be4ac8a53f9a9dea235099ab10909ea597078f9a27051fd9a68a5a30c2ddf86018feff5d75764fdb2bad13370f96066db32891e04d6617b92a848efb971739a865e59277177bd07bc489c0050de275f944e02a4616c75f19c016924", 0x73, 0x7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, &(0x7f00000004c0)="13ae1bc7208bcdf61c375759ce5831ead4998c174939b6246df4c10022b6691ef057ee4aa3a9073e6894dba492f925bab6d9ee99e785aa269e5027f355f99d375df892598ed69dbde20fd43506c2b0007e91bc41daaa06687e14c5521bd84b316709d0fc76288468318c3eb894a45de9fb89f94dd9f5", 0x76, 0x1000, 0x0, 0x3}])
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, {0x0, r10}}, 0x0)

08:41:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:42 executing program 5:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x101241, 0x80)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0xbe4b4b2c0bc32361, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname}, {}, {@fscache}, {@noextend}], [{@pcr={'pcr', 0x3d, 0x39}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, ':^'}}, {@obj_user={'obj_user', 0x3d, ']#[^!%{'}}, {@seclabel}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
io_pgetevents(r4, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[ 1326.823095] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1326.824481] EXT4-fs (loop3): group descriptors corrupted!
[ 1326.884257] EXT4-fs (loop4): unsupported inode size: 0
[ 1326.885046] EXT4-fs (loop4): blocksize: 2048
08:41:57 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:57 executing program 5:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x101241, 0x80)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0xbe4b4b2c0bc32361, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname}, {}, {@fscache}, {@noextend}], [{@pcr={'pcr', 0x3d, 0x39}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, ':^'}}, {@obj_user={'obj_user', 0x3d, ']#[^!%{'}}, {@seclabel}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
io_pgetevents(r4, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:41:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, 0x0, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:41:57 executing program 1:
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:41:57 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:57 executing program 6:
clone3(&(0x7f0000000300)={0x120900100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:41:57 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

[ 1341.873632] EXT4-fs (loop4): unsupported inode size: 0
[ 1341.874470] EXT4-fs (loop4): blocksize: 2048
08:41:58 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:41:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:41:58 executing program 5:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x101241, 0x80)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0xbe4b4b2c0bc32361, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname}, {}, {@fscache}, {@noextend}], [{@pcr={'pcr', 0x3d, 0x39}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, ':^'}}, {@obj_user={'obj_user', 0x3d, ']#[^!%{'}}, {@seclabel}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
io_pgetevents(r4, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:41:58 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1342.101954] EXT4-fs (loop4): unsupported inode size: 0
[ 1342.102872] EXT4-fs (loop4): blocksize: 2048
08:42:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, 0x0, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:12 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:12 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:12 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:12 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:12 executing program 1:
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:42:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:12 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:12 executing program 1:
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

[ 1356.323883] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1356.325051] EXT4-fs (loop3): group descriptors corrupted!
[ 1356.340014] EXT4-fs (loop4): unsupported inode size: 0
[ 1356.340784] EXT4-fs (loop4): blocksize: 2048
08:42:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:12 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:12 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:12 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file1/file0\x00', 0x50280, 0xc)
io_submit(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x32, 0x4, @tid=r1}, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x5, 0x5, 0x3, 0x0, 0x5, 0x38091, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe, 0x3}, 0x90, 0x2, 0x3ff, 0x9, 0x4, 0x8, 0x8, 0x0, 0x4}, r1, 0xe, r0, 0xb)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x9, 0xff, 0x9, 0x0, 0x8, 0x24a84, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x68f, 0x7}, 0x0, 0x8000, 0x1, 0x1, 0x0, 0xff, 0x7, 0x0, 0x0, 0x0, 0x100000000}, r1, 0x2, 0xffffffffffffffff, 0x9)
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:12 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1356.553452] EXT4-fs (loop4): unsupported inode size: 0
[ 1356.568187] EXT4-fs (loop4): blocksize: 2048
08:42:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000000)='1', 0x1}])
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=<r4=>r0, @ANYBLOB="ffffff00042e2d66dfceb264fec7304ff0f180a79ab078215a14d5b13c604ede9a24a7076ec229e45e7a1db8e8d000003de3433e6b649121731585fbfdf7b15898ac0a5ef5ade62106b615da8b517ed19cb63240bea9321db27427bc53571e54338145efa0840000fb096be700fac2be83246c6405e6d027fac7d171a426680a3eb5c672020d7ff5f690986361"])
openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x3200, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r5, r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lremovexattr(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000740)=@random={'user.', '+/}]\'(@+:^/::{\xd3.&\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14)
io_submit(r2, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f0000000300)="f9ffce730c37f031d0855194c9a9555d5e3f6d1b6c9401e8fd2c150aec06ae1a245b2b9ba22d75a0c54c86d9585585b8bf62b9e22a35ceae5fd4f08388787a512d2ceef6d1dcc7ab5bac3f6681a838d6184970e6fd49ec50ef30a199ee136ee9b117b551f1eddd17684da8094298d4bbd78bfa42a9cfbc25e71bbd411f91a10950096dbc94dc0cf40c132b42b9eb2d39ee50f49c703223d7c92519fa1810b81f6dd02d361584eaf06aa6d9bd413203a57fda5fef26e50e4871b6aadc9663ac965a77a60de83ddbfe3bcc9b8e5fcfde93f20088798e4204d0c2a075e5e75cb3bf8a17289e58", 0xe5, 0x4c6, 0x0, 0x3, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xb30, r0, &(0x7f0000000200)="e0855379431c2c028999f8bddd32e46c98a510fe8f6ee43052b3ea3c4f17058082ab91b4e0198677f3e1dc78", 0x2c, 0x1f, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x390, r5, &(0x7f0000000440)="3810c4d4bc25c861f58ab20df12c333db79b45ce8442622b19c2fbb449ff8b48acd98edb67128fc139a5ac925c7bdfae86104b9ac4d0261fe1539e765dd2e42ad685f9d640fed9cbd7c671e1d6c09d36c14e484164a8b3442b3f6c5ec4d6ecfb0f5a388c1b6032d495eab9f052c5c492635325a27b376fdb60a711fa3f33de07e0c9f1ec5f3a6e9e5573b5d766af40e55f4960091fa5aedd248a", 0x9a, 0x85ed, 0x0, 0x2, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r7, &(0x7f0000000580)="aa2d5d3dbf1485934e7aa4023ab21236a29a8104ec0ad26180038bb906f19f30cf6d8e881257128dd6e1df1da55d036e3efc2e6fdd74b39746022b444a5e3e0be0813552298ef71ebaa8e6df8e1a5d3e1a094a17f07306070826172db3d2a1ecbe2bcb05a856e3ea", 0x68, 0xffffffff00000001, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x3, r0}])

08:42:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:28 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)={&(0x7f0000000180)={[0x8]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:28 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:28 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1372.177832] EXT4-fs (loop4): unsupported inode size: 0
[ 1372.178735] EXT4-fs (loop4): blocksize: 2048
08:42:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) (fail_nth: 1)

08:42:28 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:28 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
r4 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r4, r3)
openat(r3, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r5=>0x0)
io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 1)

08:42:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:29 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1372.879641] EXT4-fs (loop4): unsupported inode size: 0
[ 1372.880494] EXT4-fs (loop4): blocksize: 2048
08:42:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1372.926864] FAULT_INJECTION: forcing a failure.
[ 1372.926864] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1372.928536] CPU: 1 PID: 16635 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1372.929479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1372.936981] Call Trace:
[ 1372.937344]  dump_stack+0x107/0x167
[ 1372.937842]  should_fail.cold+0x5/0xa
[ 1372.938368]  _copy_from_user+0x2e/0x1b0
[ 1372.938913]  io_submit_one+0x8f/0x1b80
[ 1372.939453]  ? lock_acquire+0x197/0x470
[ 1372.939991]  ? find_held_lock+0x2c/0x110
[ 1372.940565]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1372.941221]  ? __might_fault+0xd3/0x180
[ 1372.941760]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.942333]  __x64_sys_io_submit+0x18d/0x2f0
[ 1372.942930]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1372.944484]  ? fput_many+0x2f/0x1a0
[ 1372.945104]  ? ksys_write+0x1a9/0x260
[ 1372.945850]  ? __ia32_sys_read+0xb0/0xb0
[ 1372.946431]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1372.947175]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1372.947903]  do_syscall_64+0x33/0x40
[ 1372.948449]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1372.949182] RIP: 0033:0x7f3d098eeb19
[ 1372.949713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1372.952273] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1372.953304] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1372.954170] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1372.955038] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1372.955906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1372.956781] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:42:29 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 2)

[ 1373.106797] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:42:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1373.186602] FAULT_INJECTION: forcing a failure.
[ 1373.186602] name failslab, interval 1, probability 0, space 0, times 1
[ 1373.189924] CPU: 1 PID: 16751 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1373.191902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1373.194284] Call Trace:
[ 1373.195026]  dump_stack+0x107/0x167
[ 1373.196056]  should_fail.cold+0x5/0xa
[ 1373.197148]  ? io_submit_one+0xfb/0x1b80
[ 1373.198304]  should_failslab+0x5/0x20
[ 1373.199386]  kmem_cache_alloc+0x5b/0x310
[ 1373.200558]  io_submit_one+0xfb/0x1b80
[ 1373.201669]  ? lock_acquire+0x197/0x470
[ 1373.202798]  ? find_held_lock+0x2c/0x110
[ 1373.203956]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1373.205337]  ? __might_fault+0xd3/0x180
[ 1373.206463]  ? lock_downgrade+0x6d0/0x6d0
[ 1373.207647]  __x64_sys_io_submit+0x18d/0x2f0
[ 1373.208908]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1373.210447]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 1373.211985]  ? ksys_write+0x1a9/0x260
[ 1373.213088]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1373.214578]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1373.216051]  do_syscall_64+0x33/0x40
[ 1373.217126]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1373.218589] RIP: 0033:0x7f3d098eeb19
[ 1373.219645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1373.224946] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1373.227109] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1373.229160] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1373.231194] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1373.233240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1373.235273] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:42:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:44 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:44 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup2(r1, r1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
r3 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r3, 0x2, &(0x7f0000000680)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/69, 0x45}], 0x4, 0x8, 0x1}, 0x7fffffff)
sendfile(r0, r0, &(0x7f0000000080)=0x3, 0x1ff)
io_submit(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r4, r4)
fcntl$addseals(r4, 0x409, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0x8}}, './file1\x00'})
pidfd_send_signal(r5, 0x1c, &(0x7f0000000300)={0x6, 0x2, 0xa9b}, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r6=>0x0)
io_pgetevents(r6, 0x6, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x20001000)
socket$netlink(0x10, 0x3, 0x1e)

08:42:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 3)

08:42:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1388.049965] FAULT_INJECTION: forcing a failure.
[ 1388.049965] name failslab, interval 1, probability 0, space 0, times 0
[ 1388.051369] CPU: 1 PID: 16777 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1388.052203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1388.053233] Call Trace:
[ 1388.053560]  dump_stack+0x107/0x167
[ 1388.054005]  should_fail.cold+0x5/0xa
[ 1388.054481]  ? create_object.isra.0+0x3a/0xa20
[ 1388.055041]  should_failslab+0x5/0x20
[ 1388.055509]  kmem_cache_alloc+0x5b/0x310
[ 1388.056008]  create_object.isra.0+0x3a/0xa20
[ 1388.056551]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1388.057189]  kmem_cache_alloc+0x159/0x310
[ 1388.057708]  io_submit_one+0xfb/0x1b80
[ 1388.058188]  ? lock_acquire+0x197/0x470
[ 1388.058679]  ? find_held_lock+0x2c/0x110
[ 1388.059175]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1388.059765]  ? __might_fault+0xd3/0x180
[ 1388.060250]  ? lock_downgrade+0x6d0/0x6d0
[ 1388.060800]  __x64_sys_io_submit+0x18d/0x2f0
[ 1388.061343]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1388.061915]  ? fput_many+0x2f/0x1a0
[ 1388.062540]  ? ksys_write+0x1a9/0x260
[ 1388.063634]  ? __ia32_sys_read+0xb0/0xb0
[ 1388.064800]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1388.066076]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1388.067317]  do_syscall_64+0x33/0x40
[ 1388.068217]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1388.069058] RIP: 0033:0x7f3d098eeb19
[ 1388.069512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1388.071745] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1388.072683] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1388.073560] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1388.074427] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1388.075292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1388.076158] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:42:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1388.139948] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:42:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 4)

08:42:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:44 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:44 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1388.275820] FAULT_INJECTION: forcing a failure.
[ 1388.275820] name failslab, interval 1, probability 0, space 0, times 0
[ 1388.277316] CPU: 1 PID: 16892 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1388.278151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1388.279158] Call Trace:
[ 1388.279486]  dump_stack+0x107/0x167
[ 1388.279932]  should_fail.cold+0x5/0xa
[ 1388.280402]  ? kernfs_fop_write_iter+0x235/0x510
[ 1388.281003]  should_failslab+0x5/0x20
[ 1388.281469]  __kmalloc+0x72/0x390
[ 1388.281894]  kernfs_fop_write_iter+0x235/0x510
[ 1388.282456]  aio_write+0x355/0x7a0
[ 1388.282893]  ? cpumask_weight.constprop.0+0x40/0x40
[ 1388.283508]  ? lock_acquire+0x197/0x470
[ 1388.284002]  ? __might_fault+0xd3/0x180
[ 1388.284491]  ? lock_downgrade+0x6d0/0x6d0
[ 1388.285016]  ? io_submit_one+0x1e0/0x1b80
[ 1388.285535]  io_submit_one+0xfbc/0x1b80
[ 1388.286023]  ? lock_acquire+0x197/0x470
[ 1388.286510]  ? find_held_lock+0x2c/0x110
[ 1388.287004]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1388.287596]  ? __might_fault+0xd3/0x180
[ 1388.288080]  ? lock_downgrade+0x6d0/0x6d0
[ 1388.288603]  __x64_sys_io_submit+0x18d/0x2f0
[ 1388.289163]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1388.289739]  ? fput_many+0x2f/0x1a0
[ 1388.290183]  ? ksys_write+0x1a9/0x260
[ 1388.290649]  ? __ia32_sys_read+0xb0/0xb0
[ 1388.291152]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1388.291797]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1388.292430]  do_syscall_64+0x33/0x40
[ 1388.292902]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1388.293529] RIP: 0033:0x7f3d098eeb19
[ 1388.293980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1388.296220] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1388.297169] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1388.298034] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1388.298899] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1388.299765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1388.300635] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
[ 1388.484711] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
08:42:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:42:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 5)

08:42:58 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x300)

08:42:58 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:42:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:42:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:42:58 executing program 6:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r5=>0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup2(r8, r8)
r10 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r10, r9)
io_submit(r1, 0x9, &(0x7f0000001b40)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0xffff, 0xffffffffffffffff, &(0x7f0000000200)="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", 0xfc, 0xfff, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000340)="ad4bb08d0f8be04ddce24c322348bfa646a595f341d8b934b04e343426", 0x1d, 0x400, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x20, r4, &(0x7f0000000940)="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", 0x1000, 0x9bcf, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x5, r4, &(0x7f0000000480)="bf561fcdcae0a6a2ceaf856879cd87cb3362e2db4aebb6336c6768ef3e8ccc8328", 0x21, 0xb6, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x996a, 0xffffffffffffffff, &(0x7f0000000500)="8b43cd8a57e32059618b17268e58270ec123780349c02f62b26f59917f91dc1a7d35655fbfd9b8bc131f4a9c06a198999f90709f05f1441a0e5b518610f7684d8dad4697b496b413ab4914032df0c2a4ef9f6874d410dbcbc87353305c0bb79fe947ee6f77e87025c481f589715f9acfaf74dd99fa44e69e2496de01d08c80569238c372a66bef9b5e05ec94e1c7712ff21ff40b77aae3985fc6e54bc4c7e2162f325db5a53aac4b9441f44c488b2af11e835ee3eb6719c078155c902341f61488202e3cd1d953f4c34a28e8eca75fb03c53b0624216496e008dba266985cbacd3075e124011133bb01190c4", 0xec, 0x400, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0xd27b, r4, &(0x7f0000000640)="8f3ea7b65202ddc786b48f2210457b5de5dc87a6838f717aa62bb5aa220958dc433babadf387521bdcb2b732676bf622af47a81877d99b8113cb656b8b69d91e4b6181be0a81e9ca74dc9291d16eaca0725ac6", 0x53, 0x2, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0xeb51, 0xffffffffffffffff, &(0x7f0000000740)="c25ae9c5cb64be639d15c57c13b0fafb2265ec7426ccc34048e48ce2ed959238c11d5408d3eec9d471fcc3900fe76739d9643a05fb7125967198af0446daccbb4a40c49393dee6ede9114d3a5104cdc87f95ba638ea52aa86fb884161e6bf30cd3831aad93dc927cf66d2b8abcb52110a26cda60e714c6fa862f700c569291518e9a70468bb1bb85c18f67c359a4a95a2d42092cb1a32f8feae8456ad2abe9d9fc55844b53356a2124d4885e51914ede827dd6b1379d69112e1a2dd6657f56f179d1e06bed30380517f6b3cddd8b3c", 0xcf, 0xffffffffffffff7f, 0x0, 0x3}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f0000001940)="6306d818e491f519f36874566cbf602f2d38cb4f96238427d1e9689db2a2844f01a5966aa3a90f00490f24deb5ccd0ad581797a6fb3cfc05aba5e4d24ee29eef1280137f25fd3cd47191bb3bb981c21a4edd8247ad1c88d277baf19c808d19677cfe7645aee02f76f72e101fe434d17340f7a59f65fb5efc340b45373c887ff1882f8b9ff5b7847ed697f9a29056b61d20718c480a547144445e3672fd0759af7d35b25436ae333852f8f9c008d8e26b254b8d3127fe94d7b8d1a2874033fb5f8fbd3cb8", 0xc4, 0x7fffffff, 0x0, 0x3}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x2, 0x7ce8, 0xffffffffffffffff, &(0x7f0000001a80)="0fa8cfa6e8286e9ea1f5140372de7414263bc0237892225f2b08ba51dea9c801b2fdde2c97d388d1864ef5b91a0de243894939b003235c70071c1dd51552d69dfee25ba9c2695703676c94", 0x4b, 0x2, 0x0, 0x0, r9}])
io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r4, &(0x7f0000000000)='1', 0x1}])
io_pgetevents(r5, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={r2, r3+60000000}, &(0x7f0000000180)={&(0x7f0000000040)={[0x202000003]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:42:58 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1402.311792] FAULT_INJECTION: forcing a failure.
[ 1402.311792] name failslab, interval 1, probability 0, space 0, times 0
[ 1402.315419] CPU: 1 PID: 17028 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1402.317384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1402.319479] Call Trace:
[ 1402.319828]  dump_stack+0x107/0x167
[ 1402.321390]  should_fail.cold+0x5/0xa
[ 1402.321874]  ? create_object.isra.0+0x3a/0xa20
[ 1402.323501]  should_failslab+0x5/0x20
[ 1402.323975]  kmem_cache_alloc+0x5b/0x310
[ 1402.325582]  create_object.isra.0+0x3a/0xa20
[ 1402.327182]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1402.327817]  __kmalloc+0x16e/0x390
[ 1402.329342]  kernfs_fop_write_iter+0x235/0x510
[ 1402.329849]  aio_write+0x355/0x7a0
[ 1402.331290]  ? cpumask_weight.constprop.0+0x40/0x40
[ 1402.331816]  ? lock_acquire+0x197/0x470
[ 1402.332984]  ? __might_fault+0xd3/0x180
[ 1402.333568]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.334234]  ? io_submit_one+0x1e0/0x1b80
[ 1402.334756]  io_submit_one+0xfbc/0x1b80
[ 1402.335332]  ? lock_acquire+0x197/0x470
[ 1402.335824]  ? find_held_lock+0x2c/0x110
[ 1402.336445]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1402.337605]  ? __might_fault+0xd3/0x180
[ 1402.338167]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.338704]  __x64_sys_io_submit+0x18d/0x2f0
[ 1402.340079]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1402.340745]  ? fput_many+0x2f/0x1a0
[ 1402.341311]  ? ksys_write+0x1a9/0x260
[ 1402.341875]  ? __ia32_sys_read+0xb0/0xb0
[ 1402.342892]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1402.343562]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1402.344211]  do_syscall_64+0x33/0x40
[ 1402.344682]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1402.345491] RIP: 0033:0x7f3d098eeb19
[ 1402.346006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1402.347994] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1402.348831] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1402.349821] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1402.350807] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1402.351815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1402.352852] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:43:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:12 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x300)

08:43:12 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:12 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 6)

08:43:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:12 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000010, 0xffffffffffffffff, 0x10000000)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x8, 0xd7e})
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
io_pgetevents(0x0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={r3, r4+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
io_setup(0x9, &(0x7f0000000040)=<r5=>0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x214684, 0x0)
io_submit(r1, 0x8, &(0x7f0000001f80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="745437aae2097ccbfe3eec7030dde02190c20684c55a126ac1330b9e511c8afe097ddc34e58cf150c9d030628ea134eb56278fc23abc5eb409b8dc663dc19c6db358b8c94646ad55620d532031c18259b0166788d3b159db9eef143f5c8591f2f5c56d369db919c90abd431d9ff8f50b433156410384a72c5984b94135600edcf275a1951eee3a3b1952dbb2933b60f9350c7c3c3e7bf62b4cc27cd8f1017e48adfac63a8d470cf58ed4a718", 0xac, 0x80}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000440)="c8fed01fd76bb69a419c719869bd4f4e64414e126d9ebec58e54670a0ddd434c3f7eb2d6b071f1139a319d9cce91b8", 0x2f, 0x8, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)="4e8ced08cdb73f1b9a5316a349aba818e6b223ac89c323b5ed253d33a5", 0x1d, 0xffff}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x3, r7, &(0x7f0000000740)="1cd9585f41e5f561e92d4d84debd09731effe4c7ad219ae35849156e982c48e85e6c4d3c63ee3caee163582ba93415fad64f5dcebbb1d39787ee6007d16b0007af8c188e02cb5ea1381dfb8cfb5b228beb15b24b2d2b2598edefee8428b3ea6dcd60cd6ba1aa3618e2a85db38271ba3bf4c848463fdf436acb69b3a5d28d70121ef7a4615496d86e0033c2067bfe3567f41e823c0393743f1a2fff5253b8819429fd502d79a42d910e1f28fff10edcbf674a9000c9d4e299857a462618ba53e64ee0d68657a94e", 0xc7, 0x0, 0x0, 0x0, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xf801, 0xffffffffffffffff, &(0x7f0000000c00)="287e06aeb72765ba15c8973de22a5078368637894334f7015de9458704cf9426f245ce45b1698436b10c4d62be019699f15ed8aa4c59da3da3b309a459a21865b0e608edb4010b5d16880b2b139072b7d4537691e0caa3780f09c3924f4d95468e07ab41847d513819573069cf27270a81e5ec1b93ac5be65187dc77d53742db9826a9377ec9c16112fd3c22796e72f123de4a70e424f2109f", 0x99, 0x7fff, 0x0, 0x2, r0}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x8, 0x8000, r2, &(0x7f0000000d40)="68560b1a83615f35f825754facdd0bfee1ece267953133b8e72a5e63a974ed34dcb0b9674688af3195f2a55128fb6faaec4924035f1a96927fe6590a997fa793b29d41df15e6723c7ed419d6280dadaa58b7e7721fded25b18e846354a304291b1f5bd2c652d7ad1767f6d6c5703fbae184193198fecb2bef0e1674aca4e5e8c2e1e252c1ac4f68373cb785f9408f9781e0f95e36c893c61", 0x98, 0x1, 0x0, 0x1, r0}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0xffffffffffffffff, &(0x7f0000000e40)="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", 0x1000, 0x5, 0x0, 0x3, r0}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000001e80)="faf19e4168a2285f0a0c6008d21b8dd3192aa7cc038734713189436413f266d5ed44715230cbe7a34e8b300f9d973f90468c6c0bf01c467761ba45af4f6a992cf87f5136617bae05b801efd7be167b5c473a7e0c638b63c2bbe3cc43d607d7f8e5abefee60e1673d456da148129a8bd8943e1fd0b6c43057a1da8b155a59976a21d08adf2d376bd409324ca37f06f6730d67d69a5930b43beb223acb59a0704d", 0xa0, 0x0, 0x0, 0x3, r0}])
pipe2(&(0x7f0000000640)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
fcntl$setpipe(r9, 0x407, 0x7fffffff)
io_submit(r5, 0x2, &(0x7f00000006c0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, r6, &(0x7f0000000480)="8e8a40d8780428f93386f772855e050a51c765125da32a537f76d8a10bdc21390bf593d1d84f395fd37e5e69b3b831d9c40a307f4635c1e8a03294dd26b23d693c7e0d77d1c7b649a2f4b3a8ac0983bc16ddc8778e88d790564830fa8ac19dc96cf593988c6cd51896e16a344e700c2f03e1049a96621568ad8d777b4e9061c274c62ed2", 0x84, 0x9, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000940)="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", 0x2a1, 0x2, 0x0, 0x1, r8}])
socket$netlink(0x10, 0x3, 0x1e)

[ 1416.396229] FAULT_INJECTION: forcing a failure.
[ 1416.396229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1416.397686] CPU: 1 PID: 17160 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1416.405976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1416.407041] Call Trace:
[ 1416.407392]  dump_stack+0x107/0x167
[ 1416.407877]  should_fail.cold+0x5/0xa
[ 1416.408381]  _copy_from_iter+0x202/0xe80
[ 1416.408920]  ? __virt_addr_valid+0x170/0x5d0
[ 1416.409498]  ? __check_object_size+0x319/0x440
[ 1416.410118]  kernfs_fop_write_iter+0x194/0x510
[ 1416.410719]  aio_write+0x355/0x7a0
[ 1416.411192]  ? cpumask_weight.constprop.0+0x40/0x40
[ 1416.411840]  ? lock_acquire+0x197/0x470
[ 1416.412373]  ? __might_fault+0xd3/0x180
[ 1416.412896]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.413437]  ? io_submit_one+0x1e0/0x1b80
[ 1416.414014]  io_submit_one+0xfbc/0x1b80
[ 1416.414544]  ? lock_acquire+0x197/0x470
[ 1416.415064]  ? find_held_lock+0x2c/0x110
[ 1416.415597]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1416.416227]  ? __might_fault+0xd3/0x180
[ 1416.416749]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.417306]  __x64_sys_io_submit+0x18d/0x2f0
[ 1416.417899]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1416.418514]  ? fput_many+0x2f/0x1a0
[ 1416.418994]  ? ksys_write+0x1a9/0x260
[ 1416.419493]  ? __ia32_sys_read+0xb0/0xb0
[ 1416.420029]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1416.420719]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1416.421393]  do_syscall_64+0x33/0x40
[ 1416.421904]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1416.422571] RIP: 0033:0x7f3d098eeb19
[ 1416.423058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1416.425433] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1416.426439] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1416.427367] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1416.428291] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1416.429216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1416.430166] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:43:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:12 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:12 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10042, 0x75)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x137001, 0x110, 0x4}, 0x18)
openat(r1, &(0x7f0000000140)='.\x00', 0x200, 0x10a)
socket$netlink(0x10, 0x3, 0x1e)

08:43:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 7)

08:43:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:13 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

[ 1416.888214] FAULT_INJECTION: forcing a failure.
[ 1416.888214] name failslab, interval 1, probability 0, space 0, times 0
[ 1416.889883] CPU: 1 PID: 17286 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1416.890722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1416.891733] Call Trace:
[ 1416.892059]  dump_stack+0x107/0x167
[ 1416.892504]  should_fail.cold+0x5/0xa
[ 1416.892972]  should_failslab+0x5/0x20
[ 1416.893435]  __kmalloc_track_caller+0x79/0x370
[ 1416.894002]  ? alloc_trial_cpuset+0x20/0xb0
[ 1416.894532]  kmemdup+0x23/0x50
[ 1416.894924]  alloc_trial_cpuset+0x20/0xb0
[ 1416.895429]  cpuset_write_resmask+0x1b5/0x20e0
[ 1416.895993]  ? cpuset_css_online+0x8d0/0x8d0
[ 1416.896529]  ? lock_acquire+0x197/0x470
[ 1416.897011]  ? kernfs_fop_write_iter+0x2af/0x510
[ 1416.897589]  ? lock_release+0x680/0x680
[ 1416.898089]  cgroup_file_write+0x1e9/0x7d0
[ 1416.898603]  ? cpuset_css_online+0x8d0/0x8d0
[ 1416.899138]  ? init_and_link_css+0x880/0x880
[ 1416.899670]  ? __virt_addr_valid+0x170/0x5d0
[ 1416.900209]  ? init_and_link_css+0x880/0x880
[ 1416.900742]  kernfs_fop_write_iter+0x348/0x510
[ 1416.901298]  aio_write+0x355/0x7a0
[ 1416.901749]  ? cpumask_weight.constprop.0+0x40/0x40
[ 1416.902353]  ? lock_acquire+0x197/0x470
[ 1416.902847]  ? __might_fault+0xd3/0x180
[ 1416.903331]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.903832]  ? io_submit_one+0x1e0/0x1b80
[ 1416.904347]  io_submit_one+0xfbc/0x1b80
[ 1416.904833]  ? lock_acquire+0x197/0x470
[ 1416.905312]  ? find_held_lock+0x2c/0x110
[ 1416.905815]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1416.906399]  ? __might_fault+0xd3/0x180
[ 1416.906882]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.907402]  __x64_sys_io_submit+0x18d/0x2f0
[ 1416.907939]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1416.908514]  ? fput_many+0x2f/0x1a0
[ 1416.908958]  ? ksys_write+0x1a9/0x260
[ 1416.909422]  ? __ia32_sys_read+0xb0/0xb0
[ 1416.909936]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1416.910571]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1416.911196]  do_syscall_64+0x33/0x40
[ 1416.911648]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1416.912267] RIP: 0033:0x7f3d098eeb19
[ 1416.912717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1416.914959] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1416.915880] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1416.916743] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1416.917605] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1416.918482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1416.919344] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
[ 1417.322851] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,,errors=continue
08:43:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 8)

08:43:27 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}]})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:27 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/cpu', 0x400000, 0x100)
clone3(&(0x7f00000008c0)={0x85244100, 0x0, 0x0, 0x0, {}, 0x0, 0x28, 0x0, 0x0, 0x0, {r0}}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:43:27 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x300)

08:43:27 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

08:43:27 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

[ 1431.877114] FAULT_INJECTION: forcing a failure.
[ 1431.877114] name failslab, interval 1, probability 0, space 0, times 0
[ 1431.878534] CPU: 1 PID: 17422 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1431.879372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1431.880376] Call Trace:
[ 1431.880703]  dump_stack+0x107/0x167
[ 1431.881152]  should_fail.cold+0x5/0xa
[ 1431.881624]  ? create_object.isra.0+0x3a/0xa20
[ 1431.882200]  should_failslab+0x5/0x20
[ 1431.882673]  kmem_cache_alloc+0x5b/0x310
[ 1431.883174]  create_object.isra.0+0x3a/0xa20
[ 1431.883709]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1431.884334]  __kmalloc_track_caller+0x177/0x370
[ 1431.884901]  ? alloc_trial_cpuset+0x20/0xb0
[ 1431.885434]  kmemdup+0x23/0x50
[ 1431.885827]  alloc_trial_cpuset+0x20/0xb0
[ 1431.886348]  cpuset_write_resmask+0x1b5/0x20e0
[ 1431.886914]  ? cpuset_css_online+0x8d0/0x8d0
[ 1431.887453]  ? lock_acquire+0x197/0x470
[ 1431.887937]  ? kernfs_fop_write_iter+0x2af/0x510
[ 1431.888517]  ? lock_release+0x680/0x680
[ 1431.889009]  cgroup_file_write+0x1e9/0x7d0
[ 1431.889523]  ? cpuset_css_online+0x8d0/0x8d0
[ 1431.890061]  ? init_and_link_css+0x880/0x880
[ 1431.902705]  ? __virt_addr_valid+0x170/0x5d0
[ 1431.903291]  ? init_and_link_css+0x880/0x880
[ 1431.903857]  kernfs_fop_write_iter+0x348/0x510
[ 1431.904457]  aio_write+0x355/0x7a0
[ 1431.904855]  ? cpumask_weight.constprop.0+0x40/0x40
[ 1431.905383]  ? lock_acquire+0x197/0x470
[ 1431.905814]  ? __might_fault+0xd3/0x180
[ 1431.906280]  ? lock_downgrade+0x6d0/0x6d0
[ 1431.906781]  ? io_submit_one+0x1e0/0x1b80
[ 1431.907297]  io_submit_one+0xfbc/0x1b80
[ 1431.907787]  ? lock_acquire+0x197/0x470
[ 1431.908268]  ? find_held_lock+0x2c/0x110
[ 1431.908760]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1431.909344]  ? __might_fault+0xd3/0x180
[ 1431.909825]  ? lock_downgrade+0x6d0/0x6d0
[ 1431.910363]  __x64_sys_io_submit+0x18d/0x2f0
[ 1431.910900]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1431.911472]  ? fput_many+0x2f/0x1a0
[ 1431.911915]  ? ksys_write+0x1a9/0x260
[ 1431.912376]  ? __ia32_sys_read+0xb0/0xb0
[ 1431.912871]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1431.913507]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1431.914132]  do_syscall_64+0x33/0x40
[ 1431.914605]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1431.915230] RIP: 0033:0x7f3d098eeb19
[ 1431.915683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1431.917913] RSP: 002b:00007f3d06e64188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1431.918852] RAX: ffffffffffffffda RBX: 00007f3d09a01f60 RCX: 00007f3d098eeb19
[ 1431.919717] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f3d099e5000
[ 1431.920583] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1431.921448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1431.922325] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:43:28 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:43:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x300)

08:43:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 9)

[ 1432.044638] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,,errors=continue
08:43:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1432.182758] FAULT_INJECTION: forcing a failure.
[ 1432.182758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1432.184541] CPU: 1 PID: 17543 Comm: syz-executor.3 Not tainted 5.10.228 #1
[ 1432.185443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1432.186539] Call Trace:
[ 1432.186892]  dump_stack+0x107/0x167
[ 1432.187370]  should_fail.cold+0x5/0xa
[ 1432.187875]  _copy_to_user+0x2e/0x180
[ 1432.188381]  simple_read_from_buffer+0xcc/0x160
[ 1432.189003]  proc_fail_nth_read+0x198/0x230
[ 1432.189578]  ? proc_sessionid_read+0x230/0x230
[ 1432.190186]  ? security_file_permission+0xb1/0xe0
[ 1432.190824]  ? proc_sessionid_read+0x230/0x230
[ 1432.191407]  vfs_read+0x228/0x620
[ 1432.191863]  ksys_read+0x12d/0x260
[ 1432.192333]  ? vfs_write+0xb10/0xb10
[ 1432.192835]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1432.193523]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1432.194212]  do_syscall_64+0x33/0x40
[ 1432.194704]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1432.195370] RIP: 0033:0x7f3d098a169c
[ 1432.195858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1432.198254] RSP: 002b:00007f3d06e64170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1432.199240] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3d098a169c
[ 1432.200163] RDX: 000000000000000f RSI: 00007f3d06e641e0 RDI: 0000000000000004
[ 1432.201086] RBP: 00007f3d06e641d0 R08: 0000000000000000 R09: 0000000000000000
[ 1432.202013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1432.202961] R13: 00007fff1c078d5f R14: 00007f3d06e64300 R15: 0000000000022000
08:43:28 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r6, r5)
fcntl$dupfd(r5, 0x406, r0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:43:28 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:43:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:42 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200042, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:43:42 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x300)

08:43:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

08:43:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:42 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:42 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:43:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1446.488695] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:43:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:42 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x2)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000080)={0x2, 0x644, 0xec, &(0x7f0000000300)=""/236})
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:43:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:43 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:43 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:43:43 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x300)

08:43:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:43 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

[ 1447.276490] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:43:43 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='h}[\x00', &(0x7f0000000200)='\x00', &(0x7f0000000300)='[\x00', &(0x7f0000000340)='\\%\\:[^\x00', &(0x7f0000000580)='\x8e\x01hR\xc2\x84\x95\xc3\xe8\xd9\xc3\b\xb0,\xe0\x1cOy\xf9\xfe\xfc~\x80S\x9a\xbau\x16QA\xc8\x7f\xfbnjs4U\xf8\x88\x05w\x8a\r{H\xa51L\xe2\xea\xf4\x19y\xbb\xd3Q\xf3\x92yx\xb1\xe2\xe8>\xd7@a\xc2g\x99\x1fTA\x1d\x95i83\x1b\xb6d\x18}!\xaeM\x18c\x11\x16,\x87\x8aZ\xb3iE\xcfw\x9c\xe3%t\a\"+\x15\x94\xb2<+\xee\xd9\a#\xa1=mwam\x05\xbc\x99\xcee_\x9eN5\xf4\x1c\xab\xca\x80\x00\xc6\x06\x9e\xa4O\n\xd7\xed_K/\xa2'], &(0x7f0000000540)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='&]{\x00', &(0x7f0000000480)='\'])[]!@]\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\xa6\x00'], 0x100)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="010000000000002e22139bc0849a20a1c6a23b424c2b9ef9907fd78690040a2ec63710336f55b46a5d5f2f3000"])
r2 = fsmount(r1, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r3=>0x0)
io_pgetevents(r3, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
dup2(r2, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1e)

08:43:57 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:43:57 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x23f, 0x0, 0x0, 0x300)

08:43:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000008c0))

08:43:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x4, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:43:57 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
pidfd_getfd(r1, r0, 0x0)
lseek(r0, 0xfffffffffffffffa, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:43:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1461.717740] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:43:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:43:57 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:44:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x240, 0x0, 0x0, 0x300)

08:44:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:44:14 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r6, r5)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r0, {0x1}}, './file1\x00'})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r11 = dup2(r10, r10)
r12 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r12, r11)
io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000040)="a408aa9c16fab55c189c7348e4c52045d82b770cc55d72b73c1f64b91a5b134e07990cf753cb69cf4989af03466a705e25993a92621c54e51ddd03332e93145190076533d68e67fa05037b52f0e0dc4438", 0x51, 0x1, 0x0, 0x2, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x81, r7, &(0x7f0000000300)="8c1f104f6913639c8eda5317563c361f575348980a75d54b2a84b71fc7c3f3b2f5739a184e120e97f8ed8936c28de2b393cd771aad6bdd80f8193747a7cf94317cd100a73c0e0b410627614fbe1c57207df38a4d760ebd9aa7464eab7f85ed880fad68576034f86d2144697324ea4719cc2d13a603e76b2572212ed5fc2d4daf7367cd03cf7066c1b4596f975117a3af610ead1d3a4baed4478bfeab7e01253a83a8ade2d287c8a0dffb3935db459d8651a611b279d223a2b797ab11013a", 0xbe, 0xffffffffffffff81, 0x0, 0x2, r11}])
socket$netlink(0x10, 0x3, 0x1e)

08:44:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:14 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x5, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:14 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:14 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

08:44:14 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1478.555199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:44:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:14 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x90800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2})
io_setup(0x3ff, &(0x7f00000000c0))
io_setup(0x0, &(0x7f0000000000)=<r2=>0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1)
io_setup(0x7, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup2(r6, r6)
r8 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r8, r7)
io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000240)="e8ffe3dc7ae253a16570c793effb9dccba6065de67871a930c7254893420549341c47e0a52f821167f6aebd70f019a7312252bd7104eb7371750ff2668ec8a18fc86841fcab5596167cb697a8c3bc139564605a85695159418acd5285376fc13d7ac4e29c3af28f299202ea31b5ebb7792e3542f23be77f0569c749e534a8e4250aecdccbc", 0x85, 0x0, 0x0, 0x439b3f8f44d94ce2, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x50, r0, &(0x7f0000000580)="8a5556b7c2897f39f9ffb959953a09d00e8014f18d3c35b69351a72cab0ddb2533c670eb6b66498130b606e0cc14e339bd2311636fcae23fdb9eac5a35aac97a76c31cdcc1c1bfb32d3d316a3abd97f562ac2ddb40a1b1bfa109af0061ce9b55c89e7d7fac7e8f52e5f6ed43717bbff0bd85a368261ae77b184345cb2f463e30c427727fb1214fa0192b476b551d493d858dfa632505622a07d59371c724cf91c2b5c9ddb6b38d3f20bd448ddab6d899cc7fdbbaaa20eb828c61017701ffbdfd6f7206c215d070c26eab5959d221d8d4cb7951b742310e381561163b9e84616e456fe77ae7d48f320f8f6fe60618baaf17146f19015b768b3798a7", 0xfb, 0xff, 0x0, 0x2, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xd565777a8834ed74, 0x7, r0, &(0x7f0000000380)="2e2dd4767cc8fc1bd6afeb8cb73a36d12b388176e29d930a8ac126abf49c2c8b05f933969acb84573dc201f9093af8266d56de16184673d65559", 0x3a, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000680)="f752df0b9f3d6111b380c013c03781d375", 0x11, 0x0, 0x0, 0x0, r7}])
io_pgetevents(r2, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000080), &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:44:14 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x7, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:15 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:15 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:44:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:15 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x300)

[ 1479.317960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:44:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:30 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x300)

08:44:30 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:30 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0))
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:30 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r2 = socket$netlink(0x10, 0x3, 0x1e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r3, &(0x7f0000000000)='1', 0x1}])
r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2c2, 0x100)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x4}}, './file1\x00'})
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = dup2(r9, r9)
r11 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r11, r10)
io_submit(r4, 0x3, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x2, r2, &(0x7f0000000040)="1a736c8af084e7f8", 0x8, 0xfffffffffffffffc, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000000200), 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9, r11, &(0x7f0000000380)="703f795d6868c8bf588a57567da1dde01ca3647ae2e97a028425d5f7ff9366bed49a24bdd9dd27eb4701c2d699fc831af427189bc31d1493deb869740363afef3de6956027d7d1121ca41470bff5ce704a7d096ef44ccc11eefb42627d1d04a7b57752079f", 0x65, 0xfffffffffffffffc, 0x0, 0x2, r0}])

08:44:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

08:44:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x9, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:30 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) (fail_nth: 1)

08:44:30 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='1', 0x1}])

[ 1494.184042] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:44:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xa, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:30 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x5, 0x0, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000080)={&(0x7f0000000180)={[0x1367]}, 0xffffffffffffff87})
socket$netlink(0x10, 0x3, 0x1e)

08:44:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:30 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x300)

08:44:30 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:30 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0}])

08:44:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1495.071822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:44:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1e4, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:44:45 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc2, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r2)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x5, 0xffffff81, 0x900, 0x1ff})
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r4=>0x0)
open(&(0x7f0000001a00)='./file1\x00', 0x2100, 0xefad40df5530285c)
io_pgetevents(r4, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x440, 0x0)
r7 = signalfd(r1, &(0x7f0000000680)={[0x2]}, 0x8)
r8 = openat$incfs(r3, &(0x7f0000001940)='.log\x00', 0x0, 0x42)
io_submit(r4, 0x5, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000000940)="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", 0x1000, 0xd21, 0x0, 0x3, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9a2, r6, &(0x7f0000000440)="f1e926a714a83fa7f279d70accd88094636258a58f37c37523d1ab5ee785ea7ed39b482b6df6c7e0745030e751ff48c5ac185c4ca22b11d21b2d740b0ded15d5379d378823f3b546037970d2e43e969bf56694096bf1d43e02505886ad2e1bdf2cbcc5177847fe61d42c3ce43483d19b07713c1bdbf3b95f993ede3cfbb6d9dcaaa1aefdc26690f5c7923aeb48acf54c2968b3e94cc124ee9d88dfc996cc732515cabeeea2364cc45d754e0f48a4d0e416e087b4685c2d15b5c283250c798b9163bafe78e36d47d85f810d7b085761ef798c6c0973150a27e833789ffd730949d1b879c5bc1192", 0xe7, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f0000000580)="cce2bd808ccd7e2c0c4050f20317149960711f970631aae26b81d8fe02dd1282bf0cbb98163cec18cef5ccf7bdd87d2797d3d7a95bc465c5b04294104eff5b8003395ccb5e1a50e19d0c6e9816c0bb75b1820d32357aacaf2b72058b708ea1bea7afde6c8be2cf356ff6203ffe2984d53080c0c7ca657a89cf4476a44a6400f2fe724293ac7adaf010d5eb9aa6cca7acd7f07ca3f1d70f347f89cf67f72e8817cc5138302b48b14b07fc8cedc3fd7b89b578f96d2fdc78b886a366f1", 0xbc, 0xfff, 0x0, 0x3, r3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r7, &(0x7f00000006c0)="7a070c710c9485f34aa64355a245db9dd9070ef934939265db78d6b148c247f438c695bd152cd7490b4ab16dd8c7f58189b614f384bf6e10bd7beb529a6b573e874c61e9ce94bfe35cdeeb02219074b2486a561d013e8f10faae7b29fd5b21ff5c5a568bb8544dd603fc80989cb5ea62e3012e2c13ffbb736809e4bb80ac7e0340165ae3e000f558927bad8581b9dc41685b98c8c1abd4689c08f4eaf038e461bc6d03eac9c99088096c1423e5a74b8ae63987a49d", 0xb5, 0x8, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x400, 0xffffffffffffffff, &(0x7f00000007c0)="543384de83b219ccede05fb1fc4381c7399fcb7a1f2367253f1a1ba4ff14b291f0fb3f2e459bb17c42ae9b75fd5e4619cf1335707c8ebc12b95196efd12e19047f7a55663d6c0f6254e7a8c7a24605429f4284813609af3e0fc32394be6f76088c8a4f6bb861b3cb35356726245bc060c04e4beed706b39d6869a18ed7036278d1fd8a60a2a0dc6ab9804d9cb4033b6e6e319a9f002f91b5add3dfc6a2d75b5c349d3a1359929c12bd84b583df2fdbbe06aa3a968f4a1264a921455cc09751655a3f61032fb45ed9c7d66256e8b000725983365c5776", 0xd6, 0x20, 0x0, 0x0, r8}])

08:44:45 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:44:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0}])

08:44:45 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x300)

08:44:45 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:44:45 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:44:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0}])

08:44:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x300, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1509.696907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f02, 0x0, 0x0, 0x300)

08:45:00 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:00 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:00 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x300)

08:45:00 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0)
read(r0, &(0x7f0000000080)=""/41, 0x29)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r3 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r0}, './file1\x00'})
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x876, r4, &(0x7f0000000480)="f9560c2a5f464351d4ae8f7e698fb5720d05095d6f64c212506497d9544584a9bef1836eda17f528562fec3c2e4497cd905996c99e48f32f0ae3b6b20e731073b1bdeaba2254b0b64f8ba55fb786d25b59bbd596c19c1e613919c6b5ba03a708b15849bc0144f6b4b2c8a977f72021dfe6854ea7a69f9893edb5e6cb38016770943ba2c7f46d830adc3afef138a139ae08bb33c6344c8f7f70b99ad558a80f088aeeb4da3e9c52b52db40f6bff6c7f906294a40fffe688fc23dd806b6b89ddf81ffc65781444c4c1d9575c0b78ce75e9e735342931", 0xd5, 0x71ef41a2, 0x0, 0x2, r2}])
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000300)={0x1, 0x2, 0x4, 0x5, 0x3, [{0x7, 0x2, 0xe3}, {0x18, 0xfffffffffffffffa, 0xfff, '\x00', 0x4}, {0x68fde84f, 0xff5, 0x1f, '\x00', 0x220e}]})
socket$netlink(0x10, 0x3, 0x1e)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

08:45:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0}])

08:45:00 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfdef, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1524.154116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0}])

08:45:00 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:00 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfdfc, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:00 executing program 6:
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x521440, 0x40)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3000000}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:45:00 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x300)

08:45:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0}])

[ 1524.892165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:01 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x300)

08:45:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfdfe, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:01 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:01 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
recvmmsg(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000005100)=""/91, 0x5b}], 0x8, &(0x7f0000000200)=""/12, 0xc}, 0x2}, {{&(0x7f0000000800)=@llc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/137, 0x89}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}, {&(0x7f0000001c00)=""/234, 0xea}], 0x6, &(0x7f0000001d80)=""/182, 0xb6}, 0x8}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/149, 0x95}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x3, &(0x7f0000002f80)=""/115, 0x73}, 0x80000001}, {{&(0x7f0000003000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000003080)=""/174, 0xae}], 0x1, &(0x7f0000003180)=""/213, 0xd5}}, {{&(0x7f0000003280)=@sco, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003300)=""/107, 0x6b}, {&(0x7f0000005180)=""/132, 0x84}, {&(0x7f0000003400)=""/81, 0x51}, {&(0x7f0000003480)=""/234, 0xea}, {&(0x7f0000003580)=""/52, 0x34}], 0x5, &(0x7f0000003640)=""/223, 0xdf}, 0x9}, {{&(0x7f0000003740)=@nfc_llcp, 0x80, &(0x7f0000003b80)=[{&(0x7f00000037c0)=""/154, 0x9a}, {&(0x7f0000003880)=""/33, 0x21}, {&(0x7f00000038c0)=""/184, 0xb8}, {&(0x7f0000003980)=""/9, 0x9}, {&(0x7f00000039c0)=""/231, 0xe7}, {&(0x7f0000003ac0)=""/192, 0xc0}], 0x6, &(0x7f0000003c00)=""/82, 0x52}, 0x400}, {{&(0x7f0000003c80)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000003d00)=""/8, 0x8}, {&(0x7f0000003d40)=""/210, 0xd2}], 0x2, &(0x7f0000003e80)=""/4096, 0x1000}, 0x9}], 0x7, 0x0, &(0x7f0000005040)={0x77359400})
socket$netlink(0x10, 0x3, 0x1e)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000005080)=""/54, &(0x7f00000050c0)=0x36)

08:45:01 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1525.927581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1526.169866] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
08:45:16 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x300)

08:45:16 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4002, 0x0, 0x0, 0x300)

08:45:16 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfe00, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:16 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:16 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
socket$inet_udp(0x2, 0x2, 0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:45:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x20000001, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:16 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup2(r5, r5)
r7 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r7, r6)
io_submit(0x0, 0x2, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="131887df5878586be7ec2ed75a4f29b154b00670dec941ea3f657e46dbdc1049c2b62e5929cf8a330a4fefefab6e0fe4daae8a2d3f7f7d2a2e3b95f80799a97c751c6e9a26149b90dfe8e28de2bf34e35dba0746f8e7244c836573aea05e2a5159dbee5353b2adea006986a935510eb76fd0e59af8bedd9ede78e25b3f44ed800f7662e45b60339a76d88975051b9989fcf0207ff017eb284547f4dca8583a143e1a4b7e9272f9a8c8dbe74d34f5119307ee374bcfba4fc811d11fd72895a1a193b895c15127b64caa6174f606ab487ef6a18974b6f804", 0xd7, 0x6, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="f28e880112e753e7b7376b1aef38b18a50abf363fbf1694968895db614645217522fe3e41ec047885d0e0b3fa52051f3504ab77c49dbba8a91cf505322d1972989b0780be8bd0db3ec1e1c82a5674e42735fa2172b232053fd0351ca627d116fbc0021b7f35e1ee1c1188b63222d180b97e637d8a9c92154a8340cdf0b6073c856975ecb83aa94456b17a21f595787", 0x8f, 0x9, 0x0, 0xd603f04c46feade3, r6}])
flistxattr(r2, &(0x7f0000000d40)=""/4096, 0x1000)
ioctl$CDROM_DISC_STATUS(r2, 0x5327)
io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080)=0x1ff, 0x5)
io_setup(0x3ff, &(0x7f0000000040)=<r8=>0x0)
io_pgetevents(r8, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r9 = socket$netlink(0x10, 0x3, 0x1e)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x8010, r9, 0xba432000)

[ 1540.642279] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:31 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = getpid()
syz_open_procfs(r1, &(0x7f0000000600)='attr/fscreate\x00')
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000a, 0x45010, r0, 0x8000000)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340))
io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
io_pgetevents(r2, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
r4 = socket$netlink(0x10, 0x3, 0x1e)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r4, @ANYBLOB="04000000000000002e2f66696c653100"])
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r8=>0x0, 0x29, 0x1, 0x4, 0x5aa, 0x10, @local, @mcast1, 0x700, 0x7, 0x400, 0x5}})
r9 = geteuid()
sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@migrate={0x228, 0x21, 0x300, 0x70bd2c, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@broadcast, 0x4e20, 0x7f, 0x4e20, 0x9, 0x2, 0xa0, 0x80, 0x11, r7, 0xffffffffffffffff}, 0x6e6bb0}, [@algo_comp={0xab, 0x3, {{'lzs\x00'}, 0x318, "75c5f8ac661f8069f08d38f7b913523ef2e42b7eb57af9dcb87fd5b47dfe70c55716f772ea229afdb9bdd3b586da818e1df14b2cdc4bed1702ea165980995e675061fdd65c8126e82f661f1f3c35ae2fea93f543bb31f875eb0b25b42da4eda9e2dd5f"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd29, 0x70bd2a, 0x70bd29, 0x6, [0x0]}}, @extra_flags={0x8, 0x18, 0x4}, @lifetime_val={0x24, 0x9, {0x24, 0x6, 0x8, 0x3}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0xb9, 0x4}}, @policy={0xac, 0x7, {{@in=@private=0xa010102, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e22, 0x802, 0x4e21, 0x0, 0x4, 0x80, 0x20, 0x88, r8, r9}, {0x8, 0x8, 0x8, 0x9, 0x1, 0x8af, 0x800, 0x7}, {0x1f, 0x9, 0x4, 0x1}, 0x6, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}}, @mark={0xc, 0x15, {0x350759, 0x7f}}]}, 0x228}, 0x1, 0x0, 0x0, 0x800}, 0x200480e1)
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)

08:45:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x80000002, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:31 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:31 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4158, 0x0, 0x0, 0x300)

08:45:31 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x300)

08:45:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffdef, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

[ 1555.690737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:31 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x41)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x3]}, 0xffffffffffffff90})
socket$netlink(0x10, 0x3, 0x1e)
open$dir(&(0x7f0000000040)='./file1\x00', 0x40040, 0x12b)
pselect6(0x40, &(0x7f0000000180)={0x4, 0x0, 0x401, 0x7, 0x9, 0x5438c914, 0x400, 0x8}, &(0x7f0000000200)={0x756, 0x3, 0x8, 0x4, 0x1f, 0x9, 0x10001, 0x2}, &(0x7f0000000300)={0x3, 0x28, 0x80000000, 0x6, 0x80000, 0x0, 0x8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})
clock_gettime(0x0, &(0x7f00000024c0)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r0, &(0x7f0000002380)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/117, 0x75}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000940)=""/241, 0xf1}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/120, 0x78}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/21, 0x15}, {&(0x7f0000000e40)=""/9, 0x9}, {&(0x7f0000000e80)=""/68, 0x44}, {&(0x7f0000000f00)=""/250, 0xfa}, {&(0x7f0000001000)=""/125, 0x7d}], 0x6, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, &(0x7f0000002240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x5, 0x40, &(0x7f0000002500)={r2, r3+10000000})

08:45:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:32 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

08:45:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, r1)

08:45:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffdfc, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1556.020232] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:32 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = timerfd_create(0x5, 0x800)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xc8f]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:45:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffdfe, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1556.267901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:46 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:46 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x300)

08:45:46 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffe00, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:46 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

08:45:46 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4163, 0x0, 0x0, 0x300)

08:45:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:46 executing program 6:
shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
io_pgetevents(r0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

[ 1570.256566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[ 1570.259903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffffffffffdef, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:45:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 1)

08:45:46 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
r5 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r5, r4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r5, 0xffffffffffff30d3, 0x6, 0x3})
io_setup(0x3ff, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_io_uring_setup(0x6280, &(0x7f0000000040)={0x0, 0x71f4, 0x10, 0x2, 0x1a4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000200))
io_pgetevents(r6, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x30, r7, 0x10000000)
syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x8, 0x0, &(0x7f0000000300)="46baa5f7999c3e64402621422abf898d1e1351f8b5b07528ba75024755797e2e730f5a74b345fae6c2a6fa8ed4d673ce96e824bc1e1e19ff6b7fc20b4129edca9ca98fe0e96d808a5b2a8cb92da53dd1f17aeb02e0886ffaffaad5150211bf56db12019eda6623a4fd0cec859072906bcc6c0086752be8de12df0f2d85277dd4c850c363436946b78fe4c1daeb1362fa3548eefb8f185d08a9f2de9d99d091303e6092aa11b734f768d657de0baf67e0f4a710b3a0bc087cac575c1b3713b0e6fbad0ca2435cbc0267184e05d9f902c66b5a7a0bdf1855fcd25c93328dda62ee0a0b732a9929091cd0781ce93c3bdaa5c45fb52ea2b5d3", 0x4, 0x0, 0x0, {0x3}}, 0x25e)

08:45:46 executing program 7:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r0, 0x4, 0xc00)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(0xffffffffffffffff, r0)

08:45:47 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:45:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffffffffffdfc, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:45:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

[ 1571.139548] FAULT_INJECTION: forcing a failure.
[ 1571.139548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1571.140998] CPU: 1 PID: 20072 Comm: syz-executor.1 Not tainted 5.10.228 #1
[ 1571.141832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1571.142830] Call Trace:
[ 1571.143155]  dump_stack+0x107/0x167
[ 1571.143611]  should_fail.cold+0x5/0xa
[ 1571.144082]  _copy_from_user+0x2e/0x1b0
[ 1571.144571]  io_submit_one+0x8f/0x1b80
[ 1571.145053]  ? lock_acquire+0x197/0x470
[ 1571.145535]  ? find_held_lock+0x2c/0x110
[ 1571.146031]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1571.146621]  ? __might_fault+0xd3/0x180
[ 1571.147106]  ? lock_downgrade+0x6d0/0x6d0
[ 1571.147641]  __x64_sys_io_submit+0x18d/0x2f0
[ 1571.148177]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1571.148758]  ? fput_many+0x2f/0x1a0
[ 1571.149204]  ? ksys_write+0x1a9/0x260
[ 1571.149667]  ? __ia32_sys_read+0xb0/0xb0
[ 1571.150164]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1571.150805]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1571.151449]  do_syscall_64+0x33/0x40
[ 1571.151903]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1571.152528] RIP: 0033:0x7f68fec1cb19
[ 1571.152981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1571.155224] RSP: 002b:00007f68fc192188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1571.156160] RAX: ffffffffffffffda RBX: 00007f68fed2ff60 RCX: 00007f68fec1cb19
[ 1571.157030] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f68fed13000
[ 1571.157899] RBP: 00007f68fc1921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1571.158771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1571.159648] R13: 00007ffe1b07924f R14: 00007f68fc192300 R15: 0000000000022000
[ 1571.215844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:45:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x5841, 0x0, 0x0, 0x300)

08:46:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0xeca, &(0x7f00000000c0)=<r1=>0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x8, 0x6, 0xaff, 0x7fffffff})
io_pgetevents(r1, 0x6, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)
io_setup(0x1000, &(0x7f0000000040)=<r3=>0x0)
io_destroy(r3)

08:46:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x6341, 0x0, 0x0, 0x300)

08:46:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:46:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x300)

08:46:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 2)

08:46:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:46:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffffffffffdfe, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:46:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

[ 1587.161127] FAULT_INJECTION: forcing a failure.
[ 1587.161127] name failslab, interval 1, probability 0, space 0, times 0
[ 1587.162519] CPU: 1 PID: 20216 Comm: syz-executor.1 Not tainted 5.10.228 #1
[ 1587.163355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1587.164380] Call Trace:
[ 1587.164706]  dump_stack+0x107/0x167
[ 1587.165152]  should_fail.cold+0x5/0xa
[ 1587.165620]  ? io_submit_one+0xfb/0x1b80
[ 1587.166120]  should_failslab+0x5/0x20
[ 1587.166586]  kmem_cache_alloc+0x5b/0x310
[ 1587.167086]  io_submit_one+0xfb/0x1b80
[ 1587.167568]  ? lock_acquire+0x197/0x470
[ 1587.168072]  ? find_held_lock+0x2c/0x110
[ 1587.168568]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1587.169156]  ? __might_fault+0xd3/0x180
[ 1587.169640]  ? lock_downgrade+0x6d0/0x6d0
[ 1587.170158]  __x64_sys_io_submit+0x18d/0x2f0
[ 1587.170702]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1587.171277]  ? fput_many+0x2f/0x1a0
[ 1587.171724]  ? ksys_write+0x1a9/0x260
[ 1587.172202]  ? __ia32_sys_read+0xb0/0xb0
[ 1587.172701]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1587.173343]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1587.173973]  do_syscall_64+0x33/0x40
[ 1587.174429]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1587.175054] RIP: 0033:0x7f68fec1cb19
[ 1587.175508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1587.177760] RSP: 002b:00007f68fc192188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1587.178688] RAX: ffffffffffffffda RBX: 00007f68fed2ff60 RCX: 00007f68fec1cb19
[ 1587.179555] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f68fed13000
[ 1587.180432] RBP: 00007f68fc1921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1587.181296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1587.182163] R13: 00007ffe1b07924f R14: 00007f68fc192300 R15: 0000000000022000
08:46:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0xfffffffffffffe00, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1587.223214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:46:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:46:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 3)

08:46:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x2, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:46:03 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80, 0x80)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
getsockname(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80)
openat(r0, &(0x7f0000000200)='./file1\x00', 0x440080, 0x5)
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c66736361c0537b5f6b97a56368652c667363616368652c6673757561643d62673532343235002d380039332d303134632d610033322d0036356630633030ed2c66756ed879633d43524544535f434845434b2c7065726d69745f646900000001000000006f776e65723de0359bb5f6c5410af2ab442e3193aaa32734", @ANYRESDEC=r3, @ANYBLOB=',smackfsroot=],audit,\x00'])
socket$netlink(0x10, 0x3, 0x1e)

[ 1587.436286] FAULT_INJECTION: forcing a failure.
[ 1587.436286] name failslab, interval 1, probability 0, space 0, times 0
[ 1587.444145] CPU: 1 PID: 20332 Comm: syz-executor.1 Not tainted 5.10.228 #1
[ 1587.444978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1587.445974] Call Trace:
[ 1587.446298]  dump_stack+0x107/0x167
[ 1587.446741]  should_fail.cold+0x5/0xa
[ 1587.447207]  ? create_object.isra.0+0x3a/0xa20
[ 1587.447765]  should_failslab+0x5/0x20
[ 1587.448241]  kmem_cache_alloc+0x5b/0x310
[ 1587.448739]  create_object.isra.0+0x3a/0xa20
[ 1587.449270]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1587.449889]  kmem_cache_alloc+0x159/0x310
[ 1587.450398]  io_submit_one+0xfb/0x1b80
[ 1587.450878]  ? lock_acquire+0x197/0x470
[ 1587.451360]  ? find_held_lock+0x2c/0x110
[ 1587.451861]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1587.452449]  ? __might_fault+0xd3/0x180
[ 1587.452933]  ? lock_downgrade+0x6d0/0x6d0
[ 1587.453449]  __x64_sys_io_submit+0x18d/0x2f0
[ 1587.453984]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1587.454557]  ? fput_many+0x2f/0x1a0
[ 1587.455000]  ? ksys_write+0x1a9/0x260
[ 1587.455462]  ? __ia32_sys_read+0xb0/0xb0
[ 1587.455973]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1587.456611]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1587.457237]  do_syscall_64+0x33/0x40
[ 1587.457690]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1587.458313] RIP: 0033:0x7f68fec1cb19
[ 1587.458765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1587.461009] RSP: 002b:00007f68fc192188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1587.461933] RAX: ffffffffffffffda RBX: 00007f68fed2ff60 RCX: 00007f68fec1cb19
[ 1587.462799] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f68fed13000
[ 1587.463664] RBP: 00007f68fc1921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1587.464541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1587.465407] R13: 00007ffe1b07924f R14: 00007f68fc192300 R15: 0000000000022000
08:46:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(r1, 0x4, 0xc00)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xff, 0x4)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat$vcs(0xffffffffffffff9c, &(0x7f0000002340), 0x4000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup2(r0, 0xffffffffffffffff)

08:46:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

[ 1587.633766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:46:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 4)

08:46:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[])
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:46:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:46:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x232, 0x0, 0x0, 0x300)

08:46:17 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x2, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:46:17 executing program 6:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1ef})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
dup2(r6, r5)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'security.selinux\x00'}}, {@aname={'aname', 0x3d, 'system_u:object_r:dbusd_exec_t:s0\x00'}}, {@cachetag={'cachetag', 0x3d, '^.@}]/:[\xd7%&'}}, {@debug={'debug', 0x3d, 0x6}}, {@fscache}, {@mmap}, {@access_client}, {@uname={'uname', 0x3d, '.\xcf,'}}, {@mmap}, {@cachetag={'cachetag', 0x3d, '-)['}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, ']'}}]}})
fsetxattr$security_selinux(r1, &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22, 0x1)
io_pgetevents(0x0, 0x6, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8})
socket$netlink(0x10, 0x3, 0x1e)

08:46:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x300)

08:46:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x4, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1601.603694] FAULT_INJECTION: forcing a failure.
[ 1601.603694] name failslab, interval 1, probability 0, space 0, times 0
[ 1601.605319] CPU: 1 PID: 20468 Comm: syz-executor.1 Not tainted 5.10.228 #1
[ 1601.606161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1601.607174] Call Trace:
[ 1601.607502]  dump_stack+0x107/0x167
[ 1601.607950]  should_fail.cold+0x5/0xa
[ 1601.612447]  ? kvmalloc_node+0x119/0x170
[ 1601.612943]  should_failslab+0x5/0x20
[ 1601.613406]  __kmalloc_node+0x76/0x420
[ 1601.613883]  kvmalloc_node+0x119/0x170
[ 1601.614357]  seq_read_iter+0x81c/0x12b0
[ 1601.614842]  ? _cond_resched+0x12/0x80
[ 1601.615324]  kernfs_fop_read_iter+0x456/0x5f0
[ 1601.615868]  ? rw_verify_area+0x11d/0x350
[ 1601.616382]  aio_read+0x2ae/0x470
[ 1601.616816]  ? aio_fsync+0x3a0/0x3a0
[ 1601.617268]  ? lock_acquire+0x197/0x470
[ 1601.617759]  ? __might_fault+0xd3/0x180
[ 1601.618241]  ? lock_downgrade+0x6d0/0x6d0
[ 1601.618742]  ? io_submit_one+0x1e0/0x1b80
[ 1601.619258]  io_submit_one+0x5cf/0x1b80
[ 1601.619744]  ? lock_acquire+0x197/0x470
[ 1601.620226]  ? find_held_lock+0x2c/0x110
[ 1601.620748]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1601.621332]  ? __might_fault+0xd3/0x180
[ 1601.621812]  ? lock_downgrade+0x6d0/0x6d0
[ 1601.622325]  __x64_sys_io_submit+0x18d/0x2f0
[ 1601.622857]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1601.623426]  ? fput_many+0x2f/0x1a0
[ 1601.623866]  ? ksys_write+0x1a9/0x260
[ 1601.624325]  ? __ia32_sys_read+0xb0/0xb0
[ 1601.624833]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1601.625467]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1601.626093]  do_syscall_64+0x33/0x40
[ 1601.626544]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1601.627163] RIP: 0033:0x7f68fec1cb19
[ 1601.627614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1601.629861] RSP: 002b:00007f68fc192188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1601.630782] RAX: ffffffffffffffda RBX: 00007f68fed2ff60 RCX: 00007f68fec1cb19
[ 1601.631645] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f68fed13000
[ 1601.632532] RBP: 00007f68fc1921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1601.633395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1601.634257] R13: 00007ffe1b07924f R14: 00007f68fc192300 R15: 0000000000022000
08:46:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3304, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

08:46:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) (fail_nth: 5)

[ 1601.759122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
08:46:17 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x2, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:46:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x8, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

08:46:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='hostfs\x00', 0x2120040, &(0x7f0000000380)='delalloc')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0)

08:46:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x300)

08:46:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe8ec, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x233, 0x0, 0x0, 0x300)

[ 1602.426152] FAULT_INJECTION: forcing a failure.
[ 1602.426152] name failslab, interval 1, probability 0, space 0, times 0
[ 1602.427554] CPU: 1 PID: 20609 Comm: syz-executor.1 Not tainted 5.10.228 #1
[ 1602.428463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1602.429464] Call Trace:
[ 1602.429790]  dump_stack+0x107/0x167
[ 1602.430236]  should_fail.cold+0x5/0xa
[ 1602.430705]  ? create_object.isra.0+0x3a/0xa20
[ 1602.431264]  should_failslab+0x5/0x20
[ 1602.431729]  kmem_cache_alloc+0x5b/0x310
[ 1602.432228]  create_object.isra.0+0x3a/0xa20
[ 1602.444786]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1602.445406]  __kmalloc_node+0x1ae/0x420
[ 1602.445900]  kvmalloc_node+0x119/0x170
[ 1602.446372]  seq_read_iter+0x81c/0x12b0
[ 1602.446857]  ? _cond_resched+0x12/0x80
[ 1602.447340]  kernfs_fop_read_iter+0x456/0x5f0
[ 1602.447885]  ? rw_verify_area+0x11d/0x350
[ 1602.448390]  aio_read+0x2ae/0x470
[ 1602.448841]  ? aio_fsync+0x3a0/0x3a0
[ 1602.449295]  ? lock_acquire+0x197/0x470
[ 1602.449788]  ? __might_fault+0xd3/0x180
[ 1602.450270]  ? lock_downgrade+0x6d0/0x6d0
[ 1602.450770]  ? io_submit_one+0x1e0/0x1b80
[ 1602.451285]  io_submit_one+0x5cf/0x1b80
[ 1602.451778]  ? lock_acquire+0x197/0x470
[ 1602.452258]  ? find_held_lock+0x2c/0x110
[ 1602.452775]  ? __do_sys_io_pgetevents+0x410/0x410
[ 1602.453360]  ? __might_fault+0xd3/0x180
[ 1602.453842]  ? lock_downgrade+0x6d0/0x6d0
[ 1602.454357]  __x64_sys_io_submit+0x18d/0x2f0
[ 1602.454895]  ? __ia32_sys_io_destroy+0x1b0/0x1b0
[ 1602.455465]  ? fput_many+0x2f/0x1a0
[ 1602.455907]  ? ksys_write+0x1a9/0x260
[ 1602.456367]  ? __ia32_sys_read+0xb0/0xb0
[ 1602.456876]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1602.461067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1602.461693]  do_syscall_64+0x33/0x40
[ 1602.462143]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1602.462764] RIP: 0033:0x7f68fec1cb19
[ 1602.463215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1602.465459] RSP: 002b:00007f68fc192188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1602.466382] RAX: ffffffffffffffda RBX: 00007f68fed2ff60 RCX: 00007f68fec1cb19
[ 1602.467245] RDX: 00000000200008c0 RSI: 0000000000000001 RDI: 00007f68fed13000
[ 1602.468113] RBP: 00007f68fc1921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1602.468995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1602.469859] R13: 00007ffe1b07924f R14: 00007f68fc192300 R15: 0000000000022000
08:46:18 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x2, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)='1', 0x1}])

[ 1602.481556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue

VM DIAGNOSIS:
08:51:21  Registers:
info registers vcpu 0
RAX=ffffed100d9c7826 RBX=ffffed100d9c7826 RCX=ffffffff83e636b1 RDX=ffffed100d9c7826
RSI=0000000000000004 RDI=ffff88806ce3c128 RBP=ffffed100d9c7825 RSP=ffffffff84e07d30
R8 =0000000000000000 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff816cb130 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f108b347010 CR3=000000001b29e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000dddd06aa
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b
XMM02=00000000000000000000000000000000 XMM03=00000000000000003f664bd2a4e6ab5e
XMM04=00000000000000003fdad78c3b17e596 XMM05=000000c0000855c0000000c000144ab0
XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd0000000000000
XMM08=00000000000000003f5c100b020b3800 XMM09=0000000000000000bfde4a565b645b2e
XMM10=00000000000000003f999999999999a0 XMM11=000000c000144cc0000000c0000855f0
XMM12=000000c00014adc0000000c000144cf0 XMM13=6365786509006e656720636578650800
XMM14=6169727420636578650b007a7a756620 XMM15=000073746e696820636578650a006567
info registers vcpu 1
RAX=ffffffff83e7b910 RBX=0000000000000001 RCX=ffffffff83e634ec RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e7bf18 RBP=ffffed100112f000 RSP=ffff888008987e70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff85677708 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e7b91e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056523712f678 CR3=000000001b29e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004184dad700000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000