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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) 23:27:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:27:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:27:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:27:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 223.525536] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:27:32 executing program 3: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000440)) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0xf, r2, &(0x7f00000000c0), 0x0) add_key(&(0x7f0000000280)='trusted\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000540)="b20710381c422804cc6e5d5ad2881cd03569e07d38e98f10bebbc3de3e798de9bfc1c25bb8b4bbd4df9830be85a98d72da78de2117f66d2db765b9837d78be1df7fdc407fc8928ce1de4bbff7d22b468a6dc4ba16af5c4326de375556ec5710d5bc9e18d0566e787edd32d3d4812f437c069727677ce807b750ee8749c17c301c5e1f85d8819aac919b6fa2b02a1920abf9a164e6ec66e67a5f88083acdf573ab82617528a8ddcc9904d02ba7069203d54e8fac68c0f565415143961ce", 0xbd, r2) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="e07e23aa781062075de035286d7f9d96650f8e1a6b9f0fb2d417fca3f9d5dcce05da14fc79f95a34b46bb82e6477014bd66866b2494ea3db51ed8875a17cfeec990ece42f51219b7733647243e43ac3643d43b53ee78b23e54b13d6f16b89e0c511cc8d908b66d154f0a31f969c54b5387a4", 0x72, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x0, 0x0}) r4 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000880), 0x0, 0x0) keyctl$revoke(0x3, r4) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r1, 0x0) r5 = add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r5) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x48020200) [ 223.572246] 9pnet: Insufficient options for proto=fd 23:27:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 239.250997] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:27:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:27:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:27:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:27:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') statx(r0, &(0x7f0000000700)='./file0\x00', 0x1000, 0x1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) getsockname(r2, &(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000a80)=0x80) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x4, &(0x7f0000000680)=[{&(0x7f00000002c0)="8792fb8a719978ee4c04d17d61bf3236ed5232e5323dc79b5b6319e1b645a9beaeccd4bd5dabbaa2c5a15fb9ef9f208a999d415efc3811daa1b085ef345b0613abf7a4278564ba1acadce3dfaf0a05e5e5cf82f22c648a260e3961f0d168e30f0a55d4f320941a264f9d7cd2169b89b1f9caf55b83310d51ce6dd4a098a924b3aed3477740d7a6fb1e04828f2f3a18cbb758e9193011a0a3764ebbaeb4a6b957e11df4c9031b939bbdeab5187977ece769f614a915880653d2fb2a8563656c6808272a53c602766ee1b50ed14391e1b987d6270f3dcc2956f0da4d3eb04baa44b68184f35ddbf2cdd2dfae787f476042768a", 0xf2, 0x5}, {&(0x7f00000003c0)="9a2d1e7d3d297c5942d6bf0f3292f95743707ee08aab85b8460d53305665f04cc7d0903c7dd81efcd36f6373c580cfac73e1e16147bc92bfd5b528cb9163af0220a1c7a0ed1ea6986ea1cdd3fff13ebee364ccab50a39e0f6a5379650bb32e80ae906f53e8c85eb4465d26bd2f3f9a26268d55277ac5c3a1ce97224bed2be4a14c2dabd412580162522c5581aa664c697171340327bb4c249d3a503493ef", 0x9e, 0x10001}, {&(0x7f0000000480)="3435a628e88c62013e6f83a5bf6a5d704ef808b23f1cc8bcf4d872b0787ad2758871cf4856bc5b057bf8528bfa8c759af3ffd166e36389e4e0c4445e272aa42fc42651af448cc2a33f6c228296445f1da17b1159628171c5ff74ef583614fbb58716c16fc1e86c349bdea112b6247670cf75e33dbd3336646f787d860f723e7fb08392c6fa3ff2cb60c17c46636c7e35ad98eadd1eab3798a9107fb8f663881e7d1525de78d75a22acc585d4d4b7e94e2de2e521df0a60be54ee2cbfbea6432b300af4c513ddfaff32512bf12f861eb5b1e72c8f6385ca9bfe3f08449bd039748f758bf4ce058ff08500051c4af49cf29ea4b0298d928407fc", 0xf9, 0xffffffff}, {&(0x7f0000000580)="c5c0b5eeadb962bf8af8607720cac9b627d28c73b3703b9f5f540da27a67c523ec29465943175a71aa894b012ccc407ecd537a630d2a725099ea351e3f246d3b77113d8a5ea7e9635473993ff55b88ad4081c1e42f39f1fb1ad629509b403a96451474f51d2fafb58c69d022fb64ab9cbfd7f8c83b3f2fc5640477228c7f97fac9a94033a1181a7e49c117f02bc555d892cf932496e2a5ae002d910eb035b7318b47b910790a785888feff56a6fea9cf23e2e06e51f9bddae30212fe33429003a1f5537204b802c46c", 0xc9, 0x81}], 0xc044, &(0x7f0000000840)={[{@dots}, {@fat=@flush}, {@fat=@usefree}], [{@fsname={'fsname', 0x3d, 'E\x86&\xc8+*,\xd0'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', r1}}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x181) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r4 = accept4$inet(r3, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x0) r5 = dup3(r0, r4, 0x80000) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x1000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x1010, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r5, 0x10000000) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000800)={r8, r9+60000000}, 0x1, 0x1}, 0x7) 23:27:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:27:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:27:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:27:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 239.297522] loop6: detected capacity change from 0 to 33559552 [ 239.301619] 9pnet: Insufficient options for proto=fd 23:27:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:27:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:27:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) [ 239.404158] 9pnet: Insufficient options for proto=fd 23:27:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) [ 239.495501] 9pnet: Insufficient options for proto=fd [ 239.497633] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:27:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:27:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 239.547152] 9pnet: Insufficient options for proto=fd 23:27:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:27:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) [ 252.597451] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 252.645317] 9pnet: Insufficient options for proto=fd [ 252.649101] 9pnet: Insufficient options for proto=fd 23:28:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:28:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') statx(r0, &(0x7f0000000700)='./file0\x00', 0x1000, 0x1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) getsockname(r2, &(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000a80)=0x80) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x4, &(0x7f0000000680)=[{&(0x7f00000002c0)="8792fb8a719978ee4c04d17d61bf3236ed5232e5323dc79b5b6319e1b645a9beaeccd4bd5dabbaa2c5a15fb9ef9f208a999d415efc3811daa1b085ef345b0613abf7a4278564ba1acadce3dfaf0a05e5e5cf82f22c648a260e3961f0d168e30f0a55d4f320941a264f9d7cd2169b89b1f9caf55b83310d51ce6dd4a098a924b3aed3477740d7a6fb1e04828f2f3a18cbb758e9193011a0a3764ebbaeb4a6b957e11df4c9031b939bbdeab5187977ece769f614a915880653d2fb2a8563656c6808272a53c602766ee1b50ed14391e1b987d6270f3dcc2956f0da4d3eb04baa44b68184f35ddbf2cdd2dfae787f476042768a", 0xf2, 0x5}, {&(0x7f00000003c0)="9a2d1e7d3d297c5942d6bf0f3292f95743707ee08aab85b8460d53305665f04cc7d0903c7dd81efcd36f6373c580cfac73e1e16147bc92bfd5b528cb9163af0220a1c7a0ed1ea6986ea1cdd3fff13ebee364ccab50a39e0f6a5379650bb32e80ae906f53e8c85eb4465d26bd2f3f9a26268d55277ac5c3a1ce97224bed2be4a14c2dabd412580162522c5581aa664c697171340327bb4c249d3a503493ef", 0x9e, 0x10001}, {&(0x7f0000000480)="3435a628e88c62013e6f83a5bf6a5d704ef808b23f1cc8bcf4d872b0787ad2758871cf4856bc5b057bf8528bfa8c759af3ffd166e36389e4e0c4445e272aa42fc42651af448cc2a33f6c228296445f1da17b1159628171c5ff74ef583614fbb58716c16fc1e86c349bdea112b6247670cf75e33dbd3336646f787d860f723e7fb08392c6fa3ff2cb60c17c46636c7e35ad98eadd1eab3798a9107fb8f663881e7d1525de78d75a22acc585d4d4b7e94e2de2e521df0a60be54ee2cbfbea6432b300af4c513ddfaff32512bf12f861eb5b1e72c8f6385ca9bfe3f08449bd039748f758bf4ce058ff08500051c4af49cf29ea4b0298d928407fc", 0xf9, 0xffffffff}, {&(0x7f0000000580)="c5c0b5eeadb962bf8af8607720cac9b627d28c73b3703b9f5f540da27a67c523ec29465943175a71aa894b012ccc407ecd537a630d2a725099ea351e3f246d3b77113d8a5ea7e9635473993ff55b88ad4081c1e42f39f1fb1ad629509b403a96451474f51d2fafb58c69d022fb64ab9cbfd7f8c83b3f2fc5640477228c7f97fac9a94033a1181a7e49c117f02bc555d892cf932496e2a5ae002d910eb035b7318b47b910790a785888feff56a6fea9cf23e2e06e51f9bddae30212fe33429003a1f5537204b802c46c", 0xc9, 0x81}], 0xc044, &(0x7f0000000840)={[{@dots}, {@fat=@flush}, {@fat=@usefree}], [{@fsname={'fsname', 0x3d, 'E\x86&\xc8+*,\xd0'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', r1}}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x181) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r4 = accept4$inet(r3, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x0) r5 = dup3(r0, r4, 0x80000) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x1000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x1010, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r5, 0x10000000) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000800)={r8, r9+60000000}, 0x1, 0x1}, 0x7) 23:28:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:28:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) [ 252.672853] loop6: detected capacity change from 0 to 33559552 [ 252.758795] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:28:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:28:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 252.847251] 9pnet: Insufficient options for proto=fd 23:28:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:28:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) [ 252.970964] 9pnet: Insufficient options for proto=fd 23:28:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 253.000298] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:28:01 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:02 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:02 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') statx(r0, &(0x7f0000000700)='./file0\x00', 0x1000, 0x1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) getsockname(r2, &(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000a80)=0x80) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x4, &(0x7f0000000680)=[{&(0x7f00000002c0)="8792fb8a719978ee4c04d17d61bf3236ed5232e5323dc79b5b6319e1b645a9beaeccd4bd5dabbaa2c5a15fb9ef9f208a999d415efc3811daa1b085ef345b0613abf7a4278564ba1acadce3dfaf0a05e5e5cf82f22c648a260e3961f0d168e30f0a55d4f320941a264f9d7cd2169b89b1f9caf55b83310d51ce6dd4a098a924b3aed3477740d7a6fb1e04828f2f3a18cbb758e9193011a0a3764ebbaeb4a6b957e11df4c9031b939bbdeab5187977ece769f614a915880653d2fb2a8563656c6808272a53c602766ee1b50ed14391e1b987d6270f3dcc2956f0da4d3eb04baa44b68184f35ddbf2cdd2dfae787f476042768a", 0xf2, 0x5}, {&(0x7f00000003c0)="9a2d1e7d3d297c5942d6bf0f3292f95743707ee08aab85b8460d53305665f04cc7d0903c7dd81efcd36f6373c580cfac73e1e16147bc92bfd5b528cb9163af0220a1c7a0ed1ea6986ea1cdd3fff13ebee364ccab50a39e0f6a5379650bb32e80ae906f53e8c85eb4465d26bd2f3f9a26268d55277ac5c3a1ce97224bed2be4a14c2dabd412580162522c5581aa664c697171340327bb4c249d3a503493ef", 0x9e, 0x10001}, {&(0x7f0000000480)="3435a628e88c62013e6f83a5bf6a5d704ef808b23f1cc8bcf4d872b0787ad2758871cf4856bc5b057bf8528bfa8c759af3ffd166e36389e4e0c4445e272aa42fc42651af448cc2a33f6c228296445f1da17b1159628171c5ff74ef583614fbb58716c16fc1e86c349bdea112b6247670cf75e33dbd3336646f787d860f723e7fb08392c6fa3ff2cb60c17c46636c7e35ad98eadd1eab3798a9107fb8f663881e7d1525de78d75a22acc585d4d4b7e94e2de2e521df0a60be54ee2cbfbea6432b300af4c513ddfaff32512bf12f861eb5b1e72c8f6385ca9bfe3f08449bd039748f758bf4ce058ff08500051c4af49cf29ea4b0298d928407fc", 0xf9, 0xffffffff}, {&(0x7f0000000580)="c5c0b5eeadb962bf8af8607720cac9b627d28c73b3703b9f5f540da27a67c523ec29465943175a71aa894b012ccc407ecd537a630d2a725099ea351e3f246d3b77113d8a5ea7e9635473993ff55b88ad4081c1e42f39f1fb1ad629509b403a96451474f51d2fafb58c69d022fb64ab9cbfd7f8c83b3f2fc5640477228c7f97fac9a94033a1181a7e49c117f02bc555d892cf932496e2a5ae002d910eb035b7318b47b910790a785888feff56a6fea9cf23e2e06e51f9bddae30212fe33429003a1f5537204b802c46c", 0xc9, 0x81}], 0xc044, &(0x7f0000000840)={[{@dots}, {@fat=@flush}, {@fat=@usefree}], [{@fsname={'fsname', 0x3d, 'E\x86&\xc8+*,\xd0'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', r1}}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x181) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r4 = accept4$inet(r3, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x0) r5 = dup3(r0, r4, 0x80000) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x1000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x1010, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r5, 0x10000000) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000800)={r8, r9+60000000}, 0x1, 0x1}, 0x7) 23:28:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 253.239651] loop6: detected capacity change from 0 to 33559552 23:28:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:14 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x10}) 23:28:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:28:14 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:28:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:28:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 279.718990] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 279.827461] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 292.071724] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:40 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:28:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:40 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 292.106093] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 292.185203] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:41 executing program 7: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:28:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 292.288370] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 292.352084] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 292.382051] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:28:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 306.124995] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:55 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:55 executing program 7: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:28:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:28:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 306.180310] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 306.224866] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:55 executing program 7: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:28:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 306.348451] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:55 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 306.401907] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:28:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:28:55 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:28:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) [ 306.528094] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:29:09 executing program 6: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:29:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:29:09 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:29:09 executing program 4: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:09 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:29:23 executing program 6: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:23 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:29:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:23 executing program 4: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) 23:29:23 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:23 executing program 4: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:29:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:38 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:38 executing program 6: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) 23:29:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:38 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) 23:29:38 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:29:38 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:38 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 362.442139] 9pnet: Insufficient options for proto=fd 23:29:51 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) 23:29:51 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:29:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:29:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:29:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:29:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:29:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 362.526188] 9pnet: Insufficient options for proto=fd 23:29:51 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) 23:29:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:29:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:29:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:29:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:30:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) 23:30:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:30:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:30:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:30:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:30:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 374.719101] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 374.827286] perf: interrupt took too long (3166 > 3136), lowering kernel.perf_event_max_sample_rate to 63000 23:30:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 374.843490] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 374.867880] perf: interrupt took too long (4006 > 3957), lowering kernel.perf_event_max_sample_rate to 49000 23:30:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 374.889042] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 374.900413] perf: interrupt took too long (5042 > 5007), lowering kernel.perf_event_max_sample_rate to 39000 [ 374.902617] perf: interrupt took too long (6350 > 6302), lowering kernel.perf_event_max_sample_rate to 31000 23:30:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 374.917037] perf: interrupt took too long (7947 > 7937), lowering kernel.perf_event_max_sample_rate to 25000 [ 374.984061] perf: interrupt took too long (9936 > 9933), lowering kernel.perf_event_max_sample_rate to 20000 [ 375.027605] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:30:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:15 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 386.989946] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 387.023633] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:16 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:30:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 387.119979] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 387.134883] perf: interrupt took too long (12516 > 12420), lowering kernel.perf_event_max_sample_rate to 15000 23:30:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 387.185203] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 387.207173] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) 23:30:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:27 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:27 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 398.742850] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 398.772008] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 398.778823] perf: interrupt took too long (15664 > 15645), lowering kernel.perf_event_max_sample_rate to 12000 23:30:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) 23:30:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:30:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) [ 398.922398] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:30:27 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:30:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) 23:30:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:30:40 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:30:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 411.735580] 9pnet: Insufficient options for proto=fd 23:30:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:30:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:30:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) 23:30:40 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:30:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:30:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:30:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) [ 411.814442] 9pnet: Insufficient options for proto=fd 23:30:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:30:40 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:30:40 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 411.853899] 9pnet: Insufficient options for proto=fd [ 411.889967] 9pnet: Insufficient options for proto=fd 23:30:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:30:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 23:30:52 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:52 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:30:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:52 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 423.289006] 9pnet: Insufficient options for proto=fd 23:30:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) [ 423.338959] 9pnet: Insufficient options for proto=fd 23:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) [ 423.354147] 9pnet: Insufficient options for proto=fd 23:30:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:52 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:30:52 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:30:52 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 423.412581] 9pnet: Insufficient options for proto=fd 23:30:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) [ 423.437155] 9pnet: Insufficient options for proto=fd 23:31:05 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:05 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:05 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:05 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 436.547948] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:31:05 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:05 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 436.576829] 9pnet: Insufficient options for proto=fd 23:31:05 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:05 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:05 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 436.722178] 9pnet: Insufficient options for proto=fd 23:31:05 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:05 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:05 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 436.817770] 9pnet: Insufficient options for proto=fd 23:31:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:18 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:31:18 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:18 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x189) fcntl$setflags(r1, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 23:31:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 449.718501] 9pnet: Insufficient options for proto=fd 23:31:18 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:18 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:18 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) (fail_nth: 1) [ 449.866979] 9pnet: Insufficient options for proto=fd 23:31:18 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) [ 449.886012] FAULT_INJECTION: forcing a failure. [ 449.886012] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.888531] CPU: 0 PID: 5207 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 449.889961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.891708] Call Trace: [ 449.892277] dump_stack+0x107/0x167 [ 449.893052] should_fail.cold+0x5/0xa [ 449.893869] _copy_from_user+0x2e/0x1b0 [ 449.894726] __ext4_ioctl+0x25bb/0x41a0 [ 449.895576] ? ext4_reset_inode_seed+0x450/0x450 [ 449.896574] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 449.897674] ? find_held_lock+0x2c/0x110 [ 449.898564] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 449.899779] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 449.900865] ? do_vfs_ioctl+0x283/0x10d0 [ 449.901711] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 449.902811] ? generic_block_fiemap+0x60/0x60 [ 449.903742] ? lock_downgrade+0x6d0/0x6d0 [ 449.904605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 449.905616] ? wait_for_completion_io+0x270/0x270 [ 449.906648] ? selinux_file_ioctl+0xb6/0x270 [ 449.907569] ? __ext4_ioctl+0x41a0/0x41a0 [ 449.908438] __x64_sys_ioctl+0x19a/0x210 [ 449.909290] do_syscall_64+0x33/0x40 [ 449.910065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 449.911145] RIP: 0033:0x7f7e0debab19 [ 449.911926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 449.915756] RSP: 002b:00007f7e0b430188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.917334] RAX: ffffffffffffffda RBX: 00007f7e0dfcdf60 RCX: 00007f7e0debab19 [ 449.918809] RDX: 0000000020000000 RSI: 0000000040286608 RDI: 0000000000000003 [ 449.920284] RBP: 00007f7e0b4301d0 R08: 0000000000000000 R09: 0000000000000000 [ 449.921812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.923321] R13: 00007ffcf13f909f R14: 00007f7e0b430300 R15: 0000000000022000 23:31:18 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:31:18 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 449.974230] FAULT_INJECTION: forcing a failure. [ 449.974230] name failslab, interval 1, probability 0, space 0, times 1 [ 449.976674] CPU: 1 PID: 5211 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 449.978121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.979883] Call Trace: [ 449.980449] dump_stack+0x107/0x167 [ 449.981222] should_fail.cold+0x5/0xa [ 449.982028] should_failslab+0x5/0x20 [ 449.982844] __kmalloc_track_caller+0x79/0x370 [ 449.983811] ? strndup_user+0x74/0xe0 [ 449.984615] memdup_user+0x22/0xd0 [ 449.985363] strndup_user+0x74/0xe0 [ 449.986137] __x64_sys_mount+0x133/0x300 [ 449.987013] ? copy_mnt_ns+0xa00/0xa00 [ 449.987842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 449.988958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 449.990053] do_syscall_64+0x33/0x40 [ 449.990851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 449.991940] RIP: 0033:0x7f5830aadb19 [ 449.992737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 449.996657] RSP: 002b:00007f582e023188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.998276] RAX: ffffffffffffffda RBX: 00007f5830bc0f60 RCX: 00007f5830aadb19 [ 449.999797] RDX: 00000000200002c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 450.001316] RBP: 00007f582e0231d0 R08: 0000000020000400 R09: 0000000000000000 [ 450.002828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.004334] R13: 00007ffdbd06e0ff R14: 00007f582e023300 R15: 0000000000022000 23:31:18 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 465.292146] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:31:34 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:34 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:31:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:31:34 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) 23:31:34 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:31:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x2, &(0x7f0000000000)) [ 465.363997] 9pnet: Insufficient options for proto=fd 23:31:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) 23:31:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b47, &(0x7f0000000000)) [ 465.400537] 9pnet: Insufficient options for proto=fd 23:31:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) [ 465.445758] 9pnet: Insufficient options for proto=fd 23:31:46 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) (fail_nth: 1) [ 477.698369] FAULT_INJECTION: forcing a failure. [ 477.698369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.700190] CPU: 1 PID: 5272 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 477.701195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.702394] Call Trace: [ 477.702790] dump_stack+0x107/0x167 [ 477.703342] should_fail.cold+0x5/0xa [ 477.703916] _copy_from_user+0x2e/0x1b0 [ 477.704514] __ext4_ioctl+0x25bb/0x41a0 [ 477.705125] ? ext4_reset_inode_seed+0x450/0x450 [ 477.705847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 477.706641] ? find_held_lock+0x2c/0x110 [ 477.707277] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 477.708140] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 477.708904] ? do_vfs_ioctl+0x283/0x10d0 [ 477.709519] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 477.710311] ? generic_block_fiemap+0x60/0x60 [ 477.711001] ? lock_downgrade+0x6d0/0x6d0 [ 477.711630] ? __mutex_unlock_slowpath+0xe1/0x600 [ 477.712361] ? wait_for_completion_io+0x270/0x270 [ 477.713096] ? selinux_file_ioctl+0xb6/0x270 [ 477.713743] ? __ext4_ioctl+0x41a0/0x41a0 [ 477.714348] __x64_sys_ioctl+0x19a/0x210 [ 477.714955] do_syscall_64+0x33/0x40 [ 477.715499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 477.716255] RIP: 0033:0x7f5ffaebab19 [ 477.716822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 477.719580] RSP: 002b:00007f5ff8430188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:31:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b49, &(0x7f0000000000)) 23:31:46 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:46 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 23:31:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 477.720691] RAX: ffffffffffffffda RBX: 00007f5ffafcdf60 RCX: 00007f5ffaebab19 [ 477.722025] RDX: 0000000020000000 RSI: 0000000040286608 RDI: 0000000000000003 [ 477.723082] RBP: 00007f5ff84301d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.724124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.725168] R13: 00007fff7c38131f R14: 00007f5ff8430300 R15: 0000000000022000 [ 477.740483] 9pnet: Insufficient options for proto=fd 23:31:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) 23:31:46 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x541b, &(0x7f0000000000)) 23:31:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, &(0x7f0000000000)) 23:31:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 1) 23:31:46 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:46 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:31:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) [ 477.857481] 9pnet: Insufficient options for proto=fd [ 477.862925] FAULT_INJECTION: forcing a failure. [ 477.862925] name failslab, interval 1, probability 0, space 0, times 0 [ 477.864618] CPU: 0 PID: 5311 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 477.865413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.866383] Call Trace: [ 477.866696] dump_stack+0x107/0x167 [ 477.867127] should_fail.cold+0x5/0xa [ 477.867664] ? vm_area_dup+0x78/0x290 [ 477.868185] should_failslab+0x5/0x20 [ 477.868714] kmem_cache_alloc+0x5b/0x310 [ 477.869274] vm_area_dup+0x78/0x290 [ 477.869782] ? kernel_text_address+0xf2/0x120 [ 477.870376] ? mark_lock+0xf5/0x2df0 [ 477.870910] ? lock_chain_count+0x20/0x20 [ 477.871486] ? avc_has_extended_perms+0xf40/0xf40 [ 477.872064] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 477.872623] ? lock_downgrade+0x6d0/0x6d0 [ 477.873194] ? __lock_acquire+0x1657/0x5b00 [ 477.873798] ? vm_area_alloc+0x110/0x110 [ 477.874331] ? __lock_acquire+0x1657/0x5b00 [ 477.874932] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 477.875648] ? vmacache_find+0x55/0x2a0 [ 477.876206] __split_vma+0xa8/0x4e0 [ 477.876704] __do_munmap+0x365/0x1260 [ 477.877229] ? arch_get_unmapped_area+0x450/0x450 [ 477.877876] ? lock_release+0x680/0x680 [ 477.878428] mmap_region+0x7c8/0x1500 [ 477.878885] do_mmap+0xcdb/0x11e0 [ 477.879292] vm_mmap_pgoff+0x198/0x1f0 [ 477.879833] ? randomize_page+0xb0/0xb0 [ 477.880393] ksys_mmap_pgoff+0x41c/0x560 [ 477.880959] ? find_mergeable_anon_vma+0x250/0x250 [ 477.881637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 477.882247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 477.882962] do_syscall_64+0x33/0x40 [ 477.883475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 477.884181] RIP: 0033:0x7fcc4a1cdb19 [ 477.884697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 477.887235] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 477.888131] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 477.888939] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 477.889752] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 477.890566] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 477.891396] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 23:31:46 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5450, &(0x7f0000000000)) 23:31:46 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 477.910512] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 477.975652] 9pnet: Insufficient options for proto=fd 23:31:58 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:31:58 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:58 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x2, &(0x7f0000000000)) 23:31:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:31:58 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:31:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 2) 23:31:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, &(0x7f0000000000)) [ 489.718734] FAULT_INJECTION: forcing a failure. [ 489.718734] name failslab, interval 1, probability 0, space 0, times 0 [ 489.720542] CPU: 0 PID: 5345 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 489.721499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 489.722648] Call Trace: [ 489.723016] dump_stack+0x107/0x167 [ 489.723517] should_fail.cold+0x5/0xa [ 489.724037] ? create_object.isra.0+0x3a/0xa20 [ 489.724683] should_failslab+0x5/0x20 [ 489.725208] kmem_cache_alloc+0x5b/0x310 [ 489.725766] create_object.isra.0+0x3a/0xa20 [ 489.726381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 489.727384] kmem_cache_alloc+0x159/0x310 [ 489.728562] vm_area_dup+0x78/0x290 [ 489.729576] ? kernel_text_address+0xf2/0x120 [ 489.730826] ? mark_lock+0xf5/0x2df0 [ 489.731933] ? lock_chain_count+0x20/0x20 [ 489.733097] ? avc_has_extended_perms+0xf40/0xf40 [ 489.734441] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 489.735766] ? lock_downgrade+0x6d0/0x6d0 [ 489.736924] ? __lock_acquire+0x1657/0x5b00 [ 489.738151] ? vm_area_alloc+0x110/0x110 [ 489.739304] ? __lock_acquire+0x1657/0x5b00 [ 489.740537] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 489.742005] ? vmacache_find+0x55/0x2a0 [ 489.743140] __split_vma+0xa8/0x4e0 [ 489.744182] __do_munmap+0x365/0x1260 [ 489.745251] ? arch_get_unmapped_area+0x450/0x450 [ 489.746610] ? lock_release+0x680/0x680 [ 489.747754] mmap_region+0x7c8/0x1500 [ 489.748844] do_mmap+0xcdb/0x11e0 [ 489.749833] vm_mmap_pgoff+0x198/0x1f0 [ 489.750945] ? randomize_page+0xb0/0xb0 [ 489.752081] ksys_mmap_pgoff+0x41c/0x560 [ 489.753225] ? find_mergeable_anon_vma+0x250/0x250 [ 489.754633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 489.756121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 489.757576] do_syscall_64+0x33/0x40 [ 489.758629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 489.760084] RIP: 0033:0x7fcc4a1cdb19 [ 489.761131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.765962] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 489.767882] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 489.769634] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 489.771456] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 489.773258] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 489.775043] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 23:31:58 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:31:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5452, &(0x7f0000000000)) 23:31:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b47, &(0x7f0000000000)) 23:31:58 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:31:58 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5460, &(0x7f0000000000)) [ 503.212500] FAULT_INJECTION: forcing a failure. [ 503.212500] name failslab, interval 1, probability 0, space 0, times 0 [ 503.214941] CPU: 1 PID: 5405 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 503.216400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 503.218156] Call Trace: [ 503.218221] FAULT_INJECTION: forcing a failure. [ 503.218221] name failslab, interval 1, probability 0, space 0, times 0 [ 503.218719] dump_stack+0x107/0x167 [ 503.222407] should_fail.cold+0x5/0xa [ 503.223230] ? anon_vma_clone+0xdc/0x590 [ 503.224096] should_failslab+0x5/0x20 [ 503.224909] kmem_cache_alloc+0x5b/0x310 [ 503.225778] anon_vma_clone+0xdc/0x590 [ 503.226613] __split_vma+0x17c/0x4e0 [ 503.227416] __do_munmap+0x365/0x1260 [ 503.228225] ? arch_get_unmapped_area+0x450/0x450 [ 503.229252] ? lock_release+0x680/0x680 [ 503.230100] mmap_region+0x7c8/0x1500 [ 503.230919] do_mmap+0xcdb/0x11e0 [ 503.231673] vm_mmap_pgoff+0x198/0x1f0 [ 503.232504] ? randomize_page+0xb0/0xb0 [ 503.233366] ksys_mmap_pgoff+0x41c/0x560 [ 503.234231] ? find_mergeable_anon_vma+0x250/0x250 [ 503.235297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 503.236404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 503.237505] do_syscall_64+0x33/0x40 [ 503.238293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 503.239393] RIP: 0033:0x7fcc4a1cdb19 [ 503.240182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.244066] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 503.245662] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 503.247165] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 503.248663] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 503.250154] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 503.251667] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 [ 503.253194] CPU: 0 PID: 5401 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 503.254955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 503.257074] Call Trace: [ 503.257743] dump_stack+0x107/0x167 [ 503.258674] should_fail.cold+0x5/0xa [ 503.259690] ? getname_flags.part.0+0x50/0x4f0 [ 503.260816] should_failslab+0x5/0x20 [ 503.261743] kmem_cache_alloc+0x5b/0x310 [ 503.262769] getname_flags.part.0+0x50/0x4f0 [ 503.263869] getname+0x8e/0xd0 [ 503.264668] do_sys_openat2+0xf9/0x4d0 [ 503.265618] ? build_open_flags+0x6f0/0x6f0 [ 503.266672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 503.267908] ? wait_for_completion_io+0x270/0x270 [ 503.269109] __x64_sys_openat+0x13f/0x1f0 [ 503.270136] ? __ia32_sys_open+0x1c0/0x1c0 [ 503.271197] ? ksys_write+0x1a9/0x260 [ 503.272156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 503.273464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 503.274741] do_syscall_64+0x33/0x40 [ 503.275663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 503.276933] RIP: 0033:0x7fde5bb62a04 [ 503.277848] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 503.282397] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 503.284288] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 503.286054] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 503.288042] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 503.289798] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 503.291553] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:32:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:32:12 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:12 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:32:12 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b49, &(0x7f0000000000)) 23:32:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 3) 23:32:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:32:12 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:12 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 4) 23:32:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x541b, &(0x7f0000000000)) 23:32:12 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 503.494665] FAULT_INJECTION: forcing a failure. [ 503.494665] name failslab, interval 1, probability 0, space 0, times 0 [ 503.497094] CPU: 1 PID: 5442 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 503.498541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 503.500309] Call Trace: [ 503.500870] dump_stack+0x107/0x167 [ 503.501641] should_fail.cold+0x5/0xa [ 503.502447] ? create_object.isra.0+0x3a/0xa20 [ 503.503420] should_failslab+0x5/0x20 [ 503.504221] kmem_cache_alloc+0x5b/0x310 [ 503.505082] create_object.isra.0+0x3a/0xa20 [ 503.506011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 503.507095] kmem_cache_alloc+0x159/0x310 [ 503.507981] anon_vma_clone+0xdc/0x590 [ 503.508811] __split_vma+0x17c/0x4e0 [ 503.509600] __do_munmap+0x365/0x1260 [ 503.510423] ? arch_get_unmapped_area+0x450/0x450 [ 503.511456] ? lock_release+0x680/0x680 [ 503.512302] mmap_region+0x7c8/0x1500 [ 503.513121] do_mmap+0xcdb/0x11e0 [ 503.513859] vm_mmap_pgoff+0x198/0x1f0 [ 503.514692] ? randomize_page+0xb0/0xb0 [ 503.515550] ksys_mmap_pgoff+0x41c/0x560 [ 503.516406] ? find_mergeable_anon_vma+0x250/0x250 [ 503.517442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 503.518552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 503.519645] do_syscall_64+0x33/0x40 [ 503.520428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 503.521511] RIP: 0033:0x7fcc4a1cdb19 [ 503.522301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.526190] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 503.527795] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 503.529303] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 503.530810] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 503.532319] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 503.533826] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 23:32:12 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 503.667977] 9pnet: Insufficient options for proto=fd 23:32:24 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:24 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x660c, &(0x7f0000000000)) 23:32:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, &(0x7f0000000000)) 23:32:24 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 2) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:32:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:32:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 5) [ 515.740779] 9pnet: Insufficient options for proto=fd 23:32:24 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 515.750722] FAULT_INJECTION: forcing a failure. [ 515.750722] name failslab, interval 1, probability 0, space 0, times 0 [ 515.752044] CPU: 1 PID: 5477 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 515.752833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 515.753626] FAULT_INJECTION: forcing a failure. [ 515.753626] name failslab, interval 1, probability 0, space 0, times 0 [ 515.753785] Call Trace: [ 515.753814] dump_stack+0x107/0x167 [ 515.757340] should_fail.cold+0x5/0xa [ 515.757783] ? create_object.isra.0+0x3a/0xa20 [ 515.758310] should_failslab+0x5/0x20 [ 515.758749] kmem_cache_alloc+0x5b/0x310 [ 515.759224] create_object.isra.0+0x3a/0xa20 [ 515.759726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 515.760305] kmem_cache_alloc+0x159/0x310 [ 515.760783] getname_flags.part.0+0x50/0x4f0 [ 515.761288] getname+0x8e/0xd0 [ 515.761660] do_sys_openat2+0xf9/0x4d0 [ 515.762108] ? build_open_flags+0x6f0/0x6f0 [ 515.762600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 515.763150] ? wait_for_completion_io+0x270/0x270 [ 515.763715] __x64_sys_openat+0x13f/0x1f0 [ 515.764192] ? __ia32_sys_open+0x1c0/0x1c0 [ 515.764684] ? ksys_write+0x1a9/0x260 [ 515.765128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 515.765733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 515.766323] do_syscall_64+0x33/0x40 [ 515.766746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 515.767351] RIP: 0033:0x7fde5bb62a04 [ 515.767776] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 515.769885] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 515.770764] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 515.771590] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 515.772409] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 515.773227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 515.774045] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 [ 515.774894] CPU: 0 PID: 5476 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 515.776645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 515.778770] Call Trace: [ 515.779473] dump_stack+0x107/0x167 [ 515.780408] should_fail.cold+0x5/0xa [ 515.781382] ? vm_area_dup+0x78/0x290 [ 515.782355] should_failslab+0x5/0x20 [ 515.783342] kmem_cache_alloc+0x5b/0x310 [ 515.784392] vm_area_dup+0x78/0x290 [ 515.785318] ? find_held_lock+0x2c/0x110 [ 515.786361] ? __vma_adjust+0x66e/0x2510 [ 515.787416] ? lock_downgrade+0x6d0/0x6d0 [ 515.788500] ? up_write+0x191/0x550 [ 515.789439] ? downgrade_write+0x3a0/0x3a0 [ 515.790526] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 515.791926] ? vm_area_alloc+0x110/0x110 [ 515.792974] ? __vma_adjust+0xbb8/0x2510 [ 515.794032] ? vmacache_find+0x55/0x2a0 [ 515.795040] __split_vma+0xa8/0x4e0 [ 515.795983] __do_munmap+0xf40/0x1260 [ 515.796839] ? arch_get_unmapped_area+0x450/0x450 [ 515.797836] ? lock_release+0x680/0x680 [ 515.798665] mmap_region+0x7c8/0x1500 [ 515.799481] do_mmap+0xcdb/0x11e0 [ 515.800207] vm_mmap_pgoff+0x198/0x1f0 [ 515.801029] ? randomize_page+0xb0/0xb0 [ 515.801865] ksys_mmap_pgoff+0x41c/0x560 [ 515.802718] ? find_mergeable_anon_vma+0x250/0x250 [ 515.803753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 515.804843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 515.805914] do_syscall_64+0x33/0x40 [ 515.806693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 515.807769] RIP: 0033:0x7fcc4a1cdb19 [ 515.808535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.812324] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 515.813913] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 515.815398] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 515.816864] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 515.818332] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 515.819828] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 [ 515.842640] 9pnet: Insufficient options for proto=fd 23:32:24 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:24 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 3) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:32:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5450, &(0x7f0000000000)) 23:32:24 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 515.902014] FAULT_INJECTION: forcing a failure. [ 515.902014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.903454] CPU: 1 PID: 5501 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 515.904233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 515.905177] Call Trace: [ 515.905486] dump_stack+0x107/0x167 [ 515.905903] should_fail.cold+0x5/0xa [ 515.906342] strncpy_from_user+0x34/0x470 [ 515.906824] getname_flags.part.0+0x95/0x4f0 [ 515.907338] getname+0x8e/0xd0 [ 515.907709] do_sys_openat2+0xf9/0x4d0 [ 515.908156] ? build_open_flags+0x6f0/0x6f0 [ 515.908664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 515.909211] ? wait_for_completion_io+0x270/0x270 [ 515.909770] __x64_sys_openat+0x13f/0x1f0 [ 515.910248] ? __ia32_sys_open+0x1c0/0x1c0 [ 515.910727] ? ksys_write+0x1a9/0x260 [ 515.911176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 515.911787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 515.912377] do_syscall_64+0x33/0x40 [ 515.912802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 515.913389] RIP: 0033:0x7fde5bb62a04 [ 515.913820] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 515.915926] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 515.916793] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 515.917610] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 515.918423] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 515.919248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 515.920075] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:32:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 6) 23:32:39 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:39 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:39 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:32:39 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6611, &(0x7f0000000000)) 23:32:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, &(0x7f0000000000)) 23:32:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 530.403064] FAULT_INJECTION: forcing a failure. [ 530.403064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.405225] CPU: 1 PID: 5526 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 530.406463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.407982] Call Trace: [ 530.408475] dump_stack+0x107/0x167 [ 530.409134] should_fail.cold+0x5/0xa [ 530.409838] strncpy_from_user+0x34/0x470 23:32:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5452, &(0x7f0000000000)) [ 530.410599] getname_flags.part.0+0x95/0x4f0 [ 530.411555] getname+0x8e/0xd0 [ 530.412145] do_sys_openat2+0xf9/0x4d0 23:32:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6612, &(0x7f0000000000)) [ 530.412853] ? build_open_flags+0x6f0/0x6f0 [ 530.413789] ? __mutex_unlock_slowpath+0xe1/0x600 [ 530.414665] ? wait_for_completion_io+0x270/0x270 [ 530.415559] __x64_sys_openat+0x13f/0x1f0 [ 530.416315] ? __ia32_sys_open+0x1c0/0x1c0 [ 530.417078] ? ksys_write+0x1a9/0x260 [ 530.417786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 530.418748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 530.419698] do_syscall_64+0x33/0x40 [ 530.420377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 530.421324] RIP: 0033:0x7fde5bb62a04 [ 530.422002] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 530.425356] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 530.426745] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 530.428053] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 530.429348] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 530.430655] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 530.431960] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 [ 530.447965] FAULT_INJECTION: forcing a failure. [ 530.447965] name failslab, interval 1, probability 0, space 0, times 0 [ 530.450055] CPU: 1 PID: 5534 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 530.451278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.452784] Call Trace: [ 530.453265] dump_stack+0x107/0x167 [ 530.453925] should_fail.cold+0x5/0xa [ 530.454612] ? create_object.isra.0+0x3a/0xa20 [ 530.455445] should_failslab+0x5/0x20 [ 530.456131] kmem_cache_alloc+0x5b/0x310 [ 530.456872] create_object.isra.0+0x3a/0xa20 [ 530.457651] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 530.458573] kmem_cache_alloc+0x159/0x310 [ 530.459333] vm_area_dup+0x78/0x290 [ 530.459994] ? find_held_lock+0x2c/0x110 [ 530.460730] ? __vma_adjust+0x66e/0x2510 [ 530.461470] ? lock_downgrade+0x6d0/0x6d0 [ 530.462241] ? up_write+0x191/0x550 [ 530.462898] ? downgrade_write+0x3a0/0x3a0 [ 530.463675] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 530.464648] ? vm_area_alloc+0x110/0x110 [ 530.465379] ? __vma_adjust+0xbb8/0x2510 [ 530.466145] ? vmacache_find+0x55/0x2a0 [ 530.466863] __split_vma+0xa8/0x4e0 [ 530.467526] __do_munmap+0xf40/0x1260 [ 530.468214] ? arch_get_unmapped_area+0x450/0x450 [ 530.469084] ? lock_release+0x680/0x680 [ 530.469807] mmap_region+0x7c8/0x1500 [ 530.470504] do_mmap+0xcdb/0x11e0 [ 530.471135] vm_mmap_pgoff+0x198/0x1f0 [ 530.471854] ? randomize_page+0xb0/0xb0 [ 530.472580] ksys_mmap_pgoff+0x41c/0x560 [ 530.473315] ? find_mergeable_anon_vma+0x250/0x250 [ 530.474197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 530.475148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 530.476092] do_syscall_64+0x33/0x40 [ 530.476762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 530.477684] RIP: 0033:0x7fcc4a1cdb19 [ 530.478353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.481671] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 530.483027] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 530.484324] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 530.485605] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 530.486890] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 530.488184] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 [ 530.493446] 9pnet: Insufficient options for proto=fd 23:32:39 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:39 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5460, &(0x7f0000000000)) 23:32:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6628, &(0x7f0000000000)) 23:32:39 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:39 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 7) 23:32:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 5) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:32:39 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 530.721767] 9pnet: Insufficient options for proto=fd [ 530.726167] FAULT_INJECTION: forcing a failure. [ 530.726167] name failslab, interval 1, probability 0, space 0, times 0 [ 530.728642] CPU: 1 PID: 5575 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 530.730094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.731856] Call Trace: [ 530.732411] dump_stack+0x107/0x167 [ 530.733189] should_fail.cold+0x5/0xa [ 530.734013] ? create_object.isra.0+0x3a/0xa20 [ 530.734973] should_failslab+0x5/0x20 [ 530.735786] kmem_cache_alloc+0x5b/0x310 [ 530.736651] create_object.isra.0+0x3a/0xa20 [ 530.737587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 530.738664] kmem_cache_alloc+0x159/0x310 [ 530.739554] __alloc_file+0x21/0x320 [ 530.740341] alloc_empty_file+0x6d/0x170 [ 530.741204] path_openat+0xe6/0x2770 [ 530.741990] ? __lock_acquire+0x1657/0x5b00 [ 530.742911] ? path_lookupat+0x860/0x860 [ 530.743782] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 530.744903] ? lock_acquire+0x197/0x470 [ 530.745747] ? find_held_lock+0x2c/0x110 [ 530.746618] do_filp_open+0x190/0x3e0 [ 530.747437] ? may_open_dev+0xf0/0xf0 [ 530.748248] ? alloc_fd+0x2e7/0x670 [ 530.749021] ? lock_downgrade+0x6d0/0x6d0 [ 530.749908] ? do_raw_spin_lock+0x121/0x260 [ 530.750827] ? rwlock_bug.part.0+0x90/0x90 [ 530.751740] ? _raw_spin_unlock+0x1a/0x30 [ 530.752628] ? alloc_fd+0x2e7/0x670 [ 530.753409] do_sys_openat2+0x171/0x4d0 [ 530.754256] ? build_open_flags+0x6f0/0x6f0 [ 530.755176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 530.756221] ? wait_for_completion_io+0x270/0x270 [ 530.757254] __x64_sys_openat+0x13f/0x1f0 [ 530.758138] ? __ia32_sys_open+0x1c0/0x1c0 [ 530.759044] ? ksys_write+0x1a9/0x260 [ 530.759869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 530.760985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 530.762080] do_syscall_64+0x33/0x40 [ 530.762872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 530.763978] RIP: 0033:0x7fde5bb62a04 [ 530.764772] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 530.768714] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 530.770338] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 530.771883] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 530.773417] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 530.774955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 530.776492] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 [ 530.795157] FAULT_INJECTION: forcing a failure. [ 530.795157] name failslab, interval 1, probability 0, space 0, times 0 [ 530.797693] CPU: 0 PID: 5578 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 530.799189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.800994] Call Trace: [ 530.801576] dump_stack+0x107/0x167 [ 530.802378] should_fail.cold+0x5/0xa [ 530.803222] ? anon_vma_clone+0xdc/0x590 [ 530.804102] should_failslab+0x5/0x20 [ 530.804924] kmem_cache_alloc+0x5b/0x310 [ 530.805800] anon_vma_clone+0xdc/0x590 [ 530.806647] __split_vma+0x17c/0x4e0 [ 530.807479] __do_munmap+0xf40/0x1260 [ 530.808349] ? arch_get_unmapped_area+0x450/0x450 [ 530.809390] ? lock_release+0x680/0x680 [ 530.810245] mmap_region+0x7c8/0x1500 [ 530.811060] do_mmap+0xcdb/0x11e0 [ 530.811840] vm_mmap_pgoff+0x198/0x1f0 [ 530.812681] ? randomize_page+0xb0/0xb0 [ 530.813547] ksys_mmap_pgoff+0x41c/0x560 [ 530.814420] ? find_mergeable_anon_vma+0x250/0x250 [ 530.815505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 530.816626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 530.817736] do_syscall_64+0x33/0x40 [ 530.818546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 530.819661] RIP: 0033:0x7fcc4a1cdb19 [ 530.820467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.824429] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 530.826064] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 530.827616] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 530.829153] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 530.830673] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 530.832229] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 23:32:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 8) 23:32:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:32:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:32:52 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:32:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40046629, &(0x7f0000000000)) 23:32:52 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 6) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:32:52 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:52 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x660c, &(0x7f0000000000)) [ 543.859657] FAULT_INJECTION: forcing a failure. [ 543.859657] name failslab, interval 1, probability 0, space 0, times 0 [ 543.862836] CPU: 0 PID: 5592 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 543.864799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 543.867153] Call Trace: [ 543.867932] dump_stack+0x107/0x167 [ 543.868968] should_fail.cold+0x5/0xa [ 543.870052] ? create_object.isra.0+0x3a/0xa20 [ 543.871342] should_failslab+0x5/0x20 [ 543.872447] kmem_cache_alloc+0x5b/0x310 [ 543.873606] create_object.isra.0+0x3a/0xa20 [ 543.874844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 543.876308] kmem_cache_alloc+0x159/0x310 [ 543.877481] anon_vma_clone+0xdc/0x590 [ 543.878587] __split_vma+0x17c/0x4e0 [ 543.879663] __do_munmap+0xf40/0x1260 [ 543.880732] ? arch_get_unmapped_area+0x450/0x450 [ 543.882092] ? lock_release+0x680/0x680 [ 543.883211] mmap_region+0x7c8/0x1500 [ 543.884323] do_mmap+0xcdb/0x11e0 [ 543.885303] vm_mmap_pgoff+0x198/0x1f0 [ 543.886397] ? randomize_page+0xb0/0xb0 [ 543.887560] ksys_mmap_pgoff+0x41c/0x560 [ 543.888711] ? find_mergeable_anon_vma+0x250/0x250 [ 543.890080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 543.891575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 543.893022] do_syscall_64+0x33/0x40 [ 543.894071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 543.895528] RIP: 0033:0x7fcc4a1cdb19 [ 543.896572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 543.901728] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 543.903883] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 543.905872] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 543.907887] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 543.909548] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 543.911115] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 [ 543.931715] FAULT_INJECTION: forcing a failure. [ 543.931715] name failslab, interval 1, probability 0, space 0, times 0 [ 543.934246] CPU: 0 PID: 5609 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 543.935775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 543.937594] Call Trace: [ 543.938169] dump_stack+0x107/0x167 [ 543.938967] should_fail.cold+0x5/0xa [ 543.939819] ? security_file_alloc+0x34/0x170 [ 543.940791] should_failslab+0x5/0x20 [ 543.941626] kmem_cache_alloc+0x5b/0x310 [ 543.942516] security_file_alloc+0x34/0x170 [ 543.943459] __alloc_file+0xb7/0x320 [ 543.944291] alloc_empty_file+0x6d/0x170 [ 543.945181] path_openat+0xe6/0x2770 [ 543.945988] ? __lock_acquire+0x1657/0x5b00 [ 543.946933] ? path_lookupat+0x860/0x860 [ 543.947851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 543.948989] ? lock_acquire+0x197/0x470 [ 543.949853] ? find_held_lock+0x2c/0x110 [ 543.950752] do_filp_open+0x190/0x3e0 [ 543.951602] ? may_open_dev+0xf0/0xf0 [ 543.952434] ? alloc_fd+0x2e7/0x670 [ 543.953229] ? lock_downgrade+0x6d0/0x6d0 [ 543.954225] ? do_raw_spin_lock+0x121/0x260 [ 543.955282] ? rwlock_bug.part.0+0x90/0x90 [ 543.956352] ? _raw_spin_unlock+0x1a/0x30 [ 543.957362] ? alloc_fd+0x2e7/0x670 [ 543.958262] do_sys_openat2+0x171/0x4d0 [ 543.959236] ? build_open_flags+0x6f0/0x6f0 [ 543.960309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 543.961498] ? wait_for_completion_io+0x270/0x270 [ 543.962684] __x64_sys_openat+0x13f/0x1f0 [ 543.963722] ? __ia32_sys_open+0x1c0/0x1c0 [ 543.964755] ? ksys_write+0x1a9/0x260 [ 543.965694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 543.966975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 543.968265] do_syscall_64+0x33/0x40 [ 543.969173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 23:32:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 9) [ 543.970423] RIP: 0033:0x7fde5bb62a04 [ 543.971535] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 543.976028] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 543.977878] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 543.979635] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 543.981372] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 543.983101] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 543.984853] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 [ 543.987518] FAULT_INJECTION: forcing a failure. [ 543.987518] name failslab, interval 1, probability 0, space 0, times 0 [ 543.988971] CPU: 1 PID: 5614 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 543.989809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 543.990813] Call Trace: [ 543.991133] dump_stack+0x107/0x167 [ 543.991590] should_fail.cold+0x5/0xa [ 543.992053] ? vm_area_alloc+0x1c/0x110 [ 543.992533] should_failslab+0x5/0x20 [ 543.992995] kmem_cache_alloc+0x5b/0x310 [ 543.993491] vm_area_alloc+0x1c/0x110 [ 543.993949] mmap_region+0x97e/0x1500 [ 543.994414] do_mmap+0xcdb/0x11e0 [ 543.994839] vm_mmap_pgoff+0x198/0x1f0 [ 543.995311] ? randomize_page+0xb0/0xb0 [ 543.995803] ksys_mmap_pgoff+0x41c/0x560 [ 543.996296] ? find_mergeable_anon_vma+0x250/0x250 [ 543.996893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 543.997527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 543.998149] do_syscall_64+0x33/0x40 [ 543.998600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 543.999217] RIP: 0033:0x7fcc4a1cdb19 [ 543.999674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.001912] RSP: 002b:00007fcc47743188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 544.002847] RAX: ffffffffffffffda RBX: 00007fcc4a2e0f60 RCX: 00007fcc4a1cdb19 [ 544.003723] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 544.004584] RBP: 00007fcc477431d0 R08: 0000000000000004 R09: 0000000000000000 [ 544.005447] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 544.006307] R13: 00007fff22f5e8bf R14: 00007fcc47743300 R15: 0000000000022000 23:32:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6611, &(0x7f0000000000)) 23:32:52 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 544.044562] 9pnet: Insufficient options for proto=fd 23:32:52 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 23:32:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6612, &(0x7f0000000000)) 23:32:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40049409, &(0x7f0000000000)) 23:32:52 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:32:53 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:32:53 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 7) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 544.214764] FAULT_INJECTION: forcing a failure. [ 544.214764] name failslab, interval 1, probability 0, space 0, times 0 [ 544.216186] CPU: 1 PID: 5658 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 544.216985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 544.217958] Call Trace: [ 544.218270] dump_stack+0x107/0x167 [ 544.218701] should_fail.cold+0x5/0xa [ 544.219154] ? create_object.isra.0+0x3a/0xa20 [ 544.219696] should_failslab+0x5/0x20 [ 544.220141] kmem_cache_alloc+0x5b/0x310 [ 544.220618] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 544.221258] create_object.isra.0+0x3a/0xa20 [ 544.221767] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 544.222359] kmem_cache_alloc+0x159/0x310 [ 544.222842] security_file_alloc+0x34/0x170 [ 544.223345] __alloc_file+0xb7/0x320 [ 544.223786] alloc_empty_file+0x6d/0x170 [ 544.224255] path_openat+0xe6/0x2770 [ 544.224691] ? __lock_acquire+0x1657/0x5b00 [ 544.225199] ? path_lookupat+0x860/0x860 [ 544.225672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 544.226279] ? lock_acquire+0x197/0x470 [ 544.226738] ? find_held_lock+0x2c/0x110 [ 544.227216] do_filp_open+0x190/0x3e0 [ 544.227665] ? may_open_dev+0xf0/0xf0 [ 544.228108] ? alloc_fd+0x2e7/0x670 [ 544.228529] ? lock_downgrade+0x6d0/0x6d0 [ 544.229007] ? do_raw_spin_lock+0x121/0x260 [ 544.229505] ? rwlock_bug.part.0+0x90/0x90 [ 544.230000] ? _raw_spin_unlock+0x1a/0x30 [ 544.230481] ? alloc_fd+0x2e7/0x670 [ 544.230906] do_sys_openat2+0x171/0x4d0 [ 544.231370] ? build_open_flags+0x6f0/0x6f0 [ 544.231874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 544.232438] ? wait_for_completion_io+0x270/0x270 [ 544.233002] __x64_sys_openat+0x13f/0x1f0 [ 544.233481] ? __ia32_sys_open+0x1c0/0x1c0 [ 544.233968] ? ksys_write+0x1a9/0x260 [ 544.234410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 544.235022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 544.235627] do_syscall_64+0x33/0x40 [ 544.236057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 544.236649] RIP: 0033:0x7fde5bb62a04 [ 544.237080] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 544.239209] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 544.240100] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 544.240924] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 544.241755] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 544.242586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 544.243414] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (fail_nth: 10) 23:33:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6628, &(0x7f0000000000)) 23:33:07 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:33:07 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 23:33:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000000)) 23:33:07 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:07 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:33:07 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 559.042639] FAULT_INJECTION: forcing a failure. [ 559.042639] name failslab, interval 1, probability 0, space 0, times 0 [ 559.045434] CPU: 0 PID: 5680 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 559.046879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 559.048638] Call Trace: [ 559.049198] dump_stack+0x107/0x167 [ 559.049967] should_fail.cold+0x5/0xa [ 559.050770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 559.051887] ? sg_open+0x975/0x1660 [ 559.052654] should_failslab+0x5/0x20 [ 559.053457] kmem_cache_alloc_trace+0x55/0x320 [ 559.054419] ? __pm_runtime_resume+0xc5/0x180 [ 559.055365] sg_open+0x975/0x1660 [ 559.056124] ? sg_ioctl+0x120/0x120 [ 559.056889] ? lock_downgrade+0x6d0/0x6d0 [ 559.057768] ? kobject_get_unless_zero+0x15a/0x1e0 [ 559.058812] ? rwlock_bug.part.0+0x90/0x90 [ 559.059721] ? sg_ioctl+0x120/0x120 [ 559.060486] chrdev_open+0x268/0x6e0 [ 559.061268] ? __unregister_chrdev+0x110/0x110 [ 559.062234] ? fsnotify_perm.part.0+0x22d/0x620 [ 559.063225] do_dentry_open+0x4b7/0x1090 [ 559.064102] ? __unregister_chrdev+0x110/0x110 [ 559.065067] ? may_open+0x1e4/0x400 [ 559.065834] path_openat+0x19ba/0x2770 [ 559.066666] ? path_lookupat+0x860/0x860 [ 559.067528] ? lock_acquire+0x197/0x470 [ 559.068377] ? find_held_lock+0x2c/0x110 [ 559.069252] do_filp_open+0x190/0x3e0 [ 559.070058] ? may_open_dev+0xf0/0xf0 [ 559.070867] ? do_raw_spin_lock+0x121/0x260 [ 559.071837] ? rwlock_bug.part.0+0x90/0x90 [ 559.072739] ? _raw_spin_unlock+0x1a/0x30 [ 559.073614] ? alloc_fd+0x2e7/0x670 [ 559.074392] do_sys_openat2+0x171/0x4d0 [ 559.075237] ? build_open_flags+0x6f0/0x6f0 [ 559.076154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 559.077175] ? wait_for_completion_io+0x270/0x270 [ 559.078207] __x64_sys_openat+0x13f/0x1f0 [ 559.079088] ? __ia32_sys_open+0x1c0/0x1c0 [ 559.079986] ? ksys_write+0x1a9/0x260 [ 559.080796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 559.081908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 559.082998] do_syscall_64+0x33/0x40 [ 559.083801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 559.084880] RIP: 0033:0x7fde5bb62a04 [ 559.085665] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 559.089566] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 559.091193] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 559.092709] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 559.094216] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 559.095737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 559.097248] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40046629, &(0x7f0000000000)) 23:33:08 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) [ 559.155246] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:33:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40049409, &(0x7f0000000000)) 23:33:08 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:33:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000000)) 23:33:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:33:08 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 23:33:08 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 9) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:33:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000000)) 23:33:20 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:33:20 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r1, 0x0) 23:33:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:33:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) [ 571.984436] FAULT_INJECTION: forcing a failure. [ 571.984436] name failslab, interval 1, probability 0, space 0, times 0 [ 571.986826] CPU: 1 PID: 5752 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 571.988269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 571.990026] Call Trace: [ 571.990585] dump_stack+0x107/0x167 [ 571.991362] should_fail.cold+0x5/0xa [ 571.992184] ? create_object.isra.0+0x3a/0xa20 [ 571.993138] should_failslab+0x5/0x20 [ 571.993932] kmem_cache_alloc+0x5b/0x310 [ 571.994785] create_object.isra.0+0x3a/0xa20 [ 571.995701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 571.996784] kmem_cache_alloc_trace+0x151/0x320 [ 571.997771] sg_open+0x975/0x1660 [ 571.998513] ? sg_ioctl+0x120/0x120 [ 571.999279] ? lock_downgrade+0x6d0/0x6d0 [ 572.000155] ? kobject_get_unless_zero+0x15a/0x1e0 [ 572.001184] ? rwlock_bug.part.0+0x90/0x90 [ 572.002081] ? sg_ioctl+0x120/0x120 [ 572.002855] chrdev_open+0x268/0x6e0 [ 572.003625] ? __unregister_chrdev+0x110/0x110 [ 572.004594] ? fsnotify_perm.part.0+0x22d/0x620 [ 572.005589] do_dentry_open+0x4b7/0x1090 [ 572.006435] ? __unregister_chrdev+0x110/0x110 [ 572.007376] ? may_open+0x1e4/0x400 [ 572.008143] path_openat+0x19ba/0x2770 [ 572.008970] ? path_lookupat+0x860/0x860 [ 572.009818] ? lock_acquire+0x197/0x470 [ 572.010648] ? find_held_lock+0x2c/0x110 [ 572.011501] do_filp_open+0x190/0x3e0 [ 572.012340] ? may_open_dev+0xf0/0xf0 [ 572.013138] ? do_raw_spin_lock+0x121/0x260 [ 572.014035] ? rwlock_bug.part.0+0x90/0x90 [ 572.014930] ? _raw_spin_unlock+0x1a/0x30 [ 572.015803] ? alloc_fd+0x2e7/0x670 [ 572.016576] do_sys_openat2+0x171/0x4d0 [ 572.017403] ? build_open_flags+0x6f0/0x6f0 [ 572.018298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 572.019306] ? wait_for_completion_io+0x270/0x270 [ 572.020328] __x64_sys_openat+0x13f/0x1f0 [ 572.021193] ? __ia32_sys_open+0x1c0/0x1c0 [ 572.022073] ? ksys_write+0x1a9/0x260 [ 572.022884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 572.023983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 572.025076] do_syscall_64+0x33/0x40 [ 572.025851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 572.026914] RIP: 0033:0x7fde5bb62a04 [ 572.027678] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 572.031478] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 572.033072] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 572.034546] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 572.036045] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 572.037535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 572.039022] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x12, r1, 0x0) 23:33:20 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:33:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40087602, &(0x7f0000000000)) [ 572.099210] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 572.127376] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 572.141147] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:33:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:32 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:32 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 10) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:33:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000000)) 23:33:32 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) 23:33:32 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:33:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x400c6615, &(0x7f0000000000)) 23:33:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x100a, 0x0, 0x12, r1, 0x0) 23:33:32 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 584.112932] FAULT_INJECTION: forcing a failure. [ 584.112932] name failslab, interval 1, probability 0, space 0, times 0 [ 584.115864] CPU: 1 PID: 5811 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 584.117621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 584.119738] Call Trace: [ 584.120422] dump_stack+0x107/0x167 [ 584.121358] should_fail.cold+0x5/0xa [ 584.122335] ? sg_build_indirect.isra.0+0x94/0x710 [ 584.123600] should_failslab+0x5/0x20 [ 584.124586] __kmalloc+0x72/0x390 [ 584.125485] sg_build_indirect.isra.0+0x94/0x710 [ 584.126709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 584.128063] ? _raw_write_unlock_irqrestore+0x38/0x3a [ 584.129388] ? trace_hardirqs_on+0x5b/0x180 [ 584.130499] sg_open+0xded/0x1660 [ 584.131390] ? sg_ioctl+0x120/0x120 [ 584.132321] ? lock_downgrade+0x6d0/0x6d0 [ 584.133378] ? kobject_get_unless_zero+0x15a/0x1e0 [ 584.134625] ? rwlock_bug.part.0+0x90/0x90 [ 584.135714] ? sg_ioctl+0x120/0x120 [ 584.136723] chrdev_open+0x268/0x6e0 [ 584.137674] ? __unregister_chrdev+0x110/0x110 [ 584.138839] ? fsnotify_perm.part.0+0x22d/0x620 [ 584.140038] do_dentry_open+0x4b7/0x1090 [ 584.141067] ? __unregister_chrdev+0x110/0x110 [ 584.142431] ? may_open+0x1e4/0x400 [ 584.143366] path_openat+0x19ba/0x2770 [ 584.144384] ? path_lookupat+0x860/0x860 [ 584.145423] ? lock_acquire+0x197/0x470 [ 584.146436] ? find_held_lock+0x2c/0x110 [ 584.147489] do_filp_open+0x190/0x3e0 [ 584.148465] ? may_open_dev+0xf0/0xf0 [ 584.149657] ? do_raw_spin_lock+0x121/0x260 [ 584.151024] ? rwlock_bug.part.0+0x90/0x90 [ 584.152406] ? _raw_spin_unlock+0x1a/0x30 [ 584.153875] ? alloc_fd+0x2e7/0x670 [ 584.155052] do_sys_openat2+0x171/0x4d0 [ 584.156378] ? build_open_flags+0x6f0/0x6f0 [ 584.157795] ? __mutex_unlock_slowpath+0xe1/0x600 [ 584.159350] ? wait_for_completion_io+0x270/0x270 [ 584.160704] __x64_sys_openat+0x13f/0x1f0 [ 584.161750] ? __ia32_sys_open+0x1c0/0x1c0 [ 584.162921] ? ksys_write+0x1a9/0x260 [ 584.163901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 584.165245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 584.166647] do_syscall_64+0x33/0x40 [ 584.167812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 584.169202] RIP: 0033:0x7fde5bb62a04 [ 584.170142] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 584.174822] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 23:33:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106614, &(0x7f0000000000)) [ 584.176766] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 584.178706] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 584.180490] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 23:33:33 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 584.182295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.184186] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x12, r1, 0x0) 23:33:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x401c5820, &(0x7f0000000000)) 23:33:44 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:33:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:33:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 11) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:33:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x12, r1, 0x0) 23:33:44 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) 23:33:44 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 596.066958] FAULT_INJECTION: forcing a failure. [ 596.066958] name failslab, interval 1, probability 0, space 0, times 0 23:33:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x12, r1, 0x0) [ 596.069650] CPU: 0 PID: 5854 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 596.071095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.072867] Call Trace: [ 596.073429] dump_stack+0x107/0x167 [ 596.074198] should_fail.cold+0x5/0xa [ 596.074999] ? ___slab_alloc+0x155/0x700 [ 596.075856] ? create_object.isra.0+0x3a/0xa20 [ 596.076824] should_failslab+0x5/0x20 [ 596.077628] kmem_cache_alloc+0x5b/0x310 [ 596.078488] create_object.isra.0+0x3a/0xa20 [ 596.079418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.080499] __kmalloc+0x16e/0x390 [ 596.081257] sg_build_indirect.isra.0+0x94/0x710 [ 596.082269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.083373] ? _raw_write_unlock_irqrestore+0x38/0x3a [ 596.084465] ? trace_hardirqs_on+0x5b/0x180 [ 596.085385] sg_open+0xded/0x1660 [ 596.086127] ? sg_ioctl+0x120/0x120 [ 596.086896] ? lock_downgrade+0x6d0/0x6d0 [ 596.087776] ? kobject_get_unless_zero+0x15a/0x1e0 [ 596.088822] ? rwlock_bug.part.0+0x90/0x90 [ 596.089720] ? sg_ioctl+0x120/0x120 [ 596.090486] chrdev_open+0x268/0x6e0 [ 596.091272] ? __unregister_chrdev+0x110/0x110 [ 596.092254] ? fsnotify_perm.part.0+0x22d/0x620 [ 596.093244] do_dentry_open+0x4b7/0x1090 [ 596.094104] ? __unregister_chrdev+0x110/0x110 [ 596.095065] ? may_open+0x1e4/0x400 [ 596.095837] path_openat+0x19ba/0x2770 [ 596.096678] ? path_lookupat+0x860/0x860 [ 596.097535] ? lock_acquire+0x197/0x470 [ 596.098373] ? find_held_lock+0x2c/0x110 [ 596.099246] do_filp_open+0x190/0x3e0 [ 596.100061] ? may_open_dev+0xf0/0xf0 [ 596.100876] ? do_raw_spin_lock+0x121/0x260 [ 596.101792] ? rwlock_bug.part.0+0x90/0x90 [ 596.102692] ? _raw_spin_unlock+0x1a/0x30 [ 596.103570] ? alloc_fd+0x2e7/0x670 [ 596.104361] do_sys_openat2+0x171/0x4d0 [ 596.105203] ? build_open_flags+0x6f0/0x6f0 [ 596.106107] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.107129] ? wait_for_completion_io+0x270/0x270 [ 596.108162] __x64_sys_openat+0x13f/0x1f0 [ 596.109038] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.109941] ? ksys_write+0x1a9/0x260 [ 596.110755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.111860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.112966] do_syscall_64+0x33/0x40 23:33:45 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) [ 596.113865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.114957] RIP: 0033:0x7fde5bb62a04 [ 596.115742] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.119638] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.121256] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 596.122755] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 596.124265] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 596.125770] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.127281] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40087602, &(0x7f0000000000)) 23:33:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0) 23:33:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020940d, &(0x7f0000000000)) 23:33:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x12, r1, 0x0) 23:33:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 12) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 596.224530] FAULT_INJECTION: forcing a failure. [ 596.224530] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 596.227117] CPU: 0 PID: 5873 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 596.228570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.228775] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 596.230308] Call Trace: [ 596.230359] dump_stack+0x107/0x167 [ 596.233006] should_fail.cold+0x5/0xa [ 596.233816] ? find_held_lock+0x2c/0x110 [ 596.234693] __alloc_pages_nodemask+0x182/0x600 [ 596.235677] ? __kmalloc+0x16e/0x390 [ 596.236476] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 596.237759] ? trace_hardirqs_on+0x5b/0x180 [ 596.238685] alloc_pages_current+0x187/0x280 [ 596.239621] sg_build_indirect.isra.0+0x2f5/0x710 [ 596.240651] ? trace_hardirqs_on+0x5b/0x180 [ 596.241567] sg_open+0xded/0x1660 [ 596.242317] ? sg_ioctl+0x120/0x120 [ 596.243093] ? lock_downgrade+0x6d0/0x6d0 [ 596.243973] ? kobject_get_unless_zero+0x15a/0x1e0 [ 596.245016] ? rwlock_bug.part.0+0x90/0x90 [ 596.245918] ? sg_ioctl+0x120/0x120 [ 596.246688] chrdev_open+0x268/0x6e0 [ 596.247473] ? __unregister_chrdev+0x110/0x110 [ 596.248450] ? fsnotify_perm.part.0+0x22d/0x620 [ 596.249441] do_dentry_open+0x4b7/0x1090 [ 596.250301] ? __unregister_chrdev+0x110/0x110 [ 596.251263] ? may_open+0x1e4/0x400 [ 596.252039] path_openat+0x19ba/0x2770 [ 596.252887] ? path_lookupat+0x860/0x860 [ 596.253751] ? lock_acquire+0x197/0x470 [ 596.254616] ? find_held_lock+0x2c/0x110 [ 596.255487] do_filp_open+0x190/0x3e0 [ 596.256299] ? may_open_dev+0xf0/0xf0 [ 596.257113] ? do_raw_spin_lock+0x121/0x260 [ 596.258023] ? rwlock_bug.part.0+0x90/0x90 [ 596.258929] ? _raw_spin_unlock+0x1a/0x30 [ 596.259806] ? alloc_fd+0x2e7/0x670 [ 596.260601] do_sys_openat2+0x171/0x4d0 [ 596.261442] ? build_open_flags+0x6f0/0x6f0 [ 596.262375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.263397] ? wait_for_completion_io+0x270/0x270 [ 596.264435] __x64_sys_openat+0x13f/0x1f0 [ 596.265326] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.266224] ? ksys_write+0x1a9/0x260 [ 596.267037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 23:33:45 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 596.268161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.269461] do_syscall_64+0x33/0x40 [ 596.270245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.271324] RIP: 0033:0x7fde5bb62a04 [ 596.272122] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.276017] RSP: 002b:00007fde59124cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.277636] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007fde5bb62a04 [ 596.279148] RDX: 0000000000000000 RSI: 00007fde59124d60 RDI: 00000000ffffff9c [ 596.280659] RBP: 00007fde59124d60 R08: 0000000000000000 R09: 0000000000000000 [ 596.282161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.283665] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:59 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (fail_nth: 13) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:33:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x400c6615, &(0x7f0000000000)) 23:33:59 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:33:59 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) 23:33:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0x0) 23:33:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286612, &(0x7f0000000000)) [ 610.605494] 9pnet: Insufficient options for proto=fd 23:33:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106614, &(0x7f0000000000)) 23:33:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x12, r1, 0x0) 23:33:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4028662f, &(0x7f0000000000)) [ 610.637784] FAULT_INJECTION: forcing a failure. [ 610.637784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.639285] CPU: 0 PID: 5913 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 610.640035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.640950] Call Trace: [ 610.641240] dump_stack+0x107/0x167 [ 610.641639] should_fail.cold+0x5/0xa [ 610.642055] _copy_to_user+0x2e/0x180 [ 610.642472] simple_read_from_buffer+0xcc/0x160 [ 610.642978] proc_fail_nth_read+0x198/0x230 [ 610.643452] ? proc_sessionid_read+0x230/0x230 [ 610.643945] ? security_file_permission+0xb1/0xe0 [ 610.644481] ? proc_sessionid_read+0x230/0x230 [ 610.644972] vfs_read+0x228/0x620 [ 610.645350] ksys_read+0x12d/0x260 [ 610.645734] ? vfs_write+0xb10/0xb10 [ 610.646138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.646703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.647257] do_syscall_64+0x33/0x40 [ 610.647659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.648207] RIP: 0033:0x7fde5bb6269c [ 610.648618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 610.650592] RSP: 002b:00007fde59125170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.651414] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fde5bb6269c [ 610.652180] RDX: 000000000000000f RSI: 00007fde591251e0 RDI: 0000000000000004 [ 610.652954] RBP: 00007fde591251d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.653723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.654491] R13: 00007fffb203885f R14: 00007fde59125300 R15: 0000000000022000 23:33:59 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:33:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10, 0x12, r1, 0x0) 23:33:59 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) 23:33:59 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 610.740059] 9pnet: Insufficient options for proto=fd 23:33:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00, 0x12, r1, 0x0) 23:34:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:11 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4028666c, &(0x7f0000000000)) 23:34:11 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000, 0x12, r1, 0x0) 23:34:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x401c5820, &(0x7f0000000000)) 23:34:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305828, &(0x7f0000000000)) 23:34:11 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) [ 622.762022] 9pnet: Insufficient options for proto=fd 23:34:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x12, r1, 0x0) 23:34:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020940d, &(0x7f0000000000)) 23:34:11 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:11 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305829, &(0x7f0000000000)) 23:34:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r1, 0x0) 23:34:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:25 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r1, 0x0) 23:34:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286612, &(0x7f0000000000)) 23:34:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582a, &(0x7f0000000000)) 23:34:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:34:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 636.986389] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:34:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x12, r1, 0x0) 23:34:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4028662f, &(0x7f0000000000)) 23:34:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582b, &(0x7f0000000000)) 23:34:25 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:34:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa000000, 0x12, r1, 0x0) 23:34:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305839, &(0x7f0000000000)) [ 637.120148] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:34:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:34:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x18, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffffffe, 0x12, r1, 0x0) 23:34:42 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4028666c, &(0x7f0000000000)) 23:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40806685, &(0x7f0000000000)) 23:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:34:42 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 653.670288] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:34:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305828, &(0x7f0000000000)) 23:34:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:34:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1800, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10000000000000, 0x12, r1, 0x0) [ 653.779368] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:34:42 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086601, &(0x7f0000000000)) [ 653.836358] cgroup: fork rejected by pids controller in /syz5 23:34:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x2000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305829, &(0x7f0000000000)) 23:34:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:34:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086603, &(0x7f0000000000)) 23:34:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000000000, 0x12, r1, 0x0) 23:34:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3f00, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582a, &(0x7f0000000000)) [ 667.208487] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:34:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80087601, &(0x7f0000000000)) 23:34:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:34:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x80000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:34:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582b, &(0x7f0000000000)) 23:34:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000000000000, 0x12, r1, 0x0) 23:34:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) [ 667.389608] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:35:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305839, &(0x7f0000000000)) 23:35:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000000000000, 0x12, r1, 0x0) 23:35:10 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x200000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:10 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800c6613, &(0x7f0000000000)) 23:35:10 executing program 7: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) 23:35:10 executing program 7: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) 23:35:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40806685, &(0x7f0000000000)) 23:35:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8010661b, &(0x7f0000000000)) 23:35:10 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000000, 0x12, r1, 0x0) 23:35:10 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x801c581f, &(0x7f0000000000)) 23:35:34 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:34 executing program 7: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) 23:35:34 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x2000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00000000000000, 0x12, r1, 0x0) 23:35:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000000)) 23:35:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000000)) 23:35:34 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000000)) 23:35:34 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:34 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfeffffffffff0f00, 0x12, r1, 0x0) 23:35:34 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086601, &(0x7f0000000000)) 23:35:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0046686, &(0x7f0000000000)) 23:35:34 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x18000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086603, &(0x7f0000000000)) 23:35:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffff00000000, 0x12, r1, 0x0) 23:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0096616, &(0x7f0000000000)) 23:35:47 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 718.694351] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:35:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000000)) 23:35:47 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0189436, &(0x7f0000000000)) 23:35:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2) 23:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3f000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:47 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020660b, &(0x7f0000000000)) 23:35:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80087601, &(0x7f0000000000)) 23:35:47 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) [ 718.971412] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:35:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x4) 23:35:59 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf6ffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:35:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 730.603740] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:35:59 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:35:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:35:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800c6613, &(0x7f0000000000)) 23:35:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020662a, &(0x7f0000000000)) 23:36:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc028660f, &(0x7f0000000000)) [ 743.356156] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:36:12 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xfffffff6, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xa) 23:36:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:36:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8010661b, &(0x7f0000000000)) 23:36:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406618, &(0x7f0000000000)) 23:36:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x10) 23:36:12 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:36:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x801c581f, &(0x7f0000000000)) 23:36:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x7, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xa00) [ 743.595407] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:36:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x100000) 23:36:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:36:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, &(0x7f0000000000)) 23:36:25 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x8000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000000)) 23:36:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x9, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 756.563936] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:36:25 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x20000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0506617, &(0x7f0000000000)) 23:36:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x800000) 23:36:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000000)) 23:36:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xa, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000000)) 23:36:25 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x100000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x1000000) [ 756.719546] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:36:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, &(0x7f0000000000)) 23:36:25 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xb, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000000) 23:36:38 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x200000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 23:36:38 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0046686, &(0x7f0000000000)) 23:36:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) 23:36:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) 23:36:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x4000000) 23:36:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:36:38 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x400000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, &(0x7f0000000000)) [ 770.123800] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 770.148020] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:36:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1800000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xa000000) 23:36:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0096616, &(0x7f0000000000)) 23:36:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2}) 23:36:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3f00000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 770.311518] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2 (only 16 groups) 23:36:55 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x700, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:36:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:36:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3}) 23:36:55 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x8000000000000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xffffffffffffe) 23:36:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000000)) 23:36:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 786.370306] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 786.374475] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3 (only 16 groups) 23:36:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x10000000000000) 23:36:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) [ 786.414687] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3 (only 16 groups) 23:36:55 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf6ffffff00000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:36:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 786.474392] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:36:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4}) 23:36:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0189436, &(0x7f0000000000)) 23:36:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:36:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x80000000000000) [ 786.616881] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 4 (only 16 groups) 23:37:08 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x900, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:08 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffffffff00000000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020660b, &(0x7f0000000000)) [ 799.937016] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 5 (only 16 groups) 23:37:08 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5}) 23:37:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x100000000000000) 23:37:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6}) 23:37:08 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xa00, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x200000000000000) 23:37:08 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 800.011731] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 6 (only 16 groups) 23:37:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7}) [ 800.055059] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 7 (only 16 groups) 23:37:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa}) [ 800.135320] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 10 (only 16 groups) 23:37:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:37:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020662a, &(0x7f0000000000)) [ 800.231091] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 800.271705] cgroup: fork rejected by pids controller in /syz4 23:37:26 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xb00, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x400000000000000) 23:37:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:26 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x48}) 23:37:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc028660f, &(0x7f0000000000)) 23:37:26 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 817.591268] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 72 (only 16 groups) 23:37:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xa00000000000000) 23:37:26 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:40 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1020, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:40 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406618, &(0x7f0000000000)) 23:37:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c}) 23:37:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xfeffffffffff0f00) 23:37:40 executing program 2: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 831.144674] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 76 (only 16 groups) 23:37:40 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xffffffff00000000) 23:37:40 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2010, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:40 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1800) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x68}) 23:37:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) io_uring_enter(r1, 0x647, 0x87d5, 0x1, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x40, 0xde, 0x0, 0x80, 0x0, 0x3, 0x9012, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x8000}, 0x18000, 0x4, 0x7f, 0x5, 0x3, 0x6, 0x4, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x2, r1, 0x1) rt_sigaction(0x3a, &(0x7f00000001c0)={&(0x7f0000000140)="6532620b8fa9e8975e166546e200f0839d0400000014f243d9bb3c696fa00f0f84a7c33200009a8f09a0954d00c4a1e259ac1cf1ffffff66f3410f7ef736f04383920000000000", 0x40000000, &(0x7f0000000040)="409843defd45df3ccec4a1bd73f1c30f0dba00000080c423a95f8d0100000000420f01ddc441b5ea4ebc6565410f1a310d848bdcbe", {[0x7]}}, &(0x7f00000002c0)={&(0x7f0000000200)="47dfdcc48191f4270f01d6660f6299afae00008fe92096c766420ff26206437009400fb939c4614176b13a01737cc483f540269c", 0x0, &(0x7f0000000240)="8f2978d2b200000081a348da17442e6af82fc4c211bc580fc4e1b01471f68f49e801bae80000008f6978d3d4c4c3adcff834c4a2790eacf7374b383166410f71d700c401435e0e"}, 0x8, &(0x7f0000000300)) 23:37:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, &(0x7f0000000000)) [ 831.401254] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 104 (only 16 groups) 23:37:40 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xedc0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c}) 23:37:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:56 executing program 2: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:37:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="03ef305638b502e5d801e6fe9ebf23a4538c6181598154aa57c3bb0416793b713c0e90090bd099e4ed", 0x29, r0}, 0x68) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cachetag={'cachetag', 0x3d, ']$*'}}, {@uname={'uname', 0x3d, '/dev/sg#\x00'}}, {@cache_mmap}, {@version_L}, {@msize={'msize', 0x3d, 0x1}}, {@cache_loose}], [{@dont_appraise}]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000002c0)) pipe2(&(0x7f0000000280), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x100010, r1, 0x8000000) 23:37:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) (fail_nth: 1) 23:37:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0506617, &(0x7f0000000000)) [ 847.183789] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 108 (only 16 groups) 23:37:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:37:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) [ 847.221199] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 847.233592] FAULT_INJECTION: forcing a failure. [ 847.233592] name failslab, interval 1, probability 0, space 0, times 0 [ 847.236405] CPU: 1 PID: 9107 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 847.238001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 847.239940] Call Trace: [ 847.240598] dump_stack+0x107/0x167 [ 847.241497] should_fail.cold+0x5/0xa [ 847.242384] ? lock_acquire+0x197/0x470 [ 847.243360] ? __sigqueue_alloc+0x1ed/0x5c0 [ 847.244403] should_failslab+0x5/0x20 [ 847.245323] kmem_cache_alloc+0x5b/0x310 [ 847.246278] __sigqueue_alloc+0x1ed/0x5c0 [ 847.247287] __send_signal+0x6f5/0x11e0 [ 847.248264] force_sig_info_to_task+0x2a0/0x3b0 [ 847.249391] force_sig_fault+0xb0/0xf0 [ 847.250290] ? force_sig_fault_to_task+0xf0/0xf0 [ 847.251448] ? trace_raw_output_x86_exceptions+0x140/0x140 [ 847.252782] ? _down_write_nest_lock+0x160/0x160 [ 847.253867] __bad_area_nosemaphore+0x268/0x310 [ 847.255011] bad_area_access_error+0x260/0x360 [ 847.256153] do_user_addr_fault+0x3e7/0xc60 [ 847.257394] exc_page_fault+0xa2/0x1a0 [ 847.258391] ? asm_exc_page_fault+0x8/0x30 [ 847.259574] asm_exc_page_fault+0x1e/0x30 [ 847.260541] RIP: 0033:0x7f7a7e508f6d [ 847.261399] Code: 64 20 74 6f 20 6d 6b 64 69 72 00 63 6f 6e 74 72 6f 6c 20 70 69 70 65 20 72 65 61 64 20 66 61 69 6c 65 64 00 6d 61 67 69 63 3d <30> 78 25 6c 6c 78 00 62 61 64 20 65 78 65 63 75 74 65 20 72 65 71 [ 847.265588] RSP: 002b:00007f7a7ba24190 EFLAGS: 00010286 [ 847.266840] RAX: ffffffffffffffff RBX: 00007f7a7e5c1f60 RCX: ffffffffffffffbc [ 847.268524] RDX: 0000000000000000 RSI: 0000000040086604 RDI: 0000000000000003 [ 847.270220] RBP: 00007f7a7ba241d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.271963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.273664] R13: 00007ffc77fb170f R14: 00007f7a7ba24300 R15: 0000000000022000 23:37:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x3f00) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:37:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:37:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 847.400169] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 860.905406] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 116 (only 16 groups) 23:38:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x2, 0x0) 23:38:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, &(0x7f0000000000)) 23:38:09 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x7000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:09 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000200)=0x8, 0x0, 0x4) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:38:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x74}) 23:38:09 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:09 executing program 2: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:38:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:38:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:38:09 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x200000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a}) [ 861.014488] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 122 (only 16 groups) 23:38:09 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:38:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b47, 0x0) 23:38:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x300}) 23:38:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) [ 861.104014] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 768 (only 16 groups) 23:38:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000001140)=[{&(0x7f00000000c0)="fd8772231459cd0c9e29e846843fd2cf9c25b223f3d9782907fdc24d85e679118c7fbdc89f75452f97668892a0435e6a9e1226f12c52b429e506e6ac41f27d8d31d109a81493bdd2dbce58fbaf02682cbad2071f7660e8a0c960e4c87298603171a68d66e628", 0x66, 0x9}, {&(0x7f0000000140)="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", 0x1000, 0x10001}], 0x1048b0, &(0x7f0000001180)={[{@mode={'mode', 0x3d, 0xc000000000000}}, {@session={'session', 0x3d, 0xa}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '/dev/sg#\x00'}}, {@obj_user={'obj_user', 0x3d, ')\xe4+\\\\'}}]}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) fcntl$dupfd(r2, 0x406, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 861.150139] loop1: detected capacity change from 0 to 131072 23:38:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b49, 0x0) [ 861.185210] loop1: detected capacity change from 0 to 131072 23:38:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:38:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x32e}) 23:38:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x541b, 0x0) 23:38:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 23:38:23 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0xfa, 0x7, @buffer={0x0, 0xfe, &(0x7f00000000c0)=""/254}, &(0x7f00000001c0)="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", &(0x7f0000000000)=""/91, 0x5, 0x2, 0x2, &(0x7f00000002c0)}) 23:38:23 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) (fail_nth: 1) [ 874.226380] FAULT_INJECTION: forcing a failure. [ 874.226380] name failslab, interval 1, probability 0, space 0, times 0 [ 874.228053] CPU: 0 PID: 9927 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 874.229022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.230181] Call Trace: [ 874.230555] dump_stack+0x107/0x167 [ 874.231082] should_fail.cold+0x5/0xa [ 874.231633] should_failslab+0x5/0x20 [ 874.232171] __kmalloc_track_caller+0x79/0x370 [ 874.232811] ? strndup_user+0x74/0xe0 [ 874.233353] memdup_user+0x22/0xd0 [ 874.233853] strndup_user+0x74/0xe0 [ 874.234394] __x64_sys_mount+0x133/0x300 [ 874.234994] ? copy_mnt_ns+0xa00/0xa00 [ 874.235575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 874.236350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.237108] do_syscall_64+0x33/0x40 [ 874.237655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 874.238412] RIP: 0033:0x7f42b7803b19 [ 874.238954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.241674] RSP: 002b:00007f42b4d79188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 874.242791] RAX: ffffffffffffffda RBX: 00007f42b7916f60 RCX: 00007f42b7803b19 [ 874.243807] RDX: 00000000200002c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 874.244795] RBP: 00007f42b4d791d0 R08: 0000000020000400 R09: 0000000000000000 [ 874.245787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.246777] R13: 00007ffccb1433bf R14: 00007f42b4d79300 R15: 0000000000022000 [ 874.249185] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:38:23 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x9000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, 0x0) 23:38:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2}) 23:38:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f36fdd2e3a526d4ef604dd49443005967798e6d0920ce399ee5efd38aa3f8f29555ae6b245b3adfa87cf847b43347a56a167dbe5b", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000040)) 23:38:23 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xa000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x18000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:23 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 874.382639] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2 (only 16 groups) [ 874.470731] 9pnet: Insufficient options for proto=fd 23:38:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5450, 0x0) 23:38:37 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x3f000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:37 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xb000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3}) 23:38:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x500}) 23:38:37 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 888.480946] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3 (only 16 groups) 23:38:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x32, 0x1f, 0x4e, 0x80000000, 0x3, 0x3e, 0xffffffff, 0x28d, 0x40, 0x109, 0x2, 0x4, 0x38, 0x1, 0x7, 0x6, 0x2}, [], "61c9eddc631520643f717ef4c6c6e39681bc940abfe89bf220109189ac01415f2a3244eb4f9a610fc85a37349256e95fec94af94ea900de2e9c77ce81fcc52d2216c1dcad479299a60bfe61ef82a44dfd446ba233fef61b7595fcd35f4423afdfe52fac7a5a9ce472b55f6ca355a593e0a142e255bf50353da2a4393ab6320c2d868c2ffeb60f0ccb651946a403ad6d96d17948f352a55563f5c715ca08e8ccdf1716f618a0afeab9d40ff99c5db6c0a768d18dbf0d0428e74fdf2fcd341b9e8a4798023", ['\x00', '\x00', '\x00']}, 0x404) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x2910, r1, 0x0) syz_io_uring_complete(r3) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x100010, r4, 0x8000000) [ 888.516532] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1280 (only 16 groups) [ 888.521360] audit: type=1400 audit(1754177917.430:12): avc: denied { map } for pid=10192 comm="syz-executor.1" path="pipe:[23833]" dev="pipefs" ino=23833 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 23:38:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:37 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xf6ffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0) 23:38:37 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x10000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4}) 23:38:37 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x20000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:37 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xfffffff6) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 888.663180] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 4 (only 16 groups) 23:38:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x600}) 23:38:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRESDEC=r6, @ANYRESOCT, @ANYBLOB="8787ced5000000000000000000", @ANYRES16=r7]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "729eb0f00bfbb26f27741dd64270229f"}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:38:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5452, 0x0) [ 888.802864] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1536 (only 16 groups) [ 901.101129] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1792 (only 16 groups) 23:38:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5}) 23:38:49 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:38:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x44440, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r3 = fcntl$dupfd(r1, 0x406, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:38:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x700}) 23:38:50 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:50 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x20100000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:50 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5460, 0x0) 23:38:50 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, 0x0) 23:38:50 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8cffffff, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:38:50 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:38:50 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:38:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0xad, 0x7, @buffer={0x0, 0xdf, &(0x7f00000000c0)=""/223}, &(0x7f00000001c0)="0f56a01ed49098c880f30d169067bc697c8745beb56d00d7daad64994f780cd8129df5fbe6efe7068fe1e8e4088b975081f90d8511398d14411f7936c3178948a846fb1418670ca67e285b0af56d4521d381e93f7c1329d305aedb47924135758b3db564315b3422e7618981dfaf8ac1206c055e637a84b2e70cf37dfc38b6de99a083cd3caddb4b24f6a3d8e1f4d25eb623f17e019fbd43b6b6c977694ca1691021c2a7872b3cb103c62b8f9a", &(0x7f0000000280)=""/192, 0x3, 0x10001}) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:39:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x660c, 0x0) 23:39:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6}) 23:39:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa00}) 23:39:02 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:02 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:02 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xc0ed0000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000480)=ANY=[@ANYBLOB="33737e1a31ed18c90018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x7f, 0x0, @scatter={0x3, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/111, 0x6f}]}, &(0x7f0000000280)="c1a649785cf324c9846c763e1111b04568227b3d7f3f37755c54a239b6b716b94d67f9313a5eba88663ab2c9e103c092d97f57ba940494eee40bd801a5bc54061b610dfdfbe21db8cbf33f0ec12d1e9d488e1b61f4194851c6e6062d835c334f39ab52bd6a566abe4e0d5560eeab2fbfd4d7b160fbcc125a1a70f5b3cb701c", &(0x7f0000000300)=""/157, 0x8, 0x10010, 0x0, &(0x7f00000003c0)}) [ 913.495610] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 6 (only 16 groups) [ 913.518841] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2560 (only 16 groups) 23:39:02 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xf6ffffff, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:02 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x100000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6611, 0x0) 23:39:02 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000004240), &(0x7f0000004280)='./file0\x00', 0x7d, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004300)={[{@uni_xlate}, {@rodir}, {@utf8no}], [{@dont_hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/sg#\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/sg#\x00'}}]}) sendmsg$nl_generic(r2, &(0x7f0000005700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000056c0)={&(0x7f0000004380)={0x1328, 0x20, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1e}, [@nested={0x22a, 0x18, 0x0, 0x1, [@generic="2f2d5dd7dd7c927d88d87a9d21edc8a1cda8e87d5dee2718f4b44912619192b50aac035901d4224376244ac405f9c556ae74d2a8b7d4b8cdf5e7856c5a9f35fef8f0d9ceefba9e4bb33844173868491cb197ac5d067a8357dea9aeafc91d498b0c08965a929ae2767ac10431d35c7a26d8b1193ebb80fe00d99a15fa02fcab3e503a6d9532bbd6dd13fb127cf0cb12fca6619021a2e4188b1563e4b66ba4df1694731a993e158db5db353ed8a48c973e85f01ac3890bd18c", @generic="4b2651e2a3f7e0460a47e5d4d3bf4d9b1032cfae0e1bf95c5d6020bf122ca6c2cd2e7df5eba962d85a4824c9d6b60febe082c8446911b5f54c4ee5d49271034cc3c327b65b226abc341be902ae904748ce58f0b639fba9dc5a3e9455872a801525bc19d799d9d98af7a133c7da34b1213efac0465ffa3aba953ec6184fbf03b440859885623a2d9d21978cb51887cb3e5d84d66d6ed53f8af976518fbb0f77041cd3795096c20afe14d495b9738149926440e941487af688fb7a4dbcfba13c8b8d0fbe1ce5977c60d8a6ab96895c68ddaa2c344ffe01340efa9b12c438da31", @generic="a53519f98bbc476ce161d3cdee4bf71794ff0c6ca7c19366f0d451d8db45c7e5cb1dca3a1b7b5dd3bb3d7d6cd858b7a087cfb48bffb78d6fe983c56d9d999970b131216e7e269d08ba6870adeeaf69a54e09ed26bed2b1f11dc5a5aff242ca2580882047663ae4d302150712b8e738", @typed={0xc, 0x37, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x45, 0x0, 0x0, @u64=0x100000000}]}, @typed={0x8, 0x3, 0x0, 0x0, @fd=r3}, @typed={0x1004, 0x38, 0x0, 0x0, @binary="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"}, @nested={0xd9, 0x39, 0x0, 0x1, [@generic="c1792f2fc82125a13bee53522a487a4fb79c9afc92f09d56dec2c76548c5bbdd281fce816b2f0f1537604addbd72b5544b286a1dff548d3fa5174613d9365648fab1deef9fb7876c4ce574ebac90f07e3cc047b9f036db6fd905f43757c97ac6e0a46c48d8fa54411b39f94aa42507104cb5a232017ab80d3604d306b8ce03ef32497ca8e9bca4d7fd371f1e498557515c74570ca2c04bc90ac2306ac8a37885319e1d1dd4d3eebcc3940b80770a71a800be8dae4beda1e528e0f2ca6b19ea196b73016c65f8887c4d9124899ef0024aea1b7bea3d"]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x4044000}, 0x4810) 23:39:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6612, 0x0) 23:39:02 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 913.671246] FAT-fs (loop1): Unrecognized mount option "dont_hash" or missing value 23:39:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7}) [ 913.704744] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 7 (only 16 groups) [ 927.660263] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 11779 (only 16 groups) 23:39:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:16 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa}) 23:39:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6628, 0x0) 23:39:16 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xffff0000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200040) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:39:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2e03}) 23:39:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x400000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 927.700863] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 10 (only 16 groups) 23:39:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40046629, 0x0) 23:39:16 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xffffff8c, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 927.753467] 9pnet: Insufficient options for proto=fd [ 927.757588] 9pnet: Insufficient options for proto=fd 23:39:16 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x13, r2, 0x0) 23:39:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4800}) [ 927.853207] 9pnet: Insufficient options for proto=fd 23:39:16 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xfffffff6, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1800000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:16 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 927.904623] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 18432 (only 16 groups) [ 928.054080] cgroup: fork rejected by pids controller in /syz6 23:39:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x408801, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000040)=0xc1) 23:39:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xedc000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x3f00000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c00}) 23:39:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 23:39:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40049409, 0x0) [ 941.166215] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 23:39:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:39:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8000000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 941.219004] 9pnet: Insufficient options for proto=fd 23:39:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, 0x0) 23:39:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x0, 0x2, 0x7f, 0x6, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000040)=""/27, 0x1b}]}, &(0x7f00000001c0)="8e7cc9e23df02b6b442f3612a0bf82c3195803349e61d02f5184310c8bab82b81b07de3e58d98b4f6f9100ae0aa6a751e26904e58d7fbfe208ae1ffba9c246e575faeba2d4e8786261f053a9ec59c23e1585fe6579217e091b7233c6073999410877a6b61f59339364bdc0bfa80ad970c274993388b6fe35d4449cfe7df099", &(0x7f0000000240)=""/156, 0x9, 0x28, 0x2, &(0x7f0000000300)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 941.320515] 9pnet: Insufficient options for proto=fd 23:39:43 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:43 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086603, 0x0) 23:39:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xf6ffffff00000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x48}) 23:39:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6800}) [ 954.668653] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 26624 (only 16 groups) [ 954.714688] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 72 (only 16 groups) 23:39:43 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x100000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086605, 0x0) 23:39:43 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x100000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xffffffff00000000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086606, 0x0) 23:39:43 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x200000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c00}) 23:39:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c}) 23:39:43 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x200000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 954.895494] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 76 (only 16 groups) [ 954.922388] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 27648 (only 16 groups) 23:39:56 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 967.943679] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 104 (only 16 groups) 23:39:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7400}) 23:39:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x29, 0x4, 0x0, 0x9, 0x40, @mcast2, @loopback, 0x20, 0x8, 0x9}}) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x68}) 23:39:56 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x700000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, 0x0) 23:39:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) openat(r2, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001e00)={r10, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) r14 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) openat(r14, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r14, 0xd000943e, &(0x7f0000001e00)={r15, 0x0, "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", "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"}) r17 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0xffffffff}], 0x0, &(0x7f0000001500)=ANY=[]) openat(r17, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0xd4, "544d056968f26f"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000000c0)={r4, 0x10001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 967.979073] 9pnet: Insufficient options for proto=fd [ 967.994669] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 29696 (only 16 groups) 23:39:56 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x2}}) [ 968.054439] loop1: detected capacity change from 0 to 32768 [ 968.107591] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:39:57 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x800000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, 0x0) [ 968.185255] 9pnet: Insufficient options for proto=fd 23:39:57 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x900000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:39:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c}) 23:39:57 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x2402, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:39:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086612, 0x0) 23:39:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a00}) [ 968.355631] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:39:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000000c0)={{}, "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"}) [ 968.378802] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 108 (only 16 groups) [ 968.449914] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 31232 (only 16 groups) 23:39:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000007c0)={0x0, 0xfffffffffffffffc, 0x3e, 0x30, @scatter={0x9, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/133, 0x85}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/40, 0x28}]}, &(0x7f0000000640)="465be2124b4335f77c20bfb939567bb42650a5815770a60bc825773985e94b049b6cf1d6395eb1f4653d1cc4d943c1116b548729a9968a35aeba029129c6", &(0x7f0000000680)=""/224, 0x8, 0x10010, 0xffffffffffffffff, &(0x7f0000000780)}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000840)={{r1}, "061cf3a9f00185c9b566a9f39027880e72865b239b3ccc0b60aac35887080f220b62df24528eebe7d461593f2a596bcb6e122ee301a7f6517b6c92742a98e7d8b5d22630081f0390dcc35788102a353928977967403430d1a0cad335ef042004898154357153299ca7f881ae49961382f829fc725c9bfcd6741426598594f2fcd871ae622458433e41c86ebcae26c1bdb08c47d8d027e6423efd76036f76bd45c73868635ebb9ba54ace71fe28c04462cf4f3589b7f36d8d5d7ccadb67b7d8d954a3109690335b9139aff2d70c8e10bb8d69e4cbd64c708b937922ecb7b850cc8f45642132fb9f044312ce42800cb94220de7f082ed6385b4dde8d4e81f901c3d9df73ace59b12e186e4c95e934236a2eb28dc6eba0a22c65f0bb63589b70a55bacba2f0c48bd212ab695174cc96dc7c0a49a1b0b7a7d1e2585f8d0bc74cce4c9683061f073d92efabdef0894feacf141702a5ecfe52278342efef6e9ced228acc0daf1edc03940d4c78a24521256a4f3cdba06530a4fc11afb61db43869324c83c6e786305b4dd1562b106cb93c58760c7bcb7fa1d32ae285c3ca7bff92208426705be1a654ab9df317b9ed8b27087af2464220b8bebd176aedaebdc98e810f9cb36cddf133ebc9a06dd0468513bef127662203bbf1c09d9b8e1ce1b923a8164e190493519497dc9bf0489bb5e07f3d0ad6a047337d3fd4fcc0338efcba6335f7462e24898546de671503048806e24dc7744b65821ffac3d5ec21e5226d86f7b4577d649763a0adfc0ec5b9c6b27d837e9a838bfa93883be644dbca979b1353bac435b40da4e43f60596f2dd005d453487ee4bd7e89b387ae37ef023ddb64d6300bac96ee841cdceaebe3809624fc941127314a5aa80ff5b70fd1294d314775b11bfff2f41c8cd07308f5470da334a15eb1aae82e26acc83de89f3b04a1140e4933acd39ea56306a6dc4bdba535cb491ca0d79b16d6264b67c74da9f2ab2b91fc467cb474e25a6510eb9cf753dc107a389926c979ee0a5fddc6c756db770f9662d5c8475cfe300266094bcb087ae059a395f1d5bb38d7d6da11f4b71172254675733aff02ce2389a36dbe5c4e401c32842cd0e518f712a45b31f16bbb61e036f0d70adc98deb13373c8c32d7332281361982254b107ef34261efa7d71167f0dc9e3bcb6869998cb4eb5875cd651dd333239cc638a4600311eeda8f026d2c9ad32bc2aca59916b3a6c77968345737e4fff0d7966a1104a7ce7a0216c37a07ab660b318f5d62dbaba5e09839dbf29ad51bf53ccb69ac6fee4300014bc93dcefca2465d1b226c01557a72e72ef25d4b52c11ef1fab26c529a6f6964be8c8c7bf9856cbbfb49faae472c4090c6ece5cfb686d9cacac5970f4091b2da0d46086289441201f5624c7c0608bed33819234ee1c122d556a1a86e1b6c530854b5d29ff07c9fe77982a66d5caee94fe7fdf1aed178cb894f2bdc0e68d77512a87eacf4fb9e6f00ac21903c0b2122b77767e7a52079d13dbc5ce597b4dc290aa7d511b49772c652b74e848e48a256ebaaf5df0548ae4692aef34c66e948b814383163986d47a605e56e8d024674722f230f7092090227e21acea535441268d5cb8f1cb6b32a67c7111ca42bd468aad59e71fb424f850e43f13895e68a1fe3ad31b38d27d6715f407da5b7f055e3da02ee5c2682f384808234f3bd948c38f9730afca89aae538bd860d2f43a21392da16e10cc45cd0bf8715195cae9f9b82953259a016d2ac836c8fa0c9e54167121075ad7895278746eb084e7dd08ffe482a283822a742374fbf01f40f7e8d8792110c2b8029721ba8a19a8d6f50b23d913b3df12b0bace95e096c08d51725f77914497e64fb4a88530cb984b123639e79d98152ee8d11b4dd665a37c4fe5ce1560d5bb2f73275ed0c1e3be6adc01ebe9b1926cc218336c9fe1e682dbe5750110149dd92c4336b0a014b45764efa757f98398dae92d84010682d5bba8a9b86c80aeabbcfeb19dfcccbc9d02218b976e465842acbfe9fc2eddb0d9bc6ac2129b6568597aa6c1606afa0e25791205bb1244be59155b88b1662f472d27ce1a613b43b251b752248d9aaf3b224271e7abf89b4b3474d82877bbd84d77deb471769fea50533f1824d6791ff50232a66c7c9726827cd098a67604bec179d2f0e9328372cba194e0cd7d353276e6a27b93824831edef9d5f33fc1c9e667563a3853c376469daa0c4d267319860ab6c579c921402519e9aa058d8f8ba87263de4b7183ee8bac5a1386ddaa24e132d074bea5b42112dc58b9dcf73a3eeb84b7654d828b0c529a9905e60f9ac381921126eda5e5c7632cd1c86213ec52fb0c0d5f790ead87ab10b00b29e4e0dd2443f2291306e84958b4670ceb35900c32f73eb96bfd439b52203388bb522aa75706fcd08c1bb6b5389a09ade4f3eb810ffe39406245c2f9463e16895ed81c39e0151fbccf35e8394197de0c408e7a802664c3ee69dbc149360e9a6602a67fcca2c3ea074aafb8673879216cc400b47d86062b7fa96c250713960c8f72b9a0a8541067d9085657b7cf5c6ae3d8b7bd0b10ad7c996a5c4bb65d34bf06994f108151fc81b2e9d8ef450c79f74a221fd3f68616aa7fabba3134519ac7613f2c1415f9e4e326dff24b2d47331e07d9e34e12e3e0861226b6ffbf1d48908bc41092f8f8cdee9ae63e139c5edcacab36c3ac9c3f5eb590be82ddad26602d639f993b99bd437e7bb7286fe73f57b4675f3e60229d2a6ddeeb7a89bcdfb579ec550bf21b28c5c033bb28dc2db7ff152ccde14ffeeccd5574873bd7c55b32d3eda8619ee985663cd0aa5856fef223fc66c926205a464af787dca8e0bf26ce61d99806c4945bd93d89972874660eedcf238e82cbaf555fdd984cda5a9071eca4ebc41b891b941b278c48801c0b92ddead28d2cb161b1bd34d49a132ae50069a482428d150d9458cfe8c8ca52d6944b3f6b7a988ab1d347aa401146742d995b1ea451c99f7801ed14e0cf73d7129b863202f0558e1c3c684e0ae01717cf4c262df3fa18a518f84b36c04b79797606bbf39dd9eb83ac7f0383b413b05f53c277c557b0c3533744b2c193db3005cc38d2bb41ea7c43607bf013f3395cdd91fa1baf6d4356799f0e22e1d32b6e05960f7a4e7ed365a6b69dbad7e620600da490e4d1dd8ee1cea1f9f8dab4ee96e85e706ce3df168d417c0dc958d2e4b0419f57a78a0952ffb62c8d3d89b1f2d9ec7c124702ea95eb306ceb61d50e16b2de299ea8f67d07816d4dbf54981efa919d53d7b0032d499d37c2fcaa3be35b7e68554c29bbf7131ba732881581233e76d4731c0e040b84e90de1af5743d6327882ba0f0e6cac2f7a4c0737da7329ea7d6c7b402f67ad160a6948cd1155ede926ca8fe1f8f016daa8139a2de9e5e8753c63cd2d80e6338d4a292669f5cce9a92369bf827fb23dbff9bf7a3295ae025fcee293a55d3e2696ddd829adf673a242b69fd2e5edb739fcb3913d445e16f3e6858a25c51923895092685c80943408892b2e22df9f06138f665e9f838c55bd2433fd6b803d9007a13a7d0d00af899837cc430ebf9ecf82795127ffbf8c440f8e549880f60b0eea48b2215456fb1b742b7c96cc328c3458f688065931ac949136f2e09629b4d5c45f577f5a1a14c92059d256f986ab9dac8fe786bd28387ae63bb27d5a794990851d3376ed7c809c5dcc1f36fb427ee89d12497d69baede1dafea6de91a7df31fa2efb2aa2671572bf04440ede68e51a2cc99f25fd64f49d9e6e05315d6ccccb7e428c09c45862be7ffc9f226337d10328c1a357bd7f39dd95b3fcfafd0ac2ea2cd549aa92c2dcd6bf48d4fb7befc3018fef3656d917c2d6431619c93b5818f0a88e8acfcea59269f70afd54d64bf20d1da2f6aa61a7b6547f8203a134ded23cdfff1212dda20740696e8487bfe3459440cbf471c2c0c24364c83d997ce17bdfb9febcb1a2efd3807e6c6be5929ca6795240c1522f7638ce46e33112a546800b07bd9c3fa4130892b5f24497707bfa9163a52df97953f4c9b8b64131c765698ab33ad1649486819e5e967c52d5010452e284d45f032a06318f36b89b494344687d8842b569ca90fbf88dddd07d3a9e5d397b9c49e9f700346d50a198e68e6c1364c9016121a8a0d7f91dd65b7d8628c4de99e9bf92d9d985fcf6d1133e713cdd8711ce840715c20f0f0d36b6090b776f1aa72251e26c3506c03db5503cab5771179a597f23ea6cb0c069e1a9ab34492ecb50a125fdb88a7bde336dcb815731269a67cb1c145674a0fea3ebc224b4900ffcd8be8d44735009a03850182c1d216c2b1da31e1fb93465851b680f7e6998b4db6c90f9f50006c66703f790aaabbf2fcae4a81ed2c3ab4157721154f1444c949a6d1b3bc33169c6b7e9efaf18ae0b02339e233afa28dc8d0084f950f16535eb030561d02321cb912cb22ffd48e110ee9b95a528b6fe457a5d0bcd84cdd5779c5e068f9be7155f2132eb6d74f9310f62bc90fbf763fec0208d3fa79b1e912b18a24c50be8a5a238613ab9a31d5c717ade1120fd63c127636511c2ccc55bc59daefd18f373ef4f79d0eb6ecc85ee93d729e16d1c5b9f8def40a054c93b921c6833ab7bf57e317870b1ec59a3e1578ffc771575a667d5f760a777e55d103535a59e73dbf889b4e340954fb9de8cde79ebde54683504f214a10527433cc07f01eb15c61747c35e190777b9fe4a467975a4143663c5f9f886afdd16558cedb9db8ddd1c08f0ac589182ac35a134632c3812c94ad7ff9deca71d3343b70af925e424ccd2810e6fbbc6c41563d1d76316c45eee9c0b603c0f7a14afe9798c199ef5a622f5ce8d59eefcc8c5e8e1e72cb4ee07e5afb4534aff0a815137682deeff4c37308e98a744a58c778d7cf706f01871cdf5274b0e5450bf8821d90fd6f33d91afa31b67112014243066d0ab776109a25d7623287f802cef0ef2bec866a03fd0080ed3a5fbabcb92c4b45ac9d322125342a4d3b18e1ff84ef8128f52018c53d3cde615b17ec4056e47300489194434031e26bb6c2c79d5e5d43178bb2a6f44556b965089866bc85270b4e07c470775e61364bb5e09766a29250e05c488fd9b1c52591e58b3917290448313f30d9250dc353459cdda461392a17ceae1d37fac3d37e04523ac46c2fd3120b85549dccb4ca6d6a70462f9f2f21f25dbf4d9ce0ca21205b7abaac04c6be094ef528436d591f2447d77bba99493024fe6fe30fb717e37bec7536086519b65ffe03269a8cfbf6f6112c24849d27e6c8fdd11f62d5367220e4b445d406109d24344c8e465044c8b590d7de281147bda1113a8e854c873683ddf2ce6e0e62f023da99607f9b125f0307e932c3b97cdaba8bec47bbc44c3dd7769efaa33b230a032dc227f5dfdceb1ef0703253feb68d368f2d15e7519c1a20b3faee00bb94fc6cf90353109032b7f4cf36cd515f9b7931109a9a7d913ee29ced0b0dc4afeeadb0157b9b5e07d979377dec4b08988e347bc68710342d7f66aa91042579f395437e126b97eb1f9981b9c488a38ae5b63f25863f515b8deb6527cfdeec7c112fa79d914164b4333a0c648697d959356ec48f6ea6c304e02636f1e5d7e24044b274f37f12b616d3384377286b6e15d2d7eceb9b6fb3b9f8cf47c31f2112204009693d061a4751ce1a245ce19bb705cba85b9bbccd0e2736aba7f71278ad7d17ddd41b302fac59d32c06917e22267e5fb67704995d7850745f00"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:39:57 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:39:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086682, 0x0) 23:39:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:39:57 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0xb0800, 0x1ce) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/118, 0x76}], 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) openat2(r1, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x80000, 0x0, 0x8}, 0x18) mq_notify(r4, 0x0) dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 968.582037] 9pnet: Insufficient options for proto=fd 23:40:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xe0ffff}) 23:40:10 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r1, 0x0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfff, 0x1, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:40:10 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xa00000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40087602, 0x0) 23:40:10 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000640)=0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffb, 0x6c, 0x3f, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/71, 0x47}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/114, 0x72}]}, &(0x7f00000004c0)="ae459e07042e720ee0cbfd43a31f5a5a19c591a5f1f57132d95bc1a9cb6e8c24d555a490a41d75e39961e5c3452b7b5c749f9035a90afa51aee6e2839ed98252114c070443749941df4fc39e96ec9c66bed725cb45936480c4b46193d9ad986166854b563879751ca917bf3d", &(0x7f0000000540)=""/46, 0x5, 0x26, 0x2, &(0x7f0000000580)}) syz_io_uring_complete(r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) write$tun(r3, &(0x7f0000000680)={@val={0x0, 0x6003}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @dev={0xac, 0x14, 0x14, 0x35}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @multicast2}}, 0x20) 23:40:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x74}) 23:40:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setown(r1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 981.207704] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 14745599 (only 16 groups) [ 981.212790] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 981.244199] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 116 (only 16 groups) 23:40:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x400c6615, 0x0) [ 981.266052] 9pnet: Insufficient options for proto=fd 23:40:10 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xb00000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x7ff}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="4ed2c1961798077fba5db15696df145c7933fdbf69", 0x15}, {&(0x7f00000000c0)="c664dcb16912b6efde29f66b5e51da017ab96f6df0ae7d59d63c8065908ff876e0826609691e903b53614da8ee327773de6c368921834fa4acd6a86d8cad973694cea706f4f2d4", 0x47}, {&(0x7f0000000140)="4b57f6e7fdc33c2fbbe3a381b64c93e91c01e81ad65c65702409d79125ce2a92da251c403cebc0a4c0d465e017641d8d3fc6fe1a28332ac049be8f5f5e5b8d699dd9611e25f5ca4ad7253d66d360f21b8423d3ca561e27a89a9ae58fad5b57b9a4accf1e91b30bd97ae569616b81eedb6d90b0757fd33d4bf22fcbb37d401c285282f236f377e4b41812429cc0680265ad5093be63e50783efe07f2e4da15ee5e321c9dc66c0468a91dc16bf034ca204476fa7e42e30ddcce19686ac3a89", 0xbe}], 0x3, &(0x7f0000000240)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x21, 0xa, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2]}}}], 0x68}}], 0x1, 0x40000) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:40:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3a921474bb219185) mq_notify(r3, &(0x7f0000000080)={0x0, 0x31, 0x7, @tid=0xffffffffffffffff}) mq_notify(r2, 0x0) fcntl$dupfd(r1, 0x0, r2) r4 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x12, r4, 0x0) 23:40:10 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1000000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a}) 23:40:24 executing program 1: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @can={0x1d, 0x0}, @ax25={0x3, @bcast, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x6f}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3e8fddda799200dea5c79f49e370d93b3ca2d1089fd034e7161ed6c5927e4255420c07c7a09f07c6589ccdd4ae59098a9522073aabaa090db17d3ee7007ec16e314f0cfee3e6c37366c534d4bd4643fd5917db052ffadea926075ebf04349eee415b169c78b482d4e70b9b7f154afd67285ce7c92e7e3c3cd1e96a2b27fa131cce8a27740d187d0ccfbd2d2cffc54896ef533ae9188ad64e24caedf2ce0474f3d126ad4a7b7fe65e5cc6a5760e0038b4", 0xb0, 0x40840, &(0x7f0000000200)={0x11, 0x10, r0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fcntl$dupfd(r3, 0x406, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000140)='@\x81M\xbd\xbc*\xfd\xdc\xc2\xfb\r#\x00\xab[\xcc5\v\xc5\x8e\xad\xb4\rP\xfa\xc1\xe6\xfd\xbf-1\xbaq\xb5\xdc\x05\xf7Gz\x97\xbcW\xbeE\x80\x1d\xf13\xfa\xec\x85\xe1?A:J\xed\x1bB\xfd\xd8\x16\xf6\xc5/\xd7}\x10w\x9d\xb5\xbc2_\x89\x10>\x9d\x87\x1c\x8f9\x94\xe0Q;]x*\x1eR\xcc\xb1\f\x05\xa6BNT{\xcc\x18?B\xd4\x8f\xb4E \x87\xa7\xab\t/\xce3\xf26_\x84\xb70Z\x82\xd8m\r\xbb\f', 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x9) mq_notify(r2, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x2) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:40:24 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cpuset\x00') r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x191902, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="5e47b45e15f247920100000000005e00000000000200ec27e5163c8e99ccce59643576585cb9098915b5", @ANYRES32=r2, @ANYBLOB="000000310000000000000000000000003868e9398b042c7305ff0cfa1e36580c80fa55b58122da760316"]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r6, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000180)) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f00000001c0)) mq_notify(r4, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$dupfd(r4, 0x0, r8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r9, 0x5, 0x80000001}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000940)={r9, "f662493c084bd54f43e1b9d5332901e6"}) 23:40:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106614, 0x0) 23:40:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1000000}) 23:40:24 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000280), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f0000000500)=""/96, 0x60}], 0x4, &(0x7f0000000700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/65, 0x41}, {&(0x7f0000000a40)=""/158, 0x9e}], 0x6}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/151, 0x97}], 0x1, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/22, 0x16}, {&(0x7f0000000e80)=""/243, 0xf3}], 0x2}}], 0x5, 0x20, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$sock(r5, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@ll={0x11, 0x4, r7, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001100)={r7, 0x1, 0x6}, 0x10) mq_notify(r3, 0x0) finit_module(r3, &(0x7f0000000040)='\x00', 0x0) 23:40:24 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 995.297170] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 122 (only 16 groups) 23:40:24 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x252402, 0x4) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="3c005f3869bb2e06a307070d6a030081562f9b91d12def01ba68565b10b003ae655a47e4bc537cbe7d1acf2800016cba3186f13307000000f9"]) 23:40:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x401c5820, 0x0) 23:40:24 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/250, 0xfa}], 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:40:24 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2010000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 995.462003] 9pnet: Insufficient options for proto=fd 23:40:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020940d, 0x0) 23:40:37 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:37 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x8cffffff00000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:37 executing program 3: r0 = semget(0x0, 0x1, 0x20) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/92) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:40:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) r2 = signalfd(r1, &(0x7f0000000000)={[0x1]}, 0x8) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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") 23:40:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:40:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2000000}) 23:40:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x300}) [ 1008.180843] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 33554432 (only 16 groups) 23:40:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) [ 1008.216536] 9pnet: Insufficient options for proto=fd [ 1008.230450] 9pnet: Insufficient options for proto=fd 23:40:37 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x111400) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:40:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) fcntl$dupfd(r1, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) write$binfmt_elf64(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3f, 0x8, 0x2, 0xffffffff, 0x2, 0x3, 0x2, 0x142, 0x40, 0x3c0, 0x7, 0x73bd, 0x38, 0x1, 0xffff, 0x8, 0xb5}, [{0x3, 0x0, 0x1, 0x10001, 0x7ff, 0x5, 0x7, 0x7115ca00}, {0x1, 0x64, 0x401, 0x3, 0x2548, 0x9, 0x2, 0x57545ffa}], "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", ['\x00', '\x00', '\x00']}, 0x13b0) 23:40:37 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xf6ffffff00000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305828, 0x0) 23:40:37 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3000000}) 23:40:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2021}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="d2baed265a73ef67a89a7df4620af1a70f79b890d23addc5f6944005425a86158ad96ddb4aebe25e975878d2539339ddf6b321287db467e88ec1d886c2c767f2dca36643331ad50a63fccc8d885f2823177a39d43557659e0344641f83994489142bca152458c40396c30e5365276f34e75a57ea", 0x74}, {&(0x7f0000000140)="22c0ef1403130d488e1de10b49067e6d172380d21780564421837bd23fce0d86fabb8c03a599a03c6d50d5e21a2ec3e8561318691ee86fc933b94c62e3650fa8e945818e48458cda9644c5070f7fa3ea5d02070aeace2aebeded3f2238336af52b6f2edc26f6b9418481ea83483cace53a0b53789ada1a21a67911a29ad1d87c1efd5afeb0468e7b6156ddee6d109bdd5623efbb618a7ffc58cb194e9347368065657c661db57a8fb2bfe307f878068b9039c88028a550109183ab040c8a282f955719cf6e95cef1e232cdbe", 0xcc}], 0x2, &(0x7f0000000280)=[@dstopts={{0xa8, 0x29, 0x37, {0x62, 0x11, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x3f, 0x6, [0xbd85]}}, @generic={0xe1, 0x44, "c3f3cb0ceb695bd3b294ee8a27e5d166349abc4954fc23c6788070edb7917110c80637ac63b316a1b1af530f1c61500229d9585afcfc6e385adac01fe7d9171742ae4e1a"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x7, [0x1, 0x929d]}}, @ra={0x5, 0x2, 0x3f}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr={{0x88, 0x29, 0x39, {0x29, 0xe, 0x0, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x2e, 0x9, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x40, [0x2, 0x4e1e24f4, 0x800, 0x1f]}}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x0, [0x2, 0xeac3]}}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x1f8}, 0x805) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 23:40:37 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:40:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r3, @ANYRESOCT, @ANYBLOB="8787ced5000000000000000000", @ANYRES16=r4]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@loose}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r4}}]}}) [ 1008.456952] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 50331648 (only 16 groups) 23:40:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x37f}) [ 1008.497959] 9pnet: Insufficient options for proto=fd 23:40:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305829, 0x0) [ 1008.549021] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 895 (only 16 groups) 23:40:37 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x51100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1008.627497] 9pnet: Insufficient options for proto=fd [ 1022.908574] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 67108864 (only 16 groups) 23:40:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x500}) 23:40:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582a, 0x0) 23:40:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080000}, 0x4008814) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}}) 23:40:51 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0xffff000000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:40:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) 23:40:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4000000}) 23:40:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x6, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"06d5d856ffe919a75b639836e56eeccc", r3, 0x0, {0x3aa0, 0x7fff}, {0x8, 0x7}, 0xfff, [0x800, 0x101, 0x1, 0x2, 0xffffffff, 0x0, 0x2, 0x800, 0xffff, 0x7, 0x81, 0x80000001, 0x8000, 0x80000000, 0x80000000, 0x2]}) 23:40:51 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_io_uring_setup(0x5110, &(0x7f0000000000)={0x0, 0x9cae, 0x4, 0x2, 0xf3}, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) write$binfmt_elf64(r2, &(0x7f00000011c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x4, 0x6, 0x6, 0x5d, 0x3, 0x5, 0x9, 0x18b, 0x40, 0x330, 0x10001, 0x20, 0x38, 0x1, 0xcaf, 0x34, 0x3}, [{0x1, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x0, 0x4}], "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"}, 0x1078) [ 1022.958930] 9pnet: Insufficient options for proto=fd 23:40:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) fcntl$getflags(r2, 0x40a) dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:40:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:40:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582b, 0x0) 23:40:51 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1022.995629] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1280 (only 16 groups) 23:40:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5000000}) 23:40:51 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1023.065697] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 83886080 (only 16 groups) [ 1023.071977] 9pnet: Insufficient options for proto=fd [ 1023.109090] 9pnet: Insufficient options for proto=fd [ 1023.172923] 9pnet: Insufficient options for proto=fd [ 1023.178109] 9pnet: Insufficient options for proto=fd 23:41:05 executing program 7: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) sendmmsg$inet6(r0, &(0x7f00000047c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000000c0)="8d78bd035087a9", 0x7}, {&(0x7f0000000140)="faf9a07a8794d2f754695aa799849c24b0d0a10b66188573819788b42657525e9bad4d03210d326c2b0e2e66a7eefe19786c3264e6c995eefa055b1c4f7ef5a24d031a6f6910c83eac85c92a676ba27aa8425d46b6a779fde7438f8820d122d2ef94101a68ee63f99ce32705be086cdd15dc1c60730b3aab0403c7", 0x7b}, {&(0x7f00000001c0)="eec09f6a366159ca77daf560ec0cfa72ada6217833f7f754fcb2cd7463a550361baea05a411488fa0a331d86ef23a6b9769821d1c39ecc2cec5e2059a38bdf5a7bf7b56dd1bbf4f707c6b2b01026646f1a35d5772709b2f3888f9cb7796cd57a7a3fb5a3", 0x64}], 0x4}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000440)="46d73196a3f14c89d511", 0xa}, {&(0x7f0000000480)="21fc5b29d73a66e4eda5f8f1890a4a58b63cd5943ee5dadb79feccbc42850155673a205b165e693654bb3114fc0ecd93cba673314cbf288f8ae6572cc9508412a92e22f426c7a676190370cf061b9c7e276dfe965aeae3422dfc48ee3be788421dcc40e96e7ecce775240b8f92e24d00b00af1e9cff7459452818ea5d78c462f3c2d9881f48560732f2fe270ed495263f8d22ca6034237352b5371088f6159d1a9bde8e2b4e563b0fcaf2fedca6c28", 0xaf}, {&(0x7f0000000540)="75cd09f18cb2c611d1865277ddafa2b1a0693d9240dcee2a6f122c52828a9a541b9ad1e2b6d3419e27b3d3699e823763c98d8dc4a0c38405a892813fd9908bf1c4e86d3dc594375d7d683c2fd26886d040dc0a76fdc28f506de3799de2762b19b2c9fa922e5decb358a901af6fba73ec124cbb4897ce63099a8435ae5a7ccfa6efc43391aaccf441b3c902e301fa662a96a22e27e751e1d8d188fab2aac14a5bc587ee0eb88348885d2a079a9d34ca4294cc8bd447a0b6f1a45b02a8c5446ec7c0c45910239b7459bafe3dcf8b2f47f96676bace809a8f9757dcc057c6ea5392b4cb9d6410eb27fbe57563b12a4567968c9c01b19d3d2a", 0xf7}], 0x4}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000001b80)=[{&(0x7f00000006c0)="12a1155ebbf72593b5f1d0b874c0e3e62d81c459bc9d151154b2693d3dee68f744cb98c4645ea53870e1c1d7ba683a9747520b2d408c99104fff16c3ea9b0d319fdecada88f087e366a5f212f073a9db2b7c2e9fb560879f4976f25bb43325035cf28f3e9ab54c12382c628847def62bd0eba98127340e8f1d9da05ed21801cdbed42dd68fbff5b0f3391971706ed3c5ca", 0x91}, {&(0x7f0000000780)="aee38b1661ccbea5849cc154f2a529407ae63552f353719fd7d3b166b0c19e83aee6e104fd2d7e8f23d723c3477757a56db60c0a6357d5bb2bb236e35d0a81e7c3202d456a70197686db9243db2aee98cbec90003052b3662de686e4f3ca3a729f6f997f9000cea0abf9da", 0x6b}, {&(0x7f0000000800)="3a47844c4061737cdda757496137266423a30392846cc3f11f69396845445a5cb0a6caa9e768744d8595e34030a02d6f1f09ccf3bffe0a1a9faab96f4d9e4743013b1b0bf9c27180f6", 0x49}, {&(0x7f0000001940)="8d99e466f09c60da6764930957927b2d06eab819a69db1e1b2092ae3cb0df68615dbd79e90b7f26e1feb946f8f2c15d4a397ef54f15113a974e820a88f65473f55c762f532ab3ecbefc8187909594d7be5d1885a290b4e27806e8c8ce5706f7f2eefb2de5981e97c96a40c664083ec931c493413ca3908e4953b80cdd46e535769cd903cb90b6f6f9a0d05c9816b5d5ad91e353fe3526fbdd3d706b5cbdefd75e94bc723b24bc2d2872d35fb954732b8bbce84a9bcdecea1185ec3ffc88e65050afdb1dfa3f445c11ccc90bb76431e1118e1d1b5fb7b80c4ea4b571783d334d7cd562f8158961c2e5b12addbe31131e5f1cddd57", 0xf4}, {&(0x7f0000001a40)="c341a2006adc290502f322b48337bb982f7ec49527ee70f683859f3bfac4ab94866e1d5663c1cb525f14336b7c73623bc7f207bc932108fb5f7d5aa76f62f51598a790cd56474a944f6ceae9fa8231deadbac3e7366c79015471f5a52dd0bb9bc6af556d0b8cfacdf657104db6f9de6cd5c6cae47fe89aa494828be1411df437368eced16fee8862e3beed34dd94f26d1674b2d9212ca686542527a2bd1249cb64208e471e3af2da311fa4f7d3aa9136fbd335a4c55b507abfcadc", 0xbb}, {&(0x7f0000001b00)="2d32f8257a81a69b6c1be31f6b8f222d6ac5afa6168b428eec6589c85175088410ab51cc7f236677a1f655f575ec529cbf9cad0955bc708d0aafc61aa8801e192483ad2e8b64614111f8b8c9e49717c9bfc35443d2a3ce0b8723df195e6ceecabb08d991", 0x64}], 0x6}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2b4fde1a}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="22306655412805482b00aaca", 0xc}, {&(0x7f0000001c40)="e9d596b1aa6c0000b9e2eeb32dea359d3dd76f2b44ddc3fd6d8fee565b95c93095032b425ec59d0828d3e10f2af354", 0x2f}, {&(0x7f0000001c80)="dff0adb08cdf20ba70592972f810625722223e619b035c067aad41252fa8", 0x1e}, {&(0x7f0000001cc0)="945b688773e6dc1c871dd4695114ba2c39085178886dc002a8fe20def9b9b76960c18a35cacfa9af7cbb4a724da9c89d32e0c22a88ff382d547f5a5b354f5aeb26e460b0e143ce57588d2e13f480465fd248a4d2d4fbd0732ab5d0a50c7c6f85100a874e8b7f9812e2cc336adcf60adb6487f9a873cab4874d8e53f69861dcb307d16b5d718c2edcca3d0fe20f7d24a521aeb7b6ed57d13a8b6100da1e8c28644a49924900d201eed3f0e9b2406b6834de4139535aea3af9dd01eb1b34f32a78961c86960603ac04a23765a6cecdbc9c0553324dba80f22f2a5020405db6042081a62090f0673d064c8c9d568f72b1269b84cfb8873f9e1418c98c680ea8", 0xfe}], 0x4, &(0x7f0000001e00)=[@hopopts={{0x48, 0x29, 0x36, {0x2e, 0x5, '\x00', [@ra={0x5, 0x2, 0xfffb}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x20}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x7}]}}}], 0x48}}, {{&(0x7f0000001e80)={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001ec0)="6bbd256232134cc94bc30cc4481006373669f6f916a077de58a0d4a6f08396ac061b746afe6061db0850a429d565d8c94a4a7403d230609cd51c845d0a2266c457e91f1670bcbebb4807f23f495f57c2fb557f51d3c21f8e614aa3c8872558ac434d4726defdbf76cb967d20bad79cf8c7edaa6ff10a0d35ee9af4983f834a4c13b31e91f5cbabdf8936fc1b", 0x8c}, {&(0x7f0000001f80)="b9e51c0a70910121aea75eafdd78", 0xe}, {&(0x7f0000001fc0)="123b9e3389ee", 0x6}, {&(0x7f0000002000)="a9362ff7721bc4880bac9768afdb62b2a3187cddacd401b33f49dfdf42bb51e43fbb915b7a866513427c1e4ede6294e5c682e8c28ec44f17b6af2d577e1e250843066f5fe19d74195fd4fb43b4a4be69ae702fff6c8a4494cfac5d03b6e9a100a65ad6d03dd2a792e56b678861bce8aa4a58682dcf83ed", 0x77}, {&(0x7f0000002080)="14ce7ff18c9985d9dcf7690b046c08c3738bdd591a9372b166b30b2fa873f9c62f4d447e0964724e652035aa65fc843d9e70ccf10d16342ed69ff9419b9152ae0d80e6b6a0d4c01cec6d5afa547cb677fcf6830a3ce650a687a809621c90d9cf76a35ce6043fcafe7b92e8f714009a01ade4ec640cbb3c3dce87c2999ae7c2e7487f74119ed34d7f5d952f10d0d84dc6ff34640c74a6dcf380c14073edc577df9d801bf047cbe6815ab53007bf3bac1d4acafa77ae7b5cd6d817f1808a1217e4b483f4ad2f5181cbd51b1049454146e0ff4d97dcd52929c4ad8ff0d104b120ac609999431770904af4feb7f3cae3a9e7", 0xf0}, {&(0x7f0000002180)="c592abe895d35c7c6e26708349132bdf6f123e4f2f232f0e574b46e514a5015d840951aa201e7143af8ac93d58236c8a27299a14c19111d8e58efaa78a84088cee0340fbe1f0346bc1152321e66fb2bd953dd123f876e6a5317804884cc4adf8c50f40a8660d6f04060070f1", 0x6c}, {&(0x7f0000002200)="585f138c8a7a7ced81d3ad6705dda1a703f8bb20c427099df8ac4efd20b17269a3a7ad14ae7b862ede8595f06714ba0a9f0273e976160783eddc531d2074a4fdf4dad80a24fdae575e383bda70e7d0a78d50dee1bf7ec0ddff7c1b73", 0x5c}, {&(0x7f0000002280)="1675da00e578783b0025ab66a71d8876b6a4a3", 0x13}], 0x8}}, {{&(0x7f0000002340)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002380)="5a105eb7151074fcf5ba880c27a1d3b9a60a2c88c6b8a5bdaad16779f14de2e18168eda297f28d7454d9c038f2b2f45e6f02f5126b2320828d4c581980ff0eb8c8ea9d389cd7104991d70b44c0fd9b1d795da6058e3bf22eefa99bd2b22d071354fb8f886fd16fa54087298b25456a9344caf59c1a449e855f941a855e777b0873093464ac52b673f2853ef02e871d2946a62e352ae6250d5d2e6e29483e475ea9d33bbf223e5bb1bde143851a806f7a17e79e74", 0xb4}, {&(0x7f0000002440)="3fd633056283617d42590a951c6a280730c028b1aca6b8b97bc915aae68a2d8e9190a8e03a11a8d4147db5740722ff7b82963d2346fffe9ac092288e6507eac74376a20d5df4740865efa847dfaecdfbaabd2f72e01afc93997ad1effb373000bbc7dc3be3c158a993f453277753c130543806a73f91e3ce6df4984da1268c9fbdc5d5a5965302fb3aa0b5e2f55f0300f5acb61105a970d1126ae896fed1361b27b92122004377f1660022441ceffa0184dad73f6e2e2e9c2d83d744a2b44f4081", 0xc1}, {&(0x7f0000002540)="4dba349db6d92ade9b9e77c9a8d609b538f6a22605d1b06157d1367adf0d0746cf02066dab24ee31b33eb7d4294e59105e5db3005c81cbbaab71dfd49883e0dab96bc0b2e77f9f3363218d66d0807f9a13d287687db24a2b0b79c3871abd4ba22d9a278c66e2cff24b8e8e254ab154d0ead7095523129d67e771c6a7289744b8aa74de842fb0f93d4870a7ec3b2cedb815e0e2505c820f1cecdca3a8d3b5e22c21387934cf74eab8c0a2c480df9d875bfbc0c1d5c406", 0xb6}, {&(0x7f0000002600)="8dc99b303ab17fe340b78e34141121c358ca2ff44ac635e98ee81957ba80304ce4951953740d0fcd2555242b23c8a0ab0e463310e1422e49a11630", 0x3b}, {&(0x7f0000002640)="ab0bd495b7ab55415031bc10101d96717adb9442c3945aa5c8a9ffaf920cb8cf3c49bfbefa57f52e23353804", 0x2c}, {&(0x7f0000002680)="6fe9fe2ee17f0cb7184b06cc9e23e709cbf4c0ee30e5c3d2e92bc28c64c655581053297ce0851420ac6c00ffd653f7b2743c4da8c012c5659b04f98a4d8fdc87e7afd75d2f3679a0fb3cd0b5b751d20d11041d31b49b8278207d18291f67fef74d5c8925cd776509dac9d32be4589b164e6ed2e931e7c36e32503b775e25aa67182c8714e3d369fc678ed2daf1f5fee41ed142ed315611887ec16ca395d5527a7b56b33b084b316e5df77ee1da77205da37629ad200ea6965723295e974d0900025fdf1adf40d783e7ee2ac9b9ee9ffc12c4d7db0f02fbed1d25f0a14ba925eb98a3fecc05e9f0b2fd81e2148a7e04", 0xef}], 0x6, &(0x7f0000002800)=[@hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x88, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x3, 0x9, "392ed9188e7ebd0423"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe0}, @generic={0x0, 0x2d, "9cb30878bc626aa4d7f926349c8d2d219110dac57268e9ce1ad3fa9cb153618de93e810ed80f4481e6ca3ed723"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x20, {0x2, 0x6, 0x84, 0x3, [0xe027c5f, 0x4, 0x0]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x399c}}, @rthdr={{0x38, 0x29, 0x39, {0xc, 0x4, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x16, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x130}}, {{&(0x7f0000002940)={0xa, 0x4e20, 0x8, @private1, 0x1cb2}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000002980)="b00826a3fe886289b5d2679c5ceea0824818e6b1770fb0747cd331c7683523a231e0c199a2be9216d7a76b6b97284a4f9fe9ca04c552a4b3f2e7a832661327b41dd35921c9353a8e78327c01675aeb7b5c23baa5af557450b559bc7a729b0b01ec44146a014528bba777484b3c51bd0f6c80f9d6c7a945fd5ddbcf98c0c95e17f14f0cfff7a142d176e76d638ee4c65dcdec97dcfa0a6b40b6ffb373bacab0d4074b0b3f927fd4fa1ddb75afee0e86a7b2e3920ce7d47f4c77", 0xb9}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)="024702d07053bc63bfa56a81d582159e8cf1704ae04b3866e9d2f49b136d96f327e37192b8ddf7b0354b6a8895f1473abd3ff93350b5022077886cd518b75dc96de48be46231595be846a5021f562caf5d4882e21899fc6c805bf8bf98f26e761e43b4bc7c87c9", 0x67}, {&(0x7f0000002b00)="2f0f3a1399a48199b0c29c11c31b358c00558b793ebfa273c9486252cf52a612d10188733e960ea2479d121069324d524f0e8c03624708a14cc5064fd4410df4b425c164634e0883ce589ee806fc0bcf47df7c4ac6bbbd4b882cf4bffa6be0c1fa288f4c67d7644cbef41617bd79c93f321cb76cc7139f765b6b55e11e14ba289bbaa3297965c32c603c33d2ddac70ae2553321158b35da1d9182f9915f6105d515eccb85be481d6419e82c3b4494cfd267859e4c69785562f476e42c1faa5ad15c8a2f057727ca6be3d", 0xca}, {&(0x7f0000002c00)="c0622f1ad382fbec8e1d50758d101d8d3d6b2918cb251b1fa0d2b3074ec33f094eed0becf09e1ee7e14ff2717d487171ca43eabac9d313f9d3cf88dd2ab5356fb86b8e92a9f16bf610ca89060d29a639deb62174d0efe6b4d20e0f77d5f75622e970954d53c43b69f74617c9eb9b9b72f3e71fbaeb6b7ba4e5902188fe3c16ff48bde1257c8ef788057fe94568fa5c7b1cd3b23ab277a595165ba7168df24664ad5dc86a2c8ea2741cf438a5e0be4b514cf2fbbc338411584370c331011aaa566eca13e5152d3f", 0xc7}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="7c460ef3fedd984e5fcd73797493ae126c42a4d6e822185e2a9fd8a808c99ec44863d431f565f079f2cc5f026a7dff1fdc60120b8c12ba78660e6fb49fde65300b1ca234c7b70dbdb35ca981d91a5fb669e70c2a65dd623bbabd2a26f64d8eb1afea9b540f597c2bebf4a4f8f5fb6f9adfcbab16a43c8f00e5db4da4077a68e89f360967463b7cd028ffa7282e8d5a0f9308191c175ec40098870fcd3ff389a34d39cf2043ec94bb45b1c69f71d39419a9b6ae2d", 0xb4}, {&(0x7f0000003dc0)="e754c31bfcc9bd2b41b852b7795bcdd6e639f077468b71d0b074b1d27f8c9890857a92fb9889870cb4e76e6b96b3ced73af7d22de60779c5bb04fe8783e8ab3de4c22245721f547f7b61ed2738dc5fb1aad9ca1f52a8b7edb6891aa277218721fe2dfb685188beb5c1ee106991ed16dee651adf23a804ab8cb0708ca0dfe0cceba357324d7c2049f6844a0b2694e1f48c3b8474e312f3898", 0x98}, {&(0x7f0000003e80)="bf221e7e44332b5f033b4157a0dd410a4be687c815e5831c39b5d9a41fa55f5349781717bb9951f6cf7c250129db589707f4b8fd9f206b27a161", 0x3a}], 0x9, &(0x7f0000003f80)=[@rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x8, 0x0, [@private0, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x50}}, {{&(0x7f0000004000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xb5}, 0x4}, 0x1c, &(0x7f0000004340)=[{&(0x7f0000004040)="0c9d807e3589e9fea48d58b97ec1d1e9e6a0475edf64f981cf6bfb4e8aa10051ba17b2c145325a34492f55677af66f3c630c354fb6d7d6912a53679e2340bebd699bf7b8f288ef8f6219518b32e4da05470b1a3b228627a9f6db254a40090b25687012065eced9bf53d2ad96842b4cf789922ff39917d438a0cd34efb168e7548a341d4dcd49c6149429e20e3eec1527c12dbd00b7cda4009ed878cfef6a0d1fe6e133099f2740855bc4427f776868", 0xaf}, {&(0x7f0000004100)="3fdd0790ae66b0f93af92520063c6aa293067376062fdadc413ff1cdb74bd3fdf5c1a44127420bdd05c6663a4f41aeaea630eb24c0995da4a9d6be0e05300c016c601b396e8585ee0025e32ddd30d05bc072a3df59953ea72ca8f63aefbbb873e3bcfb06b2e9a5cdbbe6138d55da0302b7a522dffd80909caaeed72def3921db5a9e5601", 0x84}, {&(0x7f00000041c0)="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", 0xfb}, {&(0x7f00000042c0)="7b3419cc07441d9f9c96287a6821e7e26c17", 0x12}, {&(0x7f0000004300)="2761b8e44221a58e27a18f2dbedbb56e744f1305adf5612b4e78d8666d606223842ccb3e2b1f247617c529cf25a0ddef4f5746ab", 0x34}], 0x5}}, {{&(0x7f00000043c0)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000004780)=[{&(0x7f0000004400)="3470747a0305ed0785aa8572037ed5fbbd3be47571cb495ff07b8e3aa24090d6c18d9b7d2c18c146ccc0242ccab8833af90302341d6380fb66efbf776da781e2efdb0c20bffc154cc477601a4a66edf84220c7f6d341aad80b5fbf160ec77363623abf9ed596865603a21491f6b65d6da1ddb8622014ca1b3b5e8ffb382355fbf018cccb873519f3265d78de24970b7040b6dd84afa9572473ec1a173b7b1baede87c08676c46c976f1fddef8b15494dab9d028895a2906c675a184b40620592893f0293496e8036cdd4ea83aca9640acc7991b15d3201617e33284675b1d907ce41e2c546561446ba6c", 0xea}, {&(0x7f0000004500)="1d3f916786ece2166a8a44c9f97b6b9ee9bef16726076843d0dda1bc2c660a7c74c23d5e1766380addc8cd0e2d4f47cde6d661d384d2964219cc03047fe03c9197310b67c0b17c5cc6de6d33079a4c880ae9cfb9067fdd649b3d777a79dc49e69a71565eb1eb891f381ea680ab49fa163fdd1dc27c6f0c17893c4941fbc1f69abe2091ecd90809865c0e74ce98e8a1c83826ce3fe260040ee2daeca5c31ace94c588fceac40a7f1abe6467713269f2b7f618fe7a36", 0xb5}, {&(0x7f00000045c0)="8616de6bba0b777e7ff7743b73bc2fcc476b4a69829e2be5ef83a2c730b686a44a2cf5c2696d1a9b00e87aca4d53c0a60db9016d6d08b3d7d2151df38e84f9e13f9a1076d0086912e3e0b22124cc827144688f7ad438d7d3d2bcdb278f005504fd4cf65cee57b09200a2a23388cb9690e55f0b5f97e2d57fcb88c7eb5478928782b62e3a6f9072cbfab1", 0x8a}, {&(0x7f0000004680)="a849ae07429c28a45dcf8ce8dedc9cab811b8f9494ee4876a9ef6a54867e276e61b18f6cab42c15f2cec131384a5c6d22cef8f0c3fa350051d4d78ec3a9b58a7f2e0d860e82cc5cf3663372b94e11f8757352148a2db35f3c5b25a4c7320d242167e688ede41dc653a877515a877d7f7e5c97b300a28dfd14cb358a4ef5b1e422ca793345e223e2ad0193ff1e259affb1192c5539e6eec7e1394e2435c257f8092d69a6e6567545164a63ef0fcd9929718daf5bf00df5ee64c2d4be34255d4d11233a339640dfc91e843e42d91bf39e2aa4346dedbd8af58c4c3ed1c206779291895f7956ab451743a981297922be2351c1504", 0xf3}], 0x4}}], 0x9, 0x44) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}}) 23:41:05 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x9, 0xe1f, 0x200, 0x3ff, 0xaf78}) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:41:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6000000}) 23:41:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x600}) 23:41:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305839, 0x0) 23:41:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffb, 0x50, 0x3f, @buffer={0x0, 0xc3, &(0x7f0000000240)=""/195}, &(0x7f0000000340)="ca4874e2fd7fcc8744af10dea60e94f29b7fe5d87e8598ca68e6b8c85c7d92179c3ea1e63a8dd1743bfbd42d7fd9e886bf65fbb6b0ec7ab665204bb422f26827f3528a2a2b9a80827351dbcb2665daf2", &(0x7f0000000040)=""/47, 0xfffeffff, 0x20, 0xffffffffffffffff, &(0x7f00000003c0)}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mq_notify(r2, 0x0) r4 = fcntl$dupfd(r0, 0x406, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x0) 23:41:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:05 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1036.937968] 9pnet: Insufficient options for proto=fd [ 1036.940595] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1536 (only 16 groups) 23:41:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40806685, 0x0) [ 1036.963976] 9pnet: Insufficient options for proto=fd [ 1036.970668] 9pnet: Insufficient options for proto=fd [ 1036.975224] 9pnet: Insufficient options for proto=fd 23:41:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:05 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x810, r1, 0x8000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) 23:41:05 executing program 1: ptrace$getenv(0x4201, 0xffffffffffffffff, 0x3, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = gettid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)=0x1) 23:41:05 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 23:41:06 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000806500eaffffffffffffff00"]) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000300)={0x7, {{0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9095}}, {{0xa, 0x4e20, 0x401, @mcast2, 0xfffffffc}}}, 0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none}, {@privport}, {@uname={'uname', 0x3d, ')R'}}, {@aname={'aname', 0x3d, '9\x01\xd5\x7f\xbd:\x17\xf9~e\xf7\xf3\xdf\x1e\x0e\xac\n|S<\xdfv\xb6\xda\xc9\x05\xb9\x8a\x1f/\x88+\xfaB\x1f\xf2\x97wb\x8d&/M]\x99:~\x12\x1e\xf0H\x11\xaa\xff\x95\xf7\xf2L]\xb4\x1e\xebz\xf71\x1f\x9e\x9b \xab\x10z\xd2\xe1a[\x11\x9c\xdd\x0f\xbb\xd6\xd0Oh\x88FH\x0f4\xc8\x1e\x181\xca|\xd4\x11.P/\xa6B\xb0\xe4R\xe8\xf3Oo\xe0\xc9\xbem\xca\x05Q^\xe9\xf7T\xf7\x87\xe6?\x90S;\xab\xa0\x02\xd2\xea\xbe\xc1\x9f+9n\x83\xb0A\xf5\xa8\xb3,;s\xdd\x16>\x8f\xd0\x81\xc0$|n\xa7x\xa0\xb6P_\xfd3\x16\xb3,\xf6\xedFCy\x973SSor\xb3\xf5\x83t\xc3\x9b\xfd\xc4\xadOIP\"\xcc\x05\b\xb9\xf2\x1d('}}]}}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) pidfd_getfd(r4, r2, 0x0) 23:41:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, 0x0) 23:41:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x700}) 23:41:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7000000}) [ 1037.145957] 9pnet: Insufficient options for proto=fd [ 1037.200096] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1792 (only 16 groups) 23:41:06 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1037.253697] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 117440512 (only 16 groups) 23:41:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa00}) 23:41:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa000000}) 23:41:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086601, 0x0) 23:41:20 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2b80000, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d6f3ddb3c0bbe5f3488c9f4392afd6510a96018a1e4208db34f9fe564d658b82f21af7d4978df225090dbc0eb1a6a8789adab5d389f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscontext=sysadm_u,\x00']) 23:41:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:41:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 23:41:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x10001) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x5, 0x0, 0x96, 0x1, 0x0, {0x0, r8}}, 0x7f) [ 1051.235371] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 167772160 (only 16 groups) 23:41:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086603, 0x0) 23:41:20 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x151042, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdng=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='Xk']) [ 1051.270217] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2560 (only 16 groups) [ 1051.300809] 9pnet: Insufficient options for proto=fd [ 1051.326126] 9pnet: Insufficient options for proto=fd 23:41:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1078c0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x2, 0x0) [ 1051.370388] 9pnet: Insufficient options for proto=fd pwritev(r4, &(0x7f0000001780)=[{&(0x7f0000000300)="56e21a94316a97bc4c87c8e6e2f787403cc64e3bf3f000183b4461dd2271ee37a639526543dde7b4f83a2a72fbedcbd13ebd0c4582e3e37da105c32eacca0575adfb2192b9637f030c4f537a4fe6d2f989f4efc06f44d1f4af52f06651ae733f8bf1d3f581f0d88d3e9625e383e06f798488a030a5378e40cff67416fd619c1319a659df0e", 0x85}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000003c0)="3f8070b37fae29e338642bccb19003791e16504f4b06ccce72e4c7c4efecf0b4d5106f5ea56935576de9027e2690858affceaf45e05c20b1233e93c7abfe7b183f4e6b7d6bc01c9c51af932acc40b082a231716c25fdb2bf6cc16f895f79865619aa121f5aa35a791d03d23a38514ae62fb6aa14f78a257cb1bcb863fd95d6087420d4d7c6431c7980b7efebfa39a15c97a50e967d6fd72bef74b5aedecfd92cfead6a0fa31ce82c8510ad6872ae677c65e8c7e28863e50e3ca8814a3006530c8151890b08a756d8cf022a9568bd4dd1db82b924d888caecf395a37647c9d5c6185a3b160766e1bafe974255d5", 0xed}, {&(0x7f00000004c0)="129b13e2a90c5f07584850e6e4475244a67341ed7fbccea7483bcef9176b84de86e1980e38abdf17ef3d91f093589c5022ab99b3a05ed9785d0e84145d47d0a8fa16ae3f78cb3df5b80a722d2adf2bc474470a30d99763b9f7638ac93bb7dc0f1b", 0x61}, {&(0x7f0000003d00)="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", 0x1000}, {&(0x7f00000015c0)="e549b04997118ea947b5b86ca2d3938d8ae8a8e38bc43a0f1b9fd7805ae27f7a8250a6362ebbbd6fcffe2829634b468cde3f0df0db480fee205fb1343ee3ee47ce380ce6bea3d2bf6ede93023e08074100b3619845a18177176fdc223ddee89986385072c7fa54b858c8abdd022d2e83817a70df8f95225343b341b6428f539d0382076a6a1fbae5ce66ad7ca5cd5b77ec7c88ae66374a85791d20cbd48d8b17badb5ec6b25230766f6dc35fa87f0649beabca18233a", 0xb6}, {&(0x7f0000001680)="6fbb71dcc3a9ec685c15d1849f32ee388625e0408f532bba4e86397a1a6b4682d33a0830abe5fe5de37ec29776a11ae3ec480036cabb3be7ac6c1de5a0f8135826ec01be2f3b2cdb383f52339c58e341a361f7081589b71d4859d83f0de7fbff7759d2e9cc85c01b49066d11de26cd8a69d0af3fb5156f32ab2a1988fd12e4f14f66d088f635547f4f02e8cdb6ac65ddae02376af8c9c9ee42ce4838ef1312fb06c852da4c6835d56dcb0d003bfc4872d2550bcb984da0ef82085bfdba3fc98cd1a3ecd004a8f7039241da5ba68a3918", 0xd0}, {&(0x7f0000004d00)="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", 0x1000}, {&(0x7f0000005d00)="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", 0x1000}], 0x9, 0xfffffffb, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"]) write$binfmt_elf64(r3, &(0x7f0000002140)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x4, 0x2, 0x40, 0x40, 0x3, 0x3e, 0x5, 0x300, 0x40, 0x2c5, 0x2, 0x4, 0x38, 0x2, 0x9, 0x7, 0x9}, [{0x5, 0x401, 0x7fff, 0x9, 0x7fffffff, 0x8000, 0x5, 0xfffffffffffffbff}, {0x60000000, 0x5, 0x3, 0x8000000, 0xfffffffffffffff7, 0xe3a, 0x5, 0x4}], "313ff4f9ad7f0246ad2cf7ad6ad548bf0b35e04bbeab7d8ca4c59f13b0a3ee91fa2d128afd7b8edd792a3d20e0c179751f15e936e56604468db948ae553e3f498bb6cc0b4a5b7041bea5eec5e5b922df96b3620a04c9c0b0dc9b661bec48c01216b3f406fbc68f3be6af574a91f045bf3ee7b8b3d53e7853e25383ec6c06d29ad018e5d2e91ad706627c1cab12b21af6ac7e97362375ab348aa2ceb9210b7bdc48dba71ab5c38a5481e5a8bb78d97f2d6be9ce0b9e59033dd7091af658775eaefb2bf3afea4c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb76) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000006d00)={0x2, 0x80, @status={[0x2, 0x80000001, 0x100000000, 0x8, 0x5, 0x100000000]}, [0xffffffff00000000, 0x5, 0x0, 0x7, 0x7, 0x7, 0x20, 0x9f, 0x5, 0x1, 0x684000000000000, 0x0, 0x9e84, 0x11c1, 0x8, 0x2, 0xd5b8, 0x8, 0x10, 0x200, 0x4, 0x80, 0x8001, 0x6, 0xcff0, 0x1, 0x7fff, 0xa16, 0x9, 0x28a, 0x3, 0x9, 0x200, 0x1, 0x3, 0x3, 0xffffffffffffffff, 0x9, 0x400, 0xff, 0x5, 0xed1, 0x4, 0x7, 0x81, 0x1, 0x80, 0xffff, 0x5c3, 0x9, 0x1, 0x0, 0x200, 0x200, 0xfffffffffffffffe, 0x1000, 0x13, 0xf96, 0xae9, 0x0, 0x0, 0x20, 0x1, 0x6]}) mq_notify(r6, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, 0x37, 0x300, 0x70bd27, 0x25dfdbfc, {0x13}, [@nested={0xd6, 0x4c, 0x0, 0x1, [@generic="5a6e8c56095fdd0789ccadb68aeca9cfd93f47285708f5b6fc8906aa0d606d", @generic="199a1296b114efc6c726fc242df72dd9ad789d3d0789c03c30777049d44136c7e1afd59af067d187f2ae462f3eae08d071781edce7daf58cdf82130dec5dd422315826b183354a863cc9f4ccfa0b8069abf04880390f6fee44dbdeade40f2d29d044aad8e01401f272b538806d42d0b9745d6b1ea6d33a7c7110cdbc661fe2d2564a151e67023a515db79d71897c68f12d373395a4d874fd9eb218f948d146a7e9720e93e78013e2a120f82858b100", @typed={0x4, 0x80}]}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0x6}, @typed={0x4, 0x31}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x10}]}, 0x104}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#'}, {0x20, '.'}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '([,*'}, {0x20, '],*\\(@(*,{&[.-([({\xfb'}, {0x20, '/dev/sg#\x00'}], 0xa, "d5278f0690db1da6e5a662f7a0afe807260431636aaf043fa909e96f8989857d61d4434973987cb839d539d349c348cda2"}, 0x77) 23:41:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) [ 1051.458844] 9pnet: Insufficient options for proto=fd [ 1051.470276] 9pnet: Insufficient options for proto=fd 23:41:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10000000}) 23:41:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:33 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 23:41:33 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:41:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80087601, 0x0) 23:41:33 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:41:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4800}) 23:41:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x10001) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r11, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x7) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) syz_io_uring_submit(r8, r4, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x17e, 0x180, 0x12345}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 1064.593460] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 268435456 (only 16 groups) [ 1064.634053] 9pnet: Insufficient options for proto=fd [ 1064.635437] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 18432 (only 16 groups) [ 1064.641062] 9pnet: Insufficient options for proto=fd 23:41:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800c6613, 0x0) 23:41:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1064.683139] 9pnet: Insufficient options for proto=fd 23:41:33 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c10"]) 23:41:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8010661b, 0x0) 23:41:33 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1064.810974] 9pnet: Insufficient options for proto=fd [ 1064.816216] 9pnet: Insufficient options for proto=fd 23:41:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002c40)='memory.pressure\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000002c80)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '\x11\\W&$,'}], 0xa, "cf66f57be9ba3318261707dd46e3ce006eee86a2dd99aa4bf05280e44f1061809586428d045d32efc82ce0f09fade680ee1977420c88555d3edc4803b55613b6d64fde4b07ca92d1940f09203d763abe7ccba59624d553d739f8a87ef8e626599a6f82f6df29fd6da1bf1f2132ad0cb8a176f173f6f36e71cd02733a992dee06ed60f4185729f3cc5d86c6b472c7e70fe21b92e1f282acb51647b5ee6a15eca676c7bc291fa4c919528ee92294524040afa4a76a18e97de8dcc8d65bc8f0f098e90e4bc90c5a5f1a8a02769efa7527cb954f5ef74daf201fc2fff6081d0f0e3607ec4b563ed93f32d3c4a9f2c26a48"}, 0x115) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)={0xf9, 0xfffff87c, 0xfffffffe, "58216dc97e0db3ba5cacfab1d0511bd536e6432d6bfa651425060675613ea9123eb7a4664c65c0c34354d36294a3685402d9879ee23cffae764a2859f8bc4d34624c9e007ace3a1b25bcea05eae5b43e82963230a10aa15c78cc408e0821a07f6ffb3b050ec755562bee605bedbfbdeefc1091ee5bea5be2209db26ed02fb15c6c38f2520ca833575e0168f7e494b80c94968d4f659f69b9c6142ef61e6ff45c9ba80f990ea6a536725f5e4e9a06fdc1a825583089411f87920cf820d7521da39776a0c04e791f2f4abefee2165d0b7289344f9e8d788cbf081d56cce5829b30db7a346ba6a3796a7563caf9bf2da47cef739265f2afec7464"}) mq_notify(r3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x8, 0x1}) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) fcntl$dupfd(r0, 0x0, r0) 23:41:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c00}) [ 1064.938984] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 19456 (only 16 groups) [ 1078.772988] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 771948544 (only 16 groups) 23:41:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6800}) 23:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x801c581f, 0x0) 23:41:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsmount(r1, 0x1, 0xf5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xfff}}, './file0\x00'}) 23:41:47 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) 23:41:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2e030000}) 23:41:47 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18a) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:41:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000040)={{r1}, 0x0, 0x18, @unused=[0x1, 0x6, 0x1, 0x3], @name="5aef9e331967b87a3d50f0fd3c6563434b9d68019b8f7a4d69c8ca039070d4ea26099665c6ad9d1176cb4cb36059f33e3aa40022fb91c7fb3b690e544d5e635349e1fb9cb5cd53c2eac2306e52ba702a2a2d80ddc4f748fbc1357ee654358a381156aef2ea03e7abbe5bc044d19cfbd238c672e300bacd53581f17486932fa51d0c7b63ee1cd85cc5946f05467e3ef55b19cbd3ca8b0e881885786fb939d492350187b9b56d226c658f165cf2d78911fd02b63b2a6621106f9098430dd055436e09b4a5bddc0c37074163d68a5ba31cfb84d342bcdff5291fc1c52d2d2490b88026d38adfd30aea6ec6eb4c3532b69e335b477829da02013eb528d096f57dd601cced125359c28109d9171cb412eb9c5ab4cb043280390865ddf46613f80371046bb47b78b1324ddff35f1a3cfda7083957fc1430c416c036a2ae15fe710559b7d3a6c7ac6ec182d0d3479a0d23314c914e52800d7d8768e2624a5c8822d7fee14ccdecf7ffbb3b436220bb2970d60bc31c216e9312c5ffcbee83a94fe4f929c1a965b44e8a7ae885ee0aeb9240044e71625dc182d8d3bfa85d639806389ef0b14f55d99ec07c9d7bb09c950cd54c07c5b57b0ca073bb53d908050fceb245ea3046c30c4fd85d6b8fad6346d5d23422893b2d05b6fcc3d09b82b679603f64002bfb748d8351e6ba029fa19607f04b17bff2d31c2d4facf94d4797f0c1dd5ab8593bf00a1d930d35a700af74848b3f763dbeb87d91449732cd72b57d4024ce7ff9024a1ace9dec4a3b34d83991619a95b9169bbe23b19528f6ff32a098cefaacf80166525b051c07fd16a3ad77545a4975e1a7e9a865cf992929753f0da43ff6fb9b21841678f52b3df1722e12ee571ca8c7dce7a5ff9491c7d01269c236bf786c6c727dc96cf3ed5c70b9b9beef18ecc401ab857d6afa2eaf26c35fb1788538dc911c292e6815025bdb6448c3bd3b31a3895d2229034038b0d39ef1d85578dd2d2094a9bcdefe6749850c52199e6f69669764f317ecad82fd7121f9e9f587413ef49f1b128f4989750a980ce79f34cf29f7df4f1891da0f3f8b0f5acfec92702947ac88794fbc027863948ad84aff47cb1f771a604eb37cc63f43bd44d9dead7fe2547649ad8b9e7421593fd8e341b9f4dc4506fac3c70c0c0052056e321a2abc8ca17b813e9c03efe24b67d34f6d2e083f79903c5d064abd25e73a92e52a6c066303fb337ae6c97240463941e9408aabc6af54145f816af932579616265f5b885d334598d84d748526fa4f67693ef8d05880a341e03d2a9ffa96a82ab448c0b07ad957e44efddb01e6b0c082f2c526872f211996a5c0f764a637ec6babac2c8e71764521d44e939ae19ec862be514be94e9f27bc72deba55cd3e5c3712b83102dc5bb38d82d53361086cb449ee43f8a38cb611e3f63ef1e6e8a29e35769fe60e7fd16e1f953f45bfcc100c301bf45835a4544d0c24a3850a8d63633d1e352f8e8e1bb6f2bdba331a3986198f790c57d8ace80b631d7e27213aaab96f3cf37db57969d858d17dd9abad9669f5a959da1d9fa8cecb2e37e94b77d30d452e07b66a084997333992bd4b5c9a7bc5d26b682aced0a53fcabdb44c27cd865e0059398cf5e16df1f099ccafd16bf8f7b0bc1872141b67073df13463b7c7831e521626fa46badbb85de83a3133980e0c850dbeb2685471bdb3e817047725ce74b2f9b0b1a8b337929bd10ee8e6c44acac2b844e45b592c34b6661673bd5b50ff2236cdb85bcc6894a0603b3b0f86ed3b4fff7c32be51d91e77a1746a34581e2ccf272099cfb5e489f9089add4b21664b60b8437f6ba1fa716fcde0195ecdf851b8f91188da4e012bfa9bed1a16df8cf1ac879bc6e38123a39030a7b44c23601f06ba4b4c67c80a9abca6f321b937825893fc1d6584c8726a22d0bd54ab08665688297311ca18121e7730a04ce002ab584465d2c5d122a9d5f6a668ec9f09df45947feb4a7f452a42bb6921e5956796799fca5e15d20cdc31c90c95ccf1d6da2b01db78a5139f9ca59331e116bf2f9ad27b801e6663e6f738cea89550287e3af326f11411c65397fca47d5a674ab077b7b54da577510cc7971406da31407cea712a2e30a227a0f1f4822aeb3d6dfcb2ba2e1b0726490f0e48d1caf025c1b7a1a17410bff71c0646280c52a36b1af4db10f1e5ae5fbae94c8a4af07d3105379d01e79d36b4f5a0c3cebff368d1a81720a6b2f4d2601801fa83fab4e1ba5863169fb9ed8a6812a70eb688d3a1a010f06d5e630f6dd80289ac00c9be8ddbd4476d08f88a0a9d46e2d8079968908964a738824ae05f1766171446c20c4b3db0533fb98d73f460e19815679039c09272a8895851ec4888328aa837c0d28a6c804ec6d37d0d8fd77faa55adbf92a843636bdc7374ebe9084de25acadd8c7d68f9bc74c8ea31ea26affb1a20db7bf3f1ea94340d5e8f1bd2f26b9352aa68c98224d10e8800feca9b58cf0ec820d0a6abad39649b2d429054bd9ea82ff5b69ea304f11b04c055055de124b76c210c0c33cddfb436af32d3184b8dc3fa0023572a80e9799e0aa2975702f27be86b59d954055ff26fca3c71921e11e58a34c677162cf90642ed80bd3e2c8096aae425eff131359e669f262038c9fbb586680d3dd6083f2d3c7583993d8de703a509649bd90d3a92ddc13bf9663f316437d58981ef475d08e17b5c69295577330ed2bf26521d3d54ec31293ad7f2154bb59847ee0cc5e2c780129d38b0503d1564deb404439412a76adf8a7304afe204887e6ce7434bc9b264acf7fda3206ff0d1fb8dd96d6b9514b92ebd07bb4959d110d7346882fbc9e9d88d39d99b181cbe5ecbdc4e5ee9cb4aae426f04aca824f0c7c4c6ada88287647666a5e7a3e45a344b51d6dd5dc2afd38684eecb7934d85d8614c65c34a208c2db27b354a97bd38a78776a9aa1eaf8913edba029f853da899fff359b19c0efc12c8e0adea933101667a51003d512dfb3346df4a6f63d3ac97865e45bb1a8e2e712774f1d3c4f0013c1d91b6858dae3401f2213d34416da715e95769591009a4c7a7b07f0ef16f300143b3e6b39f67803cbe65dcc812b5ffb3db3c4797eb523cd0ec9cb915d8ef0cbc48949f80efd33312a9f70653b49fc3def136c8fd89b012b9fe4ea27c9f777f9adf11ee64bea845bfd44fc1f63ca34a6c2de36bb89c0ab5e922d132de9535eb1714a97d6db3b85124bc4d5c20c15c0447f315638deadb09ec7bbc2467446fdd2a05a6d0a01046f0ad9525fbe35864f1511c7df4fc71a4768bdb87f057b744ef938f208b846d8e616216a439647150f3624d130fccf72f970a22da64b72b752a2aa6095e14853357afe6f2e5f9c37eb400c2e43c308d62de473996342881af496fa74721829815d2986455a6768ba130a13f53035f93254715ab1c96ae63692b2dcb87eda9af1030a16a6fcaa1ef10c7d34eaa25488330ccaf14c938be901c1faef63a3b5aab4538a6c34ea045b49448723c1c72ff04e2a6fa6be28bde3225da14743bf358d132deefccbee5056fb5bbfcf3772fe3da8e375c759be2564eb0d4379720498c8b715879fcb57fb100e9f1459b93894acbdf31524d8fd9612393b2523233599dcf1452b7e523ed6e6664b76511d31b055cac6c3a7d15002de95871110afa14cab6c2ef0877ac03a5ec5556fd06d5a8ba410b2cea35b33eeae53c35df1f12f9fd68acd97c3112242e3a7b81a67611e4e73cfb7abe1a456d233e67c26a1e2fb9195a8a9b4796254ec7750787abbb0d0a6ca32543851499a03d34c449b718e9fd220f1d3834cfaebb1cec0c022a20253889b8ac22f98118595ed2f17742254ee877767e64128e5f399c923db4a60d3cf655e9d9b6601ab5226536b5d06603f3a100ad38e3981ca917cd4cd93bc46cde94036276fa859f4bcdd675a0b7ffb0d92bcf4a5bcaf5c15163f50c4e63b073deb734dfc8424515b5cb57a10da539d93a14791dfef2da4a54e38d01e772a488fb31e34ee1cd5005879f8ce5e5ff97760038d9aea26c408a3e0b3cd133c49ff575b2b0d46bac11daa98a98dad86c6aa684435b729330e83792d4ff47ea8329f5839fe4d972985539557a689e17a6864d47b1f42d2ca910e31528c68830b9dee7122c2abdd11677ce877d050c659a16cb469277fa048759294dfd118d272697cb27b5f551a7285b0f3465e6911636a9347f39bebc105c08eb66121ddc86f13927627f76d955c69da9c287ba4bdbac5bed2ebe8e6abb721ab6c12cad07665710ba07523525f54e8fb4b3577a367807064b59884413921765f569ecbde73d7405aad622ae00160bdfbffa10f3122bfc5aebaf396379176e0594b6fa7febe980e2564b3a185bc3f95dbcd63316b3dbfce7df7c5403162dd09a0fea8d0f41a1e2f20ea5e31368e5fee1dc6d9559eca66b5cbf3e023e212de4a8c75a5b8b81cc1d07fd30ce0f3ba4e57e7810f4f893fa3db65c4f206ef92b297d7826c3e0cd567cb75a684d0ea099672625e443121ff941c3d9fcdde2edacda8d23d12c6a5a6263a1ec7401d38326eebd0d6738e34dc30746a9c5251da12a23596e3463a06213bdadba186675b937ce764e588a51859ef11069e17bda00759d5cc3f78afdc2d3866769f89a62b4ae4087b456fe6072501d70f9b72961535e2a1e3d70cf438738a3282b84e241f1368c987e4ec8bfae5e809a54934d992d6429993ef896a230c6d20996e104233c307789bbb61b3135bc5084d5f84be8513f5c1606d3a37ff0ee9f68c67480b67910b270e6dcc102aff8a192cc39752e6f32dac0333f62a1a75057df3b7772e1066373fa5e92b1fc982605f74212a9eb0e2d7e30d25c9ef5df059fc6b28e326f50c67c2f0417b3a9c5cdedf2b89342fbb00cdaf16531201546e39936398bacb14d99beb437ae690743c7cc092530d07466b40f2650e16780ced1ecfdc949a9fe8f3a805daee89d01b8089a0bf46b0d93a26347b28b761f12813e7dd923950c38ab16ec6be441fd96635cea52adfb7095663c076ad5b1678c8898e7e998aead7a087bb93952a356615abde1d7a765429f514d3f77ff906ca4469f98a7fcd40927eef301d25cc6b3e27edd22c03855706fdeaf4b2e4ae76422978ccc0a8b282e71dd9fcf11c95e4edaf7f7f5ebc14eb994499076a8dad399a84024fe4b69eee875447a1199bb443375cda4aa438e75daecf9756908b058129de618095c437d2a05af078a3b06057251d1dced7f420691489c21618b199226f54ba8bffc989ba6aae0afeeb65efa8b0dbcb14058743cc9cedf3242860e9239ebd360cfca39f43f0b184c32873644d9fb7a0b88494ceab8a22ab9b8f88471c96a5834c0f4734279ae2c098a6d97cf893e0cc30256d50078f9e585a4103d10ab58f8c6fdd6c6aecff4bc55fa15d20e95b55090de91aebdcc4fa52cd5276eb544b974176a9cf00ddbfcd620c38dd08ae1f14237b0018978af0a9c8b50c5cae6c375b505448cb8d3b7251d1f37ff844947d673b5fcc6c2b58981cf08bd0d8198a1d5129b1f216fa490aacad529f4f6a2924707c0bf53dfb68715d96d14509251e6643c9fae40249398171d71fe24bfcb8a4759369cde548f657b450c1e900faa85623f7144b3f4c2bd0a594f924768db94d6eeec3b8b360ec916ddbb7022f6c19b335d13907cd0e71ed031532ca019c08fd112d95811dce3e04d"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x185000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x414202, 0x8) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) syz_io_uring_setup(0x1d93, &(0x7f0000001080)={0x0, 0xe8e1, 0x4, 0x2, 0x17f, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001100), &(0x7f0000001140)) [ 1078.804614] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 26624 (only 16 groups) 23:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, 0x0) 23:41:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1078.830837] 9pnet: Insufficient options for proto=fd 23:41:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) r6 = syz_io_uring_setup(0x44d5, &(0x7f0000000500)={0x0, 0xe6eb, 0x1, 0x9, 0x118}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000100)=0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r9, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x181d, &(0x7f0000000340)={0x0, 0x2d90, 0x9, 0x2, 0x1f4, 0x0, r8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10010, r8, 0x10000000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r11, r12, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r6, r13], 0x2, 0x0, 0x1, {0x0, r10}}, 0x44a192b7) syz_io_uring_submit(r5, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x200}, 0x1e276796d0de912d, {0x0, r10}}, 0x1a400000) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, 0x0) 23:41:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept4$bt_l2cap(r1, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f00000005c0)=0xe, 0x80000) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/1960], 0x7a8) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, 0x23, 0xff, @scatter={0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f00000000c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/200, 0xc8}]}, &(0x7f0000000380)="86591db32fd555a7fc5d706b43f79b67d634c0a152e520382a8997c552c354d49c9c40", &(0x7f00000003c0)=""/149, 0x1, 0x10012, 0xffffffffffffffff, &(0x7f0000000480)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:41:47 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200802, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mq_notify(r2, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file1', [{}], 0xa, "d5f6ba1d480c5e18cbef9963252575c4fd512f67def3857c6c6fa03557e8529c72afbd3e965979a4"}, 0x34) 23:41:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x48000000}) 23:41:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:41:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c00}) 23:41:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ipvlan0\x00', 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0xfdca, 0xc0, @mcast2, @private1, 0x40, 0x7800, 0x8a, 0x9}}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x38c, 0x12, 0x800, 0x70bd28, 0x25dfdbff, {0x2, 0x6, 0x1f, 0x4, {0x4e23, 0x4e21, [0x4, 0x0, 0xa3, 0xfffffff8], [0x4, 0x3d242c99, 0xfffff800, 0xfffffffb], r5, [0x14000000, 0xffff]}, 0x2, 0x1b8d}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "d4713ebcf9ed84e0df76b074b4a4ec6f6230acdf3106f22ee3520ce32bb62a828984c88eda35a94a2f61788987aae883967465b56fcf7569cbd54feaf5108cabeee779323d7092d921744b748b3f1e89a447619dc1aa8ed8b3d644d8ffee9f0b443fbbb140d5cf8439daf7352d9483995a9ad6d2cad7c7f3820676d10158fa93f4e7ebccdd11c65ad34326aedcad79b2497568c5f2f514a42c9a9c4983a2cde14dd56a5628e3e7b8fd"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "6e7a51915d3326d5b081be03d57cdb0fbf16e5235f0b0cda850d8de36e8387e3cd2694cccb95fa2f438446f6f5532929679aadb8895165febd6a806e448c905d5dff2ec9e20a08ffd57ece84ff15b3b7383511c2a3ea5bcd3ec1f57b7c043918ace622890fb7dfeb9bc730ccae6bc1a6eca699"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "0c20361fdd1ddacf590702f4d572f9dc63bac2646a291e7a47637f1065f86f9681cb8ae802acde6d4cb77eb6b4a49f0d3218b1e303cec7b7999a0e91b3d9d49dd8323cc15daf1acde5b15bab23e9215788d5541b50d4b09e3c88d98dd1dceec179d26620687d04a1cad98b3ba5f89da7d39777ab11d9a58e1bd459c73f9051d32408d7c9210cc9983cf39906ac87cf9664bdba4606fa9e14b26541d5a077c91ce86bbd8640ccaca6a4dbabf0cbc74850cc2cbf34a0a75d254aa17cd66beda8761bed5e4522ad6b7f6a63c8831fcded91139ad2"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "d95584b2f0d26e92644915191c2107fbf30aec0a35fd961cd5f3f284fa87a0c8447765a29a93b481cd2463e0cefb980c2267b14cfb18ac47b05cb7a130fe1734b10e06799d995f964bec02338db79a2bde92ccebc89a6625ae9fa0009455b2de8a7477a439857f84e38c6588f03d2ae8467a4098a507b8f0e41667778832a451ad3f35e1cd3351b9005fdbc538584712a13e495c4645b997c9bc5b31f428f388440cc8ac38d2be1c1f0b02eb2f6249d57d721b72ce6804aa69e0d6b7c0180dd7f8a4dadb7b0c09715bf2e8da8a93f9ae88370cac686b4c23"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a18e8fa8880192221b94f3da9be11a59a69ab2676ecb7f92d410b836e2e7ef8fb854d5baf0660785eb0d11492d2cd65068e66a3789aa88a0532d9639c5f028db37ed1f5215f9e5ba0b24ff44777a68c7ad34950f0d60d2de18fa77c2778d0936"}]}, 0x38c}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c) [ 1078.990222] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1207959552 (only 16 groups) 23:41:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1079.034857] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 27648 (only 16 groups) 23:42:01 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 23:42:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0046686, 0x0) 23:42:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c000000}) 23:42:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r1, 0x8000000) 23:42:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:01 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file1/../file0\x00', 0x28cc0, 0x88) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x148, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd7ad}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x844) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = dup3(r0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c0053faec3283efaf1f"]) 23:42:01 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x10, r1, 0x0) 23:42:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7400}) [ 1092.833609] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1275068416 (only 16 groups) 23:42:01 executing program 3: lseek(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) 23:42:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0096616, 0x0) 23:42:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="7b7715", @ANYRES16=r3, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="080005000900000014000400"/28], 0x38}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_generic(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x2860, 0x2f, 0x400, 0x70bd28, 0x25dfdbfc, {0x1b}, [@nested={0x11af, 0x8, 0x0, 0x1, [@generic="1ce012f7aafad6ae3366811059ed15b999c0137f1bc9f46ee378e34869188366f40888c315c1f1be28061b86f4b80ffadc833871d2ecd1022c0b0446e5201cbf5fed554e800fefdde50149b8d6206239b36fe6d1dbe0e803b2f807d539", @typed={0x8, 0x50, 0x0, 0x0, @u32=0xfffffffe}, @typed={0x1004, 0x1c, 0x0, 0x0, @binary="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"}, @generic="7444c7e0a9d0b1c866626d481aed93103e1a5793a7a2d1548a8024ca52f9ee8df4f377fe", @generic="0ccc84c4e373e5633fc6cc9c63957d0b9e491adb61de9554ce7c9bb20d80e68bb3ac790179e350355d5ff12a10f00dd0f8032aea", @typed={0x21, 0x92, 0x0, 0x0, @binary="834aa4d9ec5317d19bceab43df314a3f03eae7763c7ab2bdaea2765fc6"}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="ffaffebcdc4406edeaa44f79718bd56c01bb261ae9191a43fdae78d9d292e3856c09c3a4a27d90a15f8c3ed36e46243b1585a5e4369a8ab23b1c7869237b2e0e9330c1f9bcd894d1dabb4eccf4f9b7211a25d30504572fa4067228eac2237148816f12b80ccf6276d4c57383da097dd1783dd2397da3141508b4de856befebc31a5790b65ed6b15d58eabe415e8520e2e147c48b5ba9d730b21c85283bef0d3777759a0a958dbf1e8bb70a5adbeabc318597f8c20ffb102b02b09b3508fe"]}, @nested={0x1116, 0x35, 0x0, 0x1, [@generic="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", @generic="a61a75a151de27ab391d70788f2d5b0227a6638d9df01f375d81bfea37a649434be85e411712ac559772333d49a74aba5e379e4da4648c3c9341f37eaee4976d47ed022cb32c53e8536c96d4f39a05358875dc3d4d627d2519d8dd08d6378a459515ff4bce1ba7df5e8542c283e5da94152441c844ccb851a97e0e6d0ad980642c030f3b3c5976bf834c9fcc84cdba786fc32f778d409c6bb8250e5496e8d4dfec200cfdef3fdded335f1f8398ccb5fb34e76a98c5740f3c6f4859642268bec1653558c0594a0aad350f958df1a83adad4af4d1706dc7a17cbf7d25d399c0cc4356ec69b439796ec0233b0e41148c2f6a9deb3e9b2ea33", @generic="0c5575037bc62076c8835ea2d6ffce5bc187e412dbf383aeecdb78"]}, @nested={0x23, 0x7d, 0x0, 0x1, [@generic="59ca50c7e320704bdb8a29e0c5791c55a10af65fd964511ae496499daa11c1"]}, @nested={0xe9, 0x44, 0x0, 0x1, [@typed={0x14, 0x48, 0x0, 0x0, @ipv6=@private2}, @generic="49237b0d711a947d4e81551d3eb88ea1e6b0cbcff965d8038967dd478921cf11f5fc15796b5d8335ea81e62656f5ec81c8f81ab47b77d5a9b57fe528fb6960ee66a02f0d6164d81de79f", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x7, 0x0, 0x0, @uid=r8}, @generic="f1703896f181188824168de77ad8c83aebfa3925585ed49b799fcd48dc0d13eb1e19da21a3d59bc22c26ebe025b1f0", @typed={0x3b, 0x73, 0x0, 0x0, @binary="46473f6c93c2082d9bd21e89d6d59b4453d46b6058f5c5333abf09ed545099943d4fca1b4f9475aba198d346b7344bfe1ee643183ef680"}]}, @generic="efe488925e520e64a9cb090db3b3bb5de065adc36c2fea0d261419ee1577441f363b28b482ac165d6352e87bc35e03caca23edae9952aadd3fed5fcc0e4e81ac5d1f92bc328b798e7ac643a80645eca96d33e6eaba4af5a24348f71d64ca8caa46f093f0fbcebf15a88b1f526f61626cad8e3f3be66d49a1213bbe6252e55893b48d499482974f2b9a0c4febd182828280f4302ce0b0158425e0", @typed={0x7, 0x1c, 0x0, 0x0, @str='[{\x00'}, @nested={0x3cd, 0x62, 0x0, 0x1, [@generic="e530501ece25baf9603e871d9d66f39e1d16126ec925056cb40ddaaf2b58f430ce82039b1f9792ee3288551342291b7d55cc5e6257cb60b4b3184d7af26b7479fc595a2bca0f3e81cdd21e90ebdd1e1b350ac1dee826672bdebad6b2b81c5f2c8cec79598e3ee53da5dec9190d3ae16d00796b08f90d8ebce14ce9ec51efef08f49f6e2ecad6ce9841110507cf658d129233e829a617bfd062e0f4ab5fd6c3d89d42501a20d969f8ef88042872d99688f414c617c9a29034adcedb7a1c9dd10aa5a099becce598562f746591dc59ca6a195572ddc9ba024934", @generic="ebf83e913a3c5d4d355aa06920e05f7aa295d83880c11dbed3130e34d77734d9746e5572ac0bb6e1a489163941ec7f7e5801d3ec6eb447ee3a13efd41755953bdd7f4d343559b1c0105efa299ba57e13461cd90db8f39990839a705b281d828e389a87ef19cf6c2caa34d873a0d131289b95410f3c2980450befc12ff1e4930a6cbd0362d06a36da201f6cae6a4b4d98", @generic="314b16c24ff4d392b9a90537bede4175a076edcdbba28e4ade86fd9b7e61fd9087db3b56a379c8f4b5db5950fb88afb18fb75e079ee04106a459f53f46bac4808fe2abf504d57eb9cfa5b3f5341380ffaaa2e3293d5be8d9cc5c615088907a0123f32064f7c197b0bc44dd0eb83cba99b8c9e664c05f761821dbf1a5fd097a7205d4e342a23adfc8d3500a9aaa6f45d9202f9d26e74b7e5afec8c87203998917e091ff7b17441037a4787cd3edc8f9220eabd1062c46cdc8", @generic="d72d8a091a5983212a334392dfef59c8862e28ca42ba46c4b07cd36649308efbcef2d699622e1d196a75b8b4751adf4c49960c696f27408d484f6bc5e9216d78023171605b2179e2d8ff00258c21bc45fa78f1af1686b44eb1e2e687c1c441ff1979e7f9bfca6cd54f25870243fef6d4778ee9d5768de1366620b3b749c287faea3bd9a7cbe799793defc5476ce55f2fa7f86319f00c7b5b048443babc5fad6fcc026ef4edff230eeb234bea", @typed={0xf9, 0x55, 0x0, 0x0, @binary="c2624e2ece902ff1cd49e5dd1dc9cd2cebb10f0ad71f467b02d09c04d4cd520f4725fe627ca3d7b85b54320d8306cece34f6b5ef8adcb307cda3428ea16a94bd812bbe48fddd676619dd0eb04693633c641dafd0e74916fcee8f3cc325c89a5596e16e608de3fcffd0b94229c40002c37c63828390e19b21a7c3d543602c0c0f3ad3fa0ffeceeeb6075fcba297e056dddb887b82625a9a007603b3e0b1bf94917a2aa2e95dfb4f28c73a584095cbbdce7a4ddf357c56e2eae2c48e51146fe9d899d801fa595f76e3d028fc13242ae5b3b6617c721074e73aa61a0557f9dd0a9b51cf545d0f32f6d631adc762de1b4b3b223eaaf957"}]}]}, 0x2860}, 0x1, 0x0, 0x0, 0x820}, 0x4000) mq_notify(r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 23:42:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 23:42:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x68000000}) 23:42:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a00}) [ 1093.104911] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1744830464 (only 16 groups) 23:42:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0189436, 0x0) 23:42:15 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) 23:42:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7f03}) 23:42:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:15 executing program 7: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x5, 0x5, &(0x7f0000000780)=[{&(0x7f0000000500)="a43e3e9589162ff91285c492cd162dc6491860f595a34dcf703c6cd3b787894936db0da22974fb5a5d6bc164e9e079e8f08719cbc5abe9d43816b780957235f9cb69f98425b2d1b9cc26805907f5c54aca3a3523f26bac", 0x57, 0x7fffffff}, {&(0x7f0000001d00)="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", 0x1000, 0x8}, {&(0x7f0000000580)="35a79e91419b0b0e4c29958b45aadbce9d9c7b473dbd38b2f5c3fd6790ec009f6c31145cde6d514880b7fc2202c62c48564b053086d931a1215c6402415d6be5ce3ee79d600214a65dbaf0f9f70bbea0f48223a706db4e35dde6ab2debf936c9527a687c0863c9c400f9c7410f1caa40e9b3c919949dc618ddba263d21fe8e89051446bb92f6e93dd20fcad4626b3063bebf1809b6475f5e6e4ca282443bce2f55d9179d4ead68e5a87c74050607d463ce916bd589da7d3f764649dee104436036a06353fd416bd5635717de7fc8", 0xce, 0x8}, {&(0x7f0000000680)="1a2779decdc33c9dbf46062162a70f68407d20d178", 0x15, 0x10000}, {&(0x7f00000006c0)="6aeed5bf4ba9470f2472894f90bd1cb190c6dc162e6e5c360320f740e4fbbe8ef7ef7f2d5e85ba21830a56606e684c66067ef0069a0977e0ec74f3aa96a11d98c641b3642464b2d0b04ad43738712ff07bd41fa20a31ce2c3dc142530473035413bc45b04a4973427e9dfa422ee639c6f0f242367cf5e29105aba39c0a69589b1a9995132a9843e97de7cbf7ebcd92ead34ea6bab573850dad427d6e0b92911e955c0e8834e73e907eae5e94", 0xac, 0x4}], 0x220000c, &(0x7f0000000940)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}, {@shortname_winnt}, {@numtail}], [{@dont_hash}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}$'}}, {@subj_role={'subj_role', 0x3d, '/'}}, {@dont_hash}, {@uid_gt={'uid>', 0xee00}}, {@context={'context', 0x3d, 'root'}}, {@appraise}, {@seclabel}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="8787ced5000000000000000000", @ANYRES16=r5]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r7, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x208020, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@access_any}, {@version_9p2000}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_fscache}], [{@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@fowner_gt={'fowner>', r7}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_gt={'euid>', r8}}, {@uid_gt={'uid>', r9}}, {@dont_measure}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d75d914737428b3d8dde655394afeaeb961265c1875330f5b022ae422792d03913a57f4881463d7d8fb2c280c5a0001ecc5dbcb88758442a47ceed05a0800000000000000b7f56ed619759313e2422cf5bf32", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 23:42:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c000000}) 23:42:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x10000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x14, 0xac, 0xc1, 0xff, 0x0, 0x0, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x6, @perf_bp={&(0x7f0000000040), 0xd}, 0x8, 0x10000, 0xfcb9, 0x1, 0xc4, 0x3a, 0x5, 0x0, 0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r1, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xd8, 0x0, 0x7, "63a810691d2bd209a28e88dde5227fdfad99ab4428954a6be04b2d22c8de0e46006af2ed938c463e97cd6f38d884a83f56b64c096b63b26e9e213261a34bcd02eae063e91ac66ecc780c9d0fb6eb3f1f36736633db4c939cbaef01afe2b5c24f2ad7b7ac4e303ee9cb1918b2a55ee57c3ceaa8f04d69800ad88503922acab29bc58770e6b0b665eb779d06f1044db9afce7a552f19be097c93512640feb1e838f99554b3a84c76b754fe847d2acf54839c53b21c2b26b811f4a2ff8ad4209180199ab6657e5e15a403ae02393c165190f595bf012f43ad84"}) r2 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x4, 0x3b, 0x6, 0x2, 0x3e, 0x7, 0x1a1, 0x40, 0x317, 0xf469, 0x3ff, 0x38, 0x2, 0x8000, 0x0, 0x75}, [{0x60000000, 0x1f, 0x33, 0x4, 0xfffffffffffffffa, 0x6, 0x3, 0x4}, {0x6474e551, 0x20, 0x4badda6c, 0x4, 0x20, 0x7f, 0x3, 0xfffffffffffff8f9}], "1343d2f90c576688fd354ce679af20132d50d2c41aed746cbc83cec21c4d69099ce862047c7af3cf73848ddb48db3a376fb106d965e7fe4267d86ac94b4b120a4b2c667a2be80b8d53fa1ff408c25226f3472e8ff5cf96791794bbf584173bb818430303fa0519e297dcd1e06fc7492a3216c3aad5771b6560ab5aebc96bf0f4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb30) 23:42:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020660b, 0x0) [ 1106.830456] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1811939328 (only 16 groups) 23:42:15 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @loopback, 0x8}, 0x1c) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @local, 0x80}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty, 0xff}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="19bd96f951fe02bc34419fc0a28a42dfe3376becd3afb6d4a64586502451e4f5063fb2f5bfee72eda510d75308068a88be23aa6e614f2b807062d50c09ec74a193c98678646c5709758ede3bad38acc151f65216018732e3ea91ccc882779e7a65bb544aa7527283c9ad689ca63fee000503ea5714adb23e6aaa9a5044c822ed2dc04613b8f6fc4f920188f9192104c28acdace27708637a739174ccea800d96eea9190848f250a1973a7a2338486f05d8519a88de3c2f9e1ee2ea3e50564cda3a5a5f87ca5a8fd03498f1c312c76a83b7d8ecd8f960f62d47ebdf3fb1a275b0852151b60aace67d752aacecad49ead5430c3d3a65", 0xf5}, {&(0x7f00000001c0)="e6303112d41c8fc1b23119e05fd22b8e845de3b29cab39ca537f8d4eee2a0be3f387bd00c83f173a8332af12029ef7215893266b7521d3e023f6293d8cb433294be3ac57ba54faa23a5924e771b5db78cf8d5a1f4775bd703cfd5fc5c1f7b1694a959aeeab03604ddeb84745276bffaa3811626070dd", 0x76}], 0xa276c102a4fc3d7, &(0x7f0000000380)=[@hoplimit={{0x0, 0x29, 0x34, 0x3}}, @rthdr={{0x0, 0x29, 0x39, {0x8, 0x0, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}}], 0x1, 0x20008040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1106.885264] loop7: detected capacity change from 0 to 135266304 [ 1106.890881] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value 23:42:15 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/121, 0x79}], 0x1, 0x2d, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20040, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rfdno=\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="43a9dcad2e4c2c00"]) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x10001) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x1ff, 0x0, 0x661, 0x1, 0x1, {0x0, r6}}, 0x1f) 23:42:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0xc7, 0xaf, @buffer={0x0, 0x9e, &(0x7f0000000440)=""/158}, &(0x7f0000000200)="90e7e89f4edb5ae78aaa349858bc222587afafee9ea5138c293b53e5f680b989afa65b31785ce5cf37597997d137046000332177614fdcb9ef2cd3350730c166233b3957cd31771f2f0bd822867815b16510ab2215331c9b07a9090c0682b78419645075c58fcf77a09d657f0381c3c4c40ebbf2f31a76819fc7524e9d762115d77bc705a2f79c0c0703ec8a4ce955b3f28e3e736dfafacc93e98c536768e19db1162b1d973759d28a1dccd1584a7df456cf6da26cd2d0981d92147db3f6cdae3e46025c11e9f8", &(0x7f0000000300)=""/108, 0xeb69, 0x10030, 0x4000002, &(0x7f0000000380)}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3abb, &(0x7f0000000100)={0x0, 0xf4af, 0x0, 0x1, 0x236, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0xa, 0x10001, 0x0, 0x0, 0x2, 0x1, {0x0, r3}}, 0x6) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4004, @fd=r1, 0x3, 0x7, 0x3, 0x0, 0x1, {0x3, r3}}, 0x1e6e) fcntl$dupfd(r0, 0x0, r0) 23:42:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020662a, 0x0) 23:42:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0xeabf4274763b2474) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) sendfile(r0, r4, 0x0, 0x101) [ 1107.007169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:42:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xe0ffff}) [ 1107.050260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:42:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x74000000}) [ 1107.069017] syz-executor.3 (17030) used greatest stack depth: 23152 bytes left [ 1107.069837] 9pnet: Could not find request transport: rfdno= 23:42:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc028660f, 0x0) [ 1107.105763] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 14745599 (only 16 groups) [ 1107.151127] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1946157056 (only 16 groups) [ 1107.162148] 9pnet: Could not find request transport: rfdno= [ 1121.118894] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2046820352 (only 16 groups) 23:42:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a000000}) 23:42:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 23:42:30 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x881401, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@fscache}], [{@fsmagic={'fsmagic', 0x3d, 0x101}}]}}) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x26, 0x800, 0x70bd27, 0x25dfdbfd, {0xb}, [@generic="b88c3139ef2239795e4a93d94decead388cd50e8b8808dae2b0da2b27027bd8a60292b046de84bacbae8a00e56b919b541930aa5038cda701fc8cf6df6"]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r4, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c007b783f0f90a1d0b46f54fcba2200f395715086857681b0097c58dc60d507a1138a99a9f13bc9d13a8697396ffe59251c16679c4c7a4b2375b67b2ea1e5b34feccd2ca402281c5a5ade6ae0cb2befed8973bd7fa2504352afc7c80f65f87737f2fcdc7879d507e33ced73add1e3e32ace6499ee3d5c045f7dd59573ecb4e2b6b519fa6c9f4c58c21d6e6abf0e54fcc4bb92ccc904b8d48bc3570000000000000080d55d1be8aa7db4c5c7cd5d3e3746b764a85ebcbbef7ff02d"]) mq_notify(r0, &(0x7f0000000480)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000240)="230eac7a186ba46ca8323b006d07c16dfd28fc8a2c38ab699f29cab036ed7a206c59e1042d5911021883834b9f25727d72f7aeda379307e92b34fbfdce3828f4ba0015f79dbefbc892213f1f960cfdb7eeab33215056d95888d78fd9f3f2909eab07", &(0x7f0000000400)="d05a7a19cb0e00064123c2d0b455d18028354293324f81ba337bd8c2f3da46463cf7264d3f34a34034dd1b4c28f3734d0c697b5ee3c766b14b90de545cf81d606eaecfa661577e0a500931c7ef8ed8465242917b0aabf78e42ae7f5d1d344eed291de4b7ca25"}}) 23:42:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x40000000800, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x4, {0x24, 0xfffffffffffffffa, 0x2, 0x1, 0x1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:42:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406618, 0x0) 23:42:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0xed, 0x0, @buffer={0x0, 0x94, &(0x7f00000000c0)=""/148}, &(0x7f0000000180)="ce630fa3607bf7c6005dfaadcc32bf1a100aeef627fbffdefaff7343546e009d4be839e7735aaf0b7840595b113c4386e9fb37bc3e5deeea92442583b37d302440198bda2774c7aa1c95b098d76c9b8e2e710a5da640b4eafb119bc7b73d81ef02bb740f70584e46f2221682ca431c8f4b078a214bc54a84fce654322ef8da2a5877eca08ebc8fd70b1881557055f6c5fc0823e1687829e291fa02a090b53d0aeadc065161daca7bf300810033d28e8e942889f3715f479253565abf33dc8016284079c252cbdabeceef777d274d238053bc961f30462008ac669f4f70b700194851cf10bd1680f107a485eab6", &(0x7f0000000000)=""/116, 0x0, 0x0, 0x3, &(0x7f0000000280)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:42:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1000000}) [ 1121.159998] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 16777216 (only 16 groups) 23:42:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) [ 1121.166144] 9pnet: Insufficient options for proto=fd [ 1121.191939] 9pnet: Insufficient options for proto=fd 23:42:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2000000}) 23:42:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, 0x0) 23:42:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r3}}, 0x0) 23:42:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1121.278833] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 33554432 (only 16 groups) 23:42:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0xfffffe00) 23:42:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x72, 0x0, 0x7, {0x2, 0x2000002}, 0xb82, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB="b22ba8a7789f7f49cbbf2b2139a46fff6a47bccf16a9"]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x16400, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x200001, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000540)=""/49, 0x31}], 0x6, 0x100, 0x5) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000001c0)={0xfffffffffffffffa, 0x10, [0x101, 0x9, 0x4], &(0x7f0000000180)=[0x0, 0x0]}) 23:42:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x284040, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r2) socket$packet(0x11, 0x0, 0x300) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:42:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xffffe000}) 23:42:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3000000}) [ 1121.412931] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 50331648 (only 16 groups) 23:42:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x1}, @register_looper], 0x61, 0x0, &(0x7f0000000040)="960c4ea07bb7f4e3f6044f28ea4151fb25c235c9a94ebc78725d65454099026612a4efa6da3dfa0142a37b3954319df2df4a06fd3fde00ecb47cf6dc89aaf00d7315c7711c1f2ea82576f1e2357b7f908cf2d0796cc947554786296e0c073a2fb9"}) 23:42:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0506617, 0x0) [ 1121.442029] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 4294959104 (only 16 groups) 23:42:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:30 executing program 7: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0x8, {0x0, 0x5, 0x800, 0x7, 0x4}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:42:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f00000000c0)=""/163, 0xa3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000800000000ff7f0000", @ANYRES32=r0, @ANYBLOB="ff0100007f0000002e2f66696c653000"]) io_uring_enter(r2, 0x4c13, 0x7752, 0x0, &(0x7f0000000180)={[0x8]}, 0x8) 23:42:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4000000}) [ 1121.534190] 9pnet: Insufficient options for proto=fd [ 1121.543066] 9pnet: Insufficient options for proto=fd [ 1121.572957] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 67108864 (only 16 groups) 23:42:45 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) 23:42:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, 0x0) 23:42:45 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x810, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) io_uring_enter(r0, 0x1516, 0x55df, 0x0, &(0x7f0000000040)={[0x81]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth1_macvtap\x00'}) 23:42:45 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18042, 0x8) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000440)=""/162, 0xa2}], 0x8) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e523d800300000000000000001000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',A']) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000003940)={0x3, &(0x7f0000000840)=[{0x7ff, 0xe0, &(0x7f00000005c0)="9b3a20e29435a863c8b8e2b8ea31bfeaca6397bbb10e073fa50027ae4502a876b35680f22191f2523e1a335400aff81c6ed2f1405197b7ef9130dbef60929c33a8480e05d460cbcb207567b2d96423459643a5af6a083a750d92221da9af3e4a0777d3561894c79c05807184e30aff8617b57a38d134ce8ae506e319f5bcd0da77cc55ce0e37581f7e2ec2069b44edbeab82c2ba0d502584c8f972c675768bbe1d0a8d7e008acf766d5656e284197259e708fde426c983c108e017910712244167d5c67da101310efcb7c176876c4536b195cd31823c6b176d3fc344ab37b043", 0x1, 0x1}, {0x1000, 0x93, &(0x7f00000006c0)="220438fd5d65058ffb9e42b302159b98e8febcab2fbe3469ec08061ea8941cc80d2c2a6df28f736c07ac37a22055d13b54a8457382956be9a093e3ad833e43ee6905de31e62d3765ff9554009817a7216d5e02d8d94b3d0572e6253afe79f6ac1ba108c6eda180ff015f716a80be57776c3aa85555fa233bc5c079191392b68652d351963fc0cd044338791be643c8c9cdc0a7", 0x1, 0x3}, {0x5, 0xb3, &(0x7f0000000780)="d2767fce78ebc38e08b959b18a2047c44c8cbbef76407bdd2ec791676b00d48b591043e4af32d36690b59328d5cd6d68c19b6e805870a42e7893392c120b84a20c21fee162c57f1f0537994d7adc2fd23aa9b9fb183e2aa36a078a8b7aa92656ef472665f07d23259eba110499386ef8519c8cbd57ad3d3fc8bf690aa83c93c8ba64be1db01f9673ae37ff8f254f08844a694b1373d5431788f9773eb2f8518efb17a21624bce1f020f9160cb7ee8ba9de1531", 0x1}]}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x1, 0xee}, {0xbe92, 0x10000}]}, 0x14, 0x0) 23:42:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3bc, 0x1c, 0x10, 0x70bd29, 0x25dfdbff, {0x12}, [@generic="4c9bd6877afc211576473cc269ba5e8bb777b1cb1cd2d85c0b40f6fd14ded7aec0ea48e9f76a9e7a174e30103633b9069b8bc63ad427d7a6e801ea4a6885510bf8051b666564d4dfccc8bfa414406f009dade3d3306ffaf119289ceac7905309f83da6e9bc2a016edfc39ebd6b5d500b07cca240044686dd32cbf3a014245a726bd2027c5ccd02ac7164359312f2131bc5fc4f42b87511c15187e200a963aa8259ef2194bd9633e8e6a76988c8d618de96", @typed={0xc, 0x43, 0x0, 0x0, @u64=0xc6ea}, @typed={0x4, 0x86}, @typed={0x4, 0x4f}, @generic="87654ebc8577b106625c9f2d0b417475b5829d44f56696eaba265cac81cf79a898", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x11f, 0x7f, 0x0, 0x1, [@generic="586ad5e45160cfb9d3d4c217bc86b9c561ce15c9598e59edc894bf51995103ef0cdbce4b81c39e1ee03f638157b626cdc2ece9126ab48cbe211dc3e5674a0a194f5926553095b43b8a1b8eaf", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x89, 0x78, 0x0, 0x0, @binary="e36b80e50d5196c8e2e41dc98cb69be717ceb9b7384ea556778bfb74074b109b51eee1c5623480842b3b2afb7c4c2aa39656ca192637fe6920a9f2ec0d2aef2f502bcd72c64c0db9ec481159b5aa785d51129af9c80238cfe08b7abd42adbd14a6eeb06d7d552fecd62b4a6c4f36ae067b608eaf4f4c1ba4fed468b886a98ab151b798dc22"}, @generic="de7913804776c9869ad56c2c037f14a8c9e58bb3bc5a9a7bb506340d3576e048afd994c257ef89c559104024c12911439c242e"]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@loopback}, @nested={0x177, 0x73, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @fd}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@local}, @typed={0xd, 0x34, 0x0, 0x0, @str='/dev/sg#\x00'}, @generic="03f5e3082ec8e08205c3", @generic="66777d2c3b20c6f75d220bcf57e66bbf13c5b66deb5cf5ae68a239c70a086ef6ef1d614ffd08c29c1ca394cb6ccc1b5722a13de1436bf0cac2080483caae9a993bb653dc07", @typed={0x8, 0x6b, 0x0, 0x0, @pid}, @typed={0xe0, 0x5a, 0x0, 0x0, @binary="7829499a958a2c7b0ad82f9da3b1e49ab81bdaec27cd0286c03972fac7896281d8ffee5720ada4ea8eb368ced12d4097921618fac786f67aa9c2b713243e16707f7d7e4b35462889e8bd320ddf9dca8866ef15f99f8058a9297dbbd5b3cd2e4c991f53122e2c66e576a3f7c1c5943e99d629472dc6c62e5836c5ac187a0f6522273db5b084d2eafbc4511db3814b75f4c5f813d5a97a66c06b9418855099c4cdfc540e0e3262541e1018bafe5f19d4150734636967ba3646af4333ae86e87591cd28c97c46fd67bf6034eb1a9191cf56d33ce5749a5c184497e27aa4"}, @typed={0x8, 0x22, 0x0, 0x0, @uid=r2}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:42:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x2}) 23:42:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5000000}) [ 1136.615774] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 83886080 (only 16 groups) [ 1136.643411] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:42:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, 0x0) 23:42:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:42:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6000000}) 23:42:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) timer_create(0x6, &(0x7f0000000000)={0x0, 0xd, 0x79f756a3b8cdd217, @thr={&(0x7f00000005c0)="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", &(0x7f00000000c0)="133ea77e50b0aef178bef9d4d97044c36fde803658f5814383e962a0a4f8937cde2d5008a5a7f0d44c54329a15e7115ae7051446363b2b7b1729f59ab1687b03ce9fad2106b2982f2b0f8ffd4989df71a26ee8bc20a20a596a780921403f1854a5dcab7026c94fa1d7597f44ff46b294da3b924871a16adc5cc3a56b16e3fc3f344f1acb136dc75705972e9370da867c616886876d9bcf6ae54de7339e448f18a027cdca9266d0850934b2153329142c6105509368f3f76d12e4168617dcca11dfe750e6744e4de668ac582ec91dfd"}}, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:42:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$sock(r1, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@ll={0x11, 0x4, r3, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x40, 0x1, 0x5, 0x6b, @mcast1, @loopback, 0x40, 0x8, 0x3, 0x200}}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:42:45 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x125) ioctl$RTC_AIE_ON(r1, 0x7001) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472656e95e37c5027e32b334765b1a68cf60b733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c706f73697861b50166a1"]) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x18040, 0xca) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) [ 1136.751613] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 100663296 (only 16 groups) 23:42:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 23:42:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x3}) [ 1136.818395] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1136.827683] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1136.844534] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:00 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 23:43:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00'}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x33f, &(0x7f0000000140)={0x0, 0x9fb8, 0x4, 0x3, 0xb6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r2, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x0, 0x800}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:43:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7000000}) 23:43:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4}) 23:43:00 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x2000003, 0x4000010, r0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r2, &(0x7f00000004c0), &(0x7f00000005c0)='./file1\x00', 0x80, 0x6000, 0x0, {0x0, r3}}, 0x7e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mknod$loop(&(0x7f0000000080)='./file1\x00', 0x2000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000140)={'U+', 0x6}, 0x16, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2501000000050004000600000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040041) ppoll(&(0x7f0000000280)=[{r0, 0xb004}], 0x1, &(0x7f0000000300), &(0x7f0000000340)={[0x87]}, 0x8) sendmsg$nl_generic(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1b, 0x100, 0x70bd28, 0x25dfdbff, {0x1}, [@nested={0x4, 0x17}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004020}, 0x24000011) fstatfs(r2, &(0x7f0000000600)) 23:43:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x76326bed) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:43:00 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r7, 0x0, &(0x7f00000000c0)="480ff4043e8e20ad8909b5695df0445eb48209c423a882b0a6423129d8e4d97cf4a8c7f2f74b4dcde371cb1effd35598d27e6836701d26d90b68b79ac14f82aa23dba031d0997f9228ec5c8de1b708308de1b2a615e3a085a978d72935d641115303681585a8", 0x66, 0x20000000}, 0x9) [ 1151.131877] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1151.143793] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1151.152205] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x3, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x280) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x6, 0x684c00) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086604, 0x0) [ 1151.201045] 9pnet: Insufficient options for proto=fd [ 1151.216943] 9pnet: Insufficient options for proto=fd 23:43:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x50, r3, 0xae743000) 23:43:00 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) fcntl$dupfd(r1, 0x406, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:00 executing program 7: readlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=""/116, 0x74) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', r1, 0xee00) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="6db16d6e3fda0fad67c550f88177aa9f3232f8c811e3599f07cb1d25c51e4c89b1099e0fa9d03c21ec297f2637b9197cda82ffa3e5bf3f444690f0142cad7445718915cbe70f7c429a00000000cd4e95dac55eb5e477723b6bb9af67774d4ce53bfbaf4cf6504213b131d4d11ae7"]) 23:43:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1011c2, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:43:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xa000000}) 23:43:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x5}) [ 1151.371780] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 167772160 (only 16 groups) [ 1151.397488] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1151.412789] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:14 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:43:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x6, 0x9, 0x2, 0x0, 0x1, 0x80080, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x40001, 0x2, 0x1f, 0x0, 0x4, 0x101, 0x0, 0x0, 0xffff, 0x0, 0x8}, r0, 0x4, r0, 0x2) fcntl$setstatus(r1, 0x4, 0x40400) 23:43:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10000000}) 23:43:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6}) 23:43:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000dff24600664064fddbdf2506000000110083004000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c085) 23:43:14 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe9, 0x4, 0x20, 0x6, 0x0, 0x3, 0x0, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x2, @perf_bp={&(0x7f0000000080)}, 0x8000, 0xffffffff7fffffff, 0x3, 0x1, 0x6, 0x7069, 0x0, 0x0, 0x5, 0x0, 0x2}, r2, 0xf, r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1165.156240] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 268435456 (only 16 groups) [ 1165.185199] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1165.185525] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xa0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000140)="10331aad5d20cecdd74f7e7e68cf305a6de5693d3d859ada6fd0206674c230f8b3b554ad62790824415c063d6e3057c0d7bc4973c5515cfbce708ea3245bab1696d510e6411f35d7efff9561d401504eed4dfce639f350b6693a1ac9a9ece31fe7d50728031d39033a22232b930846a165dc98a58b0b280d8bec1753da5e8d3efc4c34e6801414", 0x87, r0}, 0x68) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@access_client}, {@cache_fscache}, {@access_any}, {@access_user}], [{@uid_eq={'uid', 0x3d, r2}}, {@measure}, {@uid_gt={'uid>', r3}}, {@obj_type={'obj_type', 0x3d, '/%)'}}, {@euid_gt={'euid>', 0xee00}}]}}) recvfrom$unix(r0, &(0x7f0000000280)=""/167, 0xa7, 0x40000000, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 23:43:14 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c646e6f3df23266d1ef1381", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=r2}, &(0x7f0000000200)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) timer_gettime(r3, &(0x7f0000000540)) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x12be01, 0x0) clone3(&(0x7f0000000440)={0x1000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/138, 0x8a, &(0x7f0000000300)=""/253, &(0x7f0000000400)=[r2, r1, r1], 0x3, {r4}}, 0x58) finit_module(r4, &(0x7f00000004c0)='(\x00', 0x0) 23:43:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0xef, 0x9, @buffer={0x0, 0x18, &(0x7f00000000c0)=""/24}, &(0x7f0000000100)="ba7d6d14bae3beb47f85b09d0fffc6c4f006ee3cac5893cbf1d4840a6e99533d6f35263c6e2004a9549f6bbd616fc7c21111b865227b538db61a3dec3f9b6132b3ad300dcb87582c77213ad241aedc26156f04d8f7f3331a68ca44ca8bdc717ba550d3cf4cb2889de6a306cfaaecdc3505aa215d17a18e8be180fbd6ddf60999f0b08743a4c5ab46cc67263f11a2bf779bdf183de3d01b4d735f55f6ff9fcbe5cd40b4491df76772151b7df3ae99e892710e32022120dd66fb048a3dc4b6849d046a8069795d54358df80afe6426845560e9997dc6e39a9f79db9ed7696917a8146a6e87e5dc1e50af833406bcad9c", &(0x7f00000005c0)=""/4096, 0x8001, 0x0, 0x1, &(0x7f0000000200)}) mq_notify(r2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) fcntl$dupfd(r1, 0x406, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r1, 0x0) [ 1165.286799] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x66, 0x1, @buffer={0x0, 0xd0, &(0x7f00000000c0)=""/208}, &(0x7f00000001c0)="45ae5ec42c1139c3479a5ae86ebfbe0d22efccdecd094a53c0f9a616599ce1f8b746d096e5ee39546540e20c43d5f0b59db57e714147db2e0d82562270577cc7c2cba5ca3e37c06b5c20e15fdbed998d07aeee740787d560cdabb37a0c3016b9cbb2ff53cfd4", &(0x7f0000000240)=""/71, 0x8, 0x14, 0x1, &(0x7f0000000040)}) r2 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$sock(r2, &(0x7f00000006c0)=[{{&(0x7f0000000300)=@ll={0x11, 0x4, r4, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000140)={0x820, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x7f4, 0x8, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c77348670df0e0a149d5cbba1fbedb24e892daee8da016d14b68a827f541435"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x290, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54db4375409ff844103e8ee08664c1bde6d5acdf40b71ab233cd1b870f81c42b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8c9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x820}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) [ 1165.339603] 9pnet: Insufficient options for proto=fd 23:43:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x7}) 23:43:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x48000000}) [ 1165.378816] 9pnet: Insufficient options for proto=fd [ 1165.387655] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x1100) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) [ 1165.459403] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1165.485736] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1207959552 (only 16 groups) [ 1165.511864] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1165.528496] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:43:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x200000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x1, 0x9, 0x9}) mq_notify(r1, 0x0) fcntl$dupfd(r1, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d58a30c203e00641872", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:43:30 executing program 0: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) close_range(r1, r0, 0x0) 23:43:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0xa}) [ 1181.340980] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4c000000}) 23:43:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) lseek(r1, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1181.366579] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1181.372124] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1181.378453] 9pnet: Insufficient options for proto=fd [ 1181.383810] 9pnet: Could not find request transport: X£ > 23:43:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:42 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1}, 0xf77) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x121881) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001ac0)={0xda, 0x4, 0x0, "1d714949433b04ab2297a88cc3e170d3b667518da53b21efd34b415cf39ec99c0129e856500e9a33d26e6004f1bc5879720ac92919e4e619c9b9c5995f9f30a2f8fd9bbcb6615dc9af85a8bb0152cf471b3752057c99805e177970d38aa138751a7c8bdecff69a060043e31065a3ab1917560dc325bdc2266a2a95dfc3f5d84ea8efa75c0703c6ea9e35f6b8a9d3caf76e00a81de875cc6781cce0b699195ac1e56d95b034d389bd67e8f2f37333c0e6abfe7a2f1baa031363d52556b06b58061e7aff508ba7356a8a7e0dfeec701b62bee4600bc5929bfa7bd2"}) sendmsg$nl_generic(r2, &(0x7f0000001a80)={&(0x7f0000000440), 0xc, &(0x7f0000001a40)={&(0x7f00000004c0)={0x1548, 0x25, 0x800, 0x70bd27, 0x25dfdbff, {0x20}, [@nested={0x3eb, 0x49, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32}, @generic="aad0c68859fcdc1ed77869e58e8eb03e065971f3144633e7d984bf3bbda026b9d0d22cbbe8687a22b73e003cb093e965c63d71d25d742bf5fc9c42d255112a243cae84dbb87bbc84ddc1e07c3f6b15fbfa6e1e27c9e052b1d2cb84b14764cefb1629278dbb31fbb5280721b43c8d1192b432619d0b7b6c44d9a81b39e1bfea4f2cad66ff5e601f5613089aba544ce9844bf95954b06b32180019bdc14415a2348df220a8ade7db853db06887418cc7b26ab64b5ac7cdf70cc1d736afd2276d9c55fe6c8b7ab5d00425ba5249d9ee1b3ae8e1ac79227ce320ae8fe565491d58d87803e7caf7ca9f6f6e17deee2b67ba6e86ee5f38921c", @typed={0x89, 0x96, 0x0, 0x0, @binary="c833a6c4a93eda160fee571898fbafdb1e65ff54a7f9076814cbef8c12268f5acfcb6b150571bae940c417ca48efd8287fd9581662ee829f27c2a4ea4224bbd4b247daecfc53eebe20ba5b6d54cb62742be2b59deb6671511a3117f99c6f37d535b10378161405fbedb51dd6d45c37364a5c418bb9321138a3b6caa0545b8a651be34d4d59"}, @generic="95fda46363c3bc795b65dcf264be7cddc8afa303f07cdce47893dc3891c1ecb1a5516b7b159f8d1199868611e14badbf3d7e5b1cbd5b39f7c426430f297ae3b4ece95c201e1bbaf225616267dcf9035744dc6a5975f084010856986e1b9c64b3f4506a6d9fe432256a9e8079dd2bbc2aafc613ece915f3d98d19d570333bee87eb99142b1e1f4e40b742ca169874eda9b76cebb88dca99462365b26d2e63c1b127ec49085263e2458953e58f92e007740fa591aaf6df31193caf8ff7", @generic="c40f29db2519fd6c2336066a32a9241b9ca29f15c20c45f16b0e9ac78549c98417a5874dad3d2fa7a417bf49fbde7fadf1db76fb16080877172af33354c876a3f37a343ec051a28cb6aac2850ec769c0db12a728c89f12489832d72160d0269ef91c33c59efd5f9b03ae58e68e0a5c469df90a1f67913fc61bccca823b39e86c61fbca8fedd0f0bcd7023f9388e8d1951d96abd4ac4ccb82b9508581b97ae494beab91c6efa56e49d9b27488b06e355a25f709f39ffa9205dbd2527a06b78e94436c3c8ec657a0604ea15a11e2320b729e5a1307b1801c8cd9", @typed={0xaa, 0x50, 0x0, 0x0, @binary="8826a16e761368a048d31bbd4927fb45452281564aad3d54f254fea9bef59f7760ff30e53e6aab58adb4efb7b23b97c76961ee4ca431cd75e18042977b33359e4ff0e07245451208a12f9a14b91029cb17a87d099abca9897a333ba3967739ca4f2496e2608d791876d27c8b1b8d369eef1273997d79b3fdb0432e82c52d2fdd099df382c7e5839848737b023d98968c6b9bd4ae631419c25de17bc0791c72554256b2ed8051"}, @typed={0x8, 0x1b, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@remote}]}, @generic="8f1528f2b6ab2c867b5b9f00b5e7d5be3159094d9f127d981141d9a7b0b92fac167770f4ab9c351c73980b929c98b71f15505fa7bcd074650480ba398f491cc2477b8d718781525dcf062c3a19700a4050dbc884bec5c7e734a400c3916115a88f38e83e95a715a08b614ba18a3400c78a27f997e2cbb8c5344aecdb165d844f6860150809548acc8dd6a9878bd9fb4be81bd835b34c2d48877ea2", @nested={0x100c, 0x86, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r4}]}, @typed={0xc, 0x7b, 0x0, 0x0, @u64}, @typed={0xd, 0x70, 0x0, 0x0, @str='/dev/sg#\x00'}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@remote}, @typed={0x6, 0x15, 0x0, 0x0, @str=')\x00'}, @generic="ff26c6e3dcaffd013af608a360452e6f2bb9469b80007f67b0f6b44617f52f58467d6467e2bc03ae54e62bf2c79c27df345fd2908e31024a66015ce5b72f03d16c31861bbf2780d4ad38dcfe237da2647a4f30a5587b02b1281760760efaabb466087a521e2d36c908"]}, 0x1548}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffc, 0xef, 0x1d, @buffer={0x0, 0x60, &(0x7f0000000140)=""/96}, &(0x7f00000001c0)="0840dc2186f847e4fb03e1d6ae5507eb8340ef052fcd59cf7012ec21117577735ad3bb1630909a4b659bf76532f92333fef77328a20b8ff50e82a56c8727652652186003d1091bc45baa476524cf308a72028874c18076ea0cd61bfc25ab27a350dbab585d134c3f7079b6045b5a1aaa96fb4274e97188bbdac752e8754c2703c0a8a35a3fbf77f16bcd3c42d0cd8979a61fb3d31fdd5d8236ecab260d306ff0dc0916a338d337693f7193146214837b4cd9c968f57b0040444efe621ddbff6ac7c3516319eea2706336e6042759c3b8cdc1f055d660634bd2f3d70a9c5b0e5566cd6c95036808b147fc7e4641ef29", &(0x7f00000002c0)=""/160, 0x2, 0x10000, 0x2, &(0x7f0000000380)}) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:43:42 executing program 7: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="0000f2a0d3a3e57f9aa3bba48362812ef35f13e4fb87ec8da1d764b753049e0ed70934a98ab9739f3ca68cb398d68e81d7e6b7648e8ebb2e4ddc4d5bc1df79bcbf11aeadb585005bd470e7b901a08865554abd9e11e8811f1211e3ee98bfcf272ab8233544ab30bd4ff12cccd1ca5105755c4984a8f031bb05f627c2e682a38c6dc7bcc04e24b6f0bb844594de8738248c70d163eeacf8429fc7d050090323d809e54efe8014fc66072e07825a3250c40710b024a8790791426113b0c40219"]) 23:43:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x68000000}) [ 1193.473752] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x12, r2, 0x0) 23:43:42 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r3, 0x805, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x38}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5dd, 0x7c}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r6, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b4d0056d47cc2d07", "6f2cd42c4dfcc99402bcc91abfd29898", "399f5a12", "2a48333b0dcb7325"}, 0x28) 23:43:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x10}) [ 1193.503857] 9pnet: Insufficient options for proto=fd [ 1193.525135] 9pnet: Insufficient options for proto=fd [ 1193.530616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000000c0)={0x6cd, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 23:43:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x48}) 23:43:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1193.567280] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1193.573826] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1193.583473] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:43:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000008}) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0x0, 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1193.644166] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:42 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_blk', 0x10800, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x10010, r2, 0x5b297000) [ 1193.728605] 9pnet: Insufficient options for proto=fd [ 1193.737376] 9pnet: Insufficient options for proto=fd 23:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x450042, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000040)={0x15142100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0x33, {r1}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:43:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000004fc0)='net/vlan/vlan0\x00') pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005100)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005040)={0x4c, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x16}, [@generic="afb286fb13838aebcc79ae800970c99dccef5797f72d5295b4460e2f79c8", @typed={0x8, 0x59, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x49, 0x0, 0x0, @u32}, @typed={0x8, 0x82, 0x0, 0x0, @uid=0xee01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000140)={0xffffffff, 0x40, [0xfffffffffffffffb, 0x8, 0x7b42, 0xbc], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='u\x00']) 23:43:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4c}) 23:43:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:43:59 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d7aca9234710d6ebe1ae63caa49831ab8331bf1d4c978eb3379cd41c0fe4753b951526f24506b48dd068962fa42421d9ddac4717c5a00e6813789bd559cae73649cd748c15e01604db7c14708c3dcb465c30cf84db11466509e958d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 23:43:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fallocate(r0, 0x3f1639517f7d1cb, 0x2, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x6443c0, 0x81) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x9b, 0x5, 0x6fe, "c2b5a12b6c684e80c16a3f99f5d19bd7d714d3a22e007c09c8582f62ac7a976354f3ff8f042f12d1c52c47101dd7d976604091ae7a49f09f857cf388442f1b00875eb2351960b0265f64f525a14634e6730ba0343c311dd2c6a6bd5bb8d0166cbd30f5a867f704e80d3d8e1113f5e6a71be84f88265d9b253bc924aef0458f3fbe8d6340189bdb03e594a6152561719132acaa1332d88bb2103b91"}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) 23:43:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6c000000}) [ 1210.602712] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1811939328 (only 16 groups) [ 1210.625616] 9pnet: Insufficient options for proto=fd [ 1210.630012] 9pnet: Insufficient options for proto=fd [ 1210.632574] cgroup: fork rejected by pids controller in /syz7 [ 1210.636775] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:43:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'wlan1\x00', {0xfffffff8}, 0x3}) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20200) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:43:59 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380040007069d1d5883779ca4cf72e5992acddc72f91a3790548d07e0a4d7bcd0f696ebd0d7ca2d7f2730df96c8f5d8f4a5728521c93067bc314386596a114e310eb594f40c3d3d6ca3671c3c65760b17bc3a536d48ac239ac1542486a477a7707fbdc9b29b278fc0a129febaddc97229159e093", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf255c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b95500001c000052a770a9ea6c0008006b00f00000000800"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x804) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0xc3, 0x800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x20}}, 0x4000) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x400) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) splice(r1, &(0x7f0000000380), r5, &(0x7f0000000440)=0x1000, 0xffffffff, 0x17) mq_notify(r4, 0x0) dup2(r3, r4) prctl$PR_SET_TSC(0x1a, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r6, 0x0) signalfd4(r6, &(0x7f0000000480)={[0x7ff]}, 0x8, 0x800) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) creat(&(0x7f0000000040)='./file0\x00', 0x65) prctl$PR_SET_TSC(0x1a, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) 23:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 23:43:59 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) openat(r2, &(0x7f0000000340)='./file1\x00', 0x2080c0, 0x100) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@version_L}, {@cachetag={'cachetag', 0x3d, '\'*):!!/:\']'}}, {@fscache}], [{@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '/proc/timer_list\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[,.%{^^{'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@uid_gt={'uid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="fbb0"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x5, 0x620e5e39, 0x0, 0xffff, 0x2, 0x1, {0x0, r4}}, 0x23) 23:43:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x74000000}) [ 1210.772038] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1210.782093] 9pnet: Insufficient options for proto=fd 23:43:59 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x0, 0x9, 0x3, 0x400, 0x5}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket(0x8, 0x800, 0x3ff) write(r1, &(0x7f0000000080)="730b2be10ac4a81bdaa311fa9151026258578df4809ee307e8fb1e0440aab8c1da8c594f40f605a1e17c", 0x2a) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1210.822775] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1946157056 (only 16 groups) [ 1210.895023] 9pnet: Insufficient options for proto=fd 23:44:12 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x48000, 0x183) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x4a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x81040100, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086604, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) 23:44:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:44:12 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1abd5c58, 0x68}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x4000008) 23:44:12 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x68}) 23:44:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x0) 23:44:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7a000000}) 23:44:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = inotify_init() ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0x6, 0x17}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) r8 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000090}, 0x20004840) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) [ 1223.727521] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2046820352 (only 16 groups) 23:44:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_io_uring_setup(0x461, &(0x7f0000000000)={0x0, 0x44d7, 0x0, 0x2, 0x30a, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x10001) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r1, r1], 0x2, 0x0, 0x0, {0x0, r4}}, 0xb22) 23:44:12 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r1, 0x1ad, 0xf211, 0x2, &(0x7f0000000040)={[0x6]}, 0x8) [ 1223.766009] 9pnet: Insufficient options for proto=fd [ 1223.777604] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:12 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000141) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x1, 0x1, 0x7, 0x7, 0x0, 0x62f, 0x2411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x9080, 0x0, 0x200, 0x1, 0x20, 0x100, 0xea9, 0x0, 0x8, 0x0, 0x78c}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e736066642c7266646eef3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 23:44:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7f030000}) [ 1223.903903] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2130903040 (only 16 groups) 23:44:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0xc, &(0x7f0000000000)="0cb3500295813eddc446fb87", 0x40, 0x0, &(0x7f0000000040)="5d8c3eca03954129180135f2cc4fada979ecbf1c3e076b80812c4d0c3e0a56c7b34a090b8d17d1ff354db975fcfe317cd73c2003e3409bc388f48a528003f623"}) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 23:44:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)) 23:44:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6c}) 23:44:12 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xc9, 0x4) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x2000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1224.040161] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) clone3(&(0x7f0000000140)={0x220003080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x31, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:44:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80002) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) read$char_usb(r1, &(0x7f00000000c0)=""/171, 0xab) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:30 executing program 6: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = clone3(&(0x7f00000001c0)={0x1240900, 0x0, 0x0, 0x0, {0xfffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xfc, 0x7, 0x2, 0x7, 0x0, 0x3a, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x7, @perf_bp={&(0x7f0000000400), 0xd}, 0x1a0, 0x7, 0x153, 0x8, 0x100000000, 0x8, 0x3, 0x0, 0x6e, 0x0, 0x7}, r2, 0x3, r4, 0xb) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r10, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000380), 0x2, 0x0) copy_file_range(r8, &(0x7f0000000140)=0x305, r9, &(0x7f0000000180)=0x8, 0x3, 0x0) mq_notify(r6, 0x0) pread64(r6, &(0x7f0000000440)=""/195, 0xc3, 0x80) mq_notify(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0038fe6bec49d8e2ff77b30a3b0a9eb77e2f1e896bef06ee5cf18a0bedffff0000"]) 23:44:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xffffe000}) [ 1241.438559] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 4294959104 (only 16 groups) 23:44:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000000c0)={{r0}, "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"}) r2 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:44:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) dup2(r2, r3) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616ef33d6605b9928d5737c91f3cfe020ed43aad642c726664216f93acefac97d89f36b932e8013d38d43f5b5d9c2b08", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 23:44:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x74}) 23:44:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1241.472651] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1241.479861] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:30 executing program 6: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x5, 0x5, 0x28, 0x82c, 0x0, 0x3e, 0x10001, 0x3de, 0x40, 0x3d6, 0xff, 0xa484, 0x38, 0x1, 0x3, 0x6, 0x8}, [{0x3, 0xfffffa6d, 0x2955, 0x0, 0x2, 0x64, 0x9}, {0x4, 0x9, 0x5, 0x8, 0x1000, 0xffffffff, 0x1f, 0x9}], "19a9869a9db98abc026848bf3c75871ff57cb32e8202a4aa85d43682bf7390bffe8b1a6a6cf2bd3d73a991da07d364e91797f42af72fa6d20f0019de7aa9a1d06e0d2764d5ae0390b98e2716b4bf0d3889b1571b2f5e27b2192ca2d0ac5b265c0ff50fee7f0acb088545955833d08339155ebca1affabba10efae36551cf96cc08162cb913ed9a5f7779c979db927bdb3f131c8e1209dad92feda004e4f7b062a23697986339c79a54d3c1747c187c24f831bfec94eec982cfaa7d89c6e423794008c7184eab4fdd9045b8d2bfa2464df59ee50b9138a84c9d5bae1b14aea84a1478215b2de3582bc3f0912fa08baa5fddc78011d57aa4f455d868", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7ab) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7470616f010000001c0000006e6f355ac97dbe6c02c6e8146f762acd5a54d013c58b966f84f64e9cc7d0a4688dcfb2e8284f91f61a133aaef0445b6abce7ce6edb607590683fb2598c9a2d00e0f8f74eba312d94a0473a32b39d95b8eabb8333500c8421bc44c2a57f1bf5aa351e094e8aea77c25ed68843be87192ae968c4371c3d73ce4958be04e8a97266e13d6c8975a56934ea34ccff3a374987958641f40712f6f4065ed99bc9d6cebc9b938587f77dc2e8426ae9306e783a060fb0cf6d6ff747e32b1aa5231e87e795", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:44:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) io_uring_enter(r2, 0x5b1e, 0x17d2, 0x2, &(0x7f0000000000)={[0x100000001]}, 0x8) 23:44:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x80000, 0x130) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x141802, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0)) [ 1241.603093] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1241.621082] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:44:30 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "44006b691c6625a79b48f52a422036900d1591c09c89138a7fd9da1b32671c08c9d6798d006638b7e153d248677f23a0493407c3fc56ee4f55059516972b6718", 0x26}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x40) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x1, 0x6, @buffer={0x0, 0xba, &(0x7f00000000c0)=""/186}, &(0x7f0000000000)="db", &(0x7f0000000180)=""/111, 0x5, 0x26, 0x0, &(0x7f0000000040)}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 23:44:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x59481200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x63c, 0x26, 0x10, 0x70bd27, 0x25dfdbfe, {0xc}, [@nested={0x4, 0x80}, @generic="47889d3e4bcfcbc51e7c228eb25d86ea9dceaef5e966d22b617a85fa9e6cdebbb13254ca37bd2b9852b4f2ee99d418357396e92f649635621687a189", @generic="e411f1ccf21525b2fc1c82508d005fea8efe44c75dd54c80a20b14b1acde8815ea879db7e669be64a2874f09a367f0bf6b0b99671d0ec2ba55fcdb15b4b6820f62b5b0685a5395c85c01d78e0adcaec5cdda5c52d99b21d4d9df30c648bb5799b1b615becf5e190532dd9b6a616e0103f15436d9a2fb610f0c0f5cb36236016235b846ccf23bd420c209c56d1ba37874e4998c2039853289a8dac47a4e70c26da37d5a1a3a68ee02737f26f67e4c69a2b0ad98d30c728c588c3540153de5146b", @nested={0x193, 0x3b, 0x0, 0x1, [@generic="7f031245804185cee9cf21a229fdb4330a96720e7c4972d5cf2843640b54c1749b4aa899688fdfedcad15551e58842a1b01625f3799888884c2b0f3a2a13a9b902e859f7cbca8d9f30e1b2cd92b08cc709023099511f4f2680ef68a725c743e2f767e71f9aa750e7ccba76", @generic="faa0844b1db41357256fe3ec93c5f97882d8eecdfc606ddb272fe1776d1f714aaa3b041be1c9949762c69d3f79b3f04d95a53aad1035f7c7f90dcd29860a8b92f24093429f2ac225a657814afe7a9b5631601e9a6b38dbe1401eab552fa19b0a9ead52ad8e75a32c108f5ef65019cc4c304fc3de43582b187425fdd0434b8c98372269", @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="6b15c60b74bd072e6e778f42ab7139d4cf3bdc4e70ec6932caaae96c263f5ca653a7589cdc6669a0bfdbbc7d3d", @typed={0x50, 0x33, 0x0, 0x0, @binary="5b9df444956784fb1d7b43ec1de93339880779953e5367cbea00ac78ec0fd31b7a67891a371fce440fe6c29408a04c3d816446a3d1ccfc1b1f8ae50e9c7b75e83958635327a94055d47a22f5"}, @typed={0xc, 0x31, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x8e}]}, @nested={0x11a, 0x66, 0x0, 0x1, [@generic="92db9c95a883010a365b8cc46644045477776be617a1a9ceed8c499a72411e8ca27398a88900725c", @typed={0xc, 0x62, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}, @generic="66be32a2630cd319ee85", @generic="4fe250e01f018bd7d0d1e1d9aba6e35b28ce", @generic="0659e3b712eb3ad9f4384d66c7407ac495551ad8c3d2e4b50a618b6a161143d569bbd66631de353270092d16249878f07f9acd077155b33c9a4cfad6c422519b0ca2d575a042ddb1ed760664a9f49d6d534bcee8c914e88729feae32b0bac6ed74dbcb96de1c25ff5f4cddebb0328c80e3b44d08853b1bf4254859abfffed8fbf7d4bc1ac8bba43a6cfd578f17fedfaf0491e5e302e7f6aa6be15da20d7c4b9aedd654ab8d7b20e1c53714615ccb70b1f909feccf94f59b3130216a915bc"]}, @nested={0xc9, 0x49, 0x0, 0x1, [@generic="1c29a533bb778ea24c261b506fbc074ea56d0a2161081b6996db3095595a657b8cb0bdad3db93d333788f0286af39001fc364ea227e16e7f33863a1c8688395d2aa10f202630e862ae191d4c6366dbec3d4a08e0e2b30fe63c78f8734ebc2dd9e2d62b66313cf27fcd610f07a5b20507c5e30546a642c4788422b32a8ea647fef621d6e9f146620975a85cd6e22ca3059bf014abe8aa4e33b4a763e57bec6a13982838a5cc948e2b78c3f3a4e2456fab5008c3cfd2363cbec3236eba86ad12cbe9d8a870c0"]}, @generic="8734765d5c0dc672989a853040685af10eb32a9e299bd580fc73cf2175b57945195fbea1b19fead3efe57fe6051baa42f47475512f01313b4a9d847185ea01c9da92df54726107eac1f1c076d1260fe9160c033be7c631fb32b43da5b0111add3acbb5e629e2d0b51124b425234ad932bf15f63d2b743e55db459a7a160934f9976b86072388a96c38192342616dca91125aa53e1f7054207e090ab6a977a6102d3271c6949715788f720455e104beef22578802e626c76edd1677239d232a050f535d72", @typed={0xe7, 0x51, 0x0, 0x0, @binary="69e0a93daa6d1eca30462f83ab7d32e8be08ee4f91feade901e40e0bfd73c35ee8cc21ba06dee89ccfa391d7448ceffb5e7068914bd06366f57b7ee6610ecb952381cbebdd6bfac960114080649a18c79158a04164e565160fb04b9351ec467515c5220410f12e32829f20f86aba01f940f39b9f7374292bf806f764653f15c056fe2069a9dd33226598d0a5f4a76d7b92f147b9197f8782b40850de41b8c592d752f29b288057dbdcdab3de1e037fd75ddb48692bb2683d549fe4b1924817d974fe008b1e4b244d2ddd27afa8c68f87891a01cf62f4e38d7a75828624744d85a73b69"}]}, 0x63c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:44:30 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/10, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:44:30 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@loose}, {@cache_none}, {@access_uid={'access', 0x3d, r3}}, {@cache_mmap}, {@fscache}, {@access_user}, {@nodevmap}, {@msize={'msize', 0x3d, 0xff}}, {@access_user}, {@cache_none}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r4 = getpgid(r2) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000700)=""/164, 0xa4}], 0x2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r5, 0x0) clone3(&(0x7f0000000680)={0x21943d00, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {}, &(0x7f0000000400)=""/253, 0xfd, &(0x7f00000005c0)=""/182, &(0x7f0000000500)=[r4, 0xffffffffffffffff], 0x2, {r5}}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r6, 0x0) fchmod(r6, 0x4a) 23:44:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 23:44:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x7a}) 23:44:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x2}) [ 1241.720726] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1241.723121] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1241.740844] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1241.797803] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x3}) 23:44:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x16400) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x300}) 23:44:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000001c0)={0x3012000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file1\x00'}) 23:44:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1254.148565] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) 23:44:43 executing program 6: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) syncfs(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x69f7, &(0x7f0000000080)={0x0, 0xcbc9, 0x2, 0x2, 0x1b1, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0xc3bf1bf619da8e93, r1, 0x10000000) r6 = signalfd4(r2, &(0x7f00000001c0)={[0x6]}, 0x8, 0x1400) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r6, &(0x7f0000000200)={0x10000000}, r7, 0x3, 0x0, 0x1, {0x0, r8}}, 0xffffff4c) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00000000000000c711059feeef4209368cb80c03b590f8a3fd7713b82276c7b9a6a22405ddbf26d30181f78ee4c228b8420598dad7dfbc8b59a82f17214710eae4337f653be878b69c8e808b2417ad55f3d04b7d969df3abb22be6724ff2e36fb8323c27c471bd8a0e03b5131042c1e013a20f86ba8d175de5b32d214c00000000000000", @ANYRESHEX=r3, @ANYBLOB="614e66ff4d432156c701d7e84d587dd2d374350e0eba4a5ee95c"]) 23:44:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$getflags(r0, 0x1) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:44:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="17ac398f91fa6c487259d0951436833d60f6b32a9fe190d042cf0003ca2eed8aaf02ab761a4cd5d2c0f4e12fe5d7904ddf8c592b049e4d5b23429aa4474de09f62e040b246383339bdb393270d0d882fcec4f47294977cf80de966f94423cebaad15b90cd27a56970bc1946f2e25bfc860abdc49da9f86097d3d75c4d66b040cde8b5ac9ef66c2a536f27ae0ba7e67b62f6e16b612c562d2da5fc37b9f5cbefaedd433a5b2cb920f6a5f8b6da308789a5836ee601e4f8c7187", 0xb9}, {&(0x7f0000000200)}, {&(0x7f0000000240)="a9c3569fa0c9fff4e4ec57ecc5fbfb138ef45a370c210c6e1bead62e1863c69ce2eafb5b7a702ab755c578fe5cdae3936c42e4d3f40da84d42520f414e9e0b1a56e53736f41034d4cb760dbc31ea8ea166179f025828551adb5cba5a833a3ce3edab16", 0x63}, {&(0x7f00000002c0)="f44e4e687e92315ebecf128a697a1b45ebf032c8291e04f56fd10eb8c0c5b3aff4ad1c05c5726e0721866e7eecab66c8609ceeac3223501f84fad3b001e98406ae9d44fbfd22eaab9cfb546e78607c049516a347561038dc29199ede82683206c8e51de9f233577d8e95acb291c034add4f461e4b3101a9ae53a1585306be661eef7dbe6ef573295e02ff875a0d73d739ec6693677998cb5def21baf990926b82ec9590a2323f30fd133c1cb63874d23d8f02ce9b0e301cbc2bb8c53f5a3a7943080170892e56c8d905e22561092411c9163f52de7ab450ff96b1f34", 0xdc}, {&(0x7f00000003c0)="c55e5dbd924cc8a73e1dce85d545986a1accad9227f0a9d4325b0bb5175aabca733a70b571e7035378bea58c9f4d374333d7ea263862ad142b42724a6a52ed21bc163fcbecade3fbac7d0efacf56c9af8ce9ac782098876fda73db9e1ab87c3c6034a90f487cc73887a2c25bc9632c8866967fe013fc01ed189826aa561aef7bc8da68d7972885f6106c77f92b38ad6dd05423085f83967aa55d2ef78cf243076ce10db21577da1d28231509da7aa3007edde605c44ce89b5663", 0xba}, {&(0x7f0000000480)="2faca9b7ca35d22bcbe6c7b174", 0xd}, {&(0x7f00000005c0)="8be3e3c63f3846967fe8fa5e14dd114d262d77b3e57d271f64919d803279ebfa6aacb66cf6025b76cb0d85c84c8a4bf689b6440dafa1cd55b8554e4d8894c3552357060952d0e40dcd367a61a2c691dc75e561690fb09aea13b6a4d045e900104f66cdd6e2555a8ba0ff671914a08f88fac7a76eea2daf9f37bf88f8bfafb52f3d46faca0a5992da2dfc8207c6d4f431064bdae460b52385ddc972fd7cdaf33e1d10a4917b0f05caa30002746a906d729d10087cb4e5e75fa52d60ace8abb114d1353467b90d", 0xc6}, {&(0x7f00000004c0)="2d7a65e27b30baf1eb5d617e7129cdd2f29d9c2cccace438580c6709cfbae539c8f9a123f6c50ac3ffa9af1c22e102e736943852b809566dabb13fce6d7c283c03c3f1cb1385d42fbeeaacab5d2138cad76589f3c08fa20e5ada4ca84661da2f7e2b82ba48ff1c66510da464d2e84acdfea365f844ffebcdc62ae3d319d745ee440a2c3fa3435d5e4a1034d2abda0831c0454b946492f564c208395a3c9a4acd1581678cd13df6b4f6fbfd57f95eec710c8df77737", 0xb5}], 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="2000000000000000000000000700000089108164dee4ab17f80b5927c7ecdea31c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a010102e00000010000000004276386254240e4639420341e511ea1ced0c6e98127a991ca607de5f253054bd6739472555597d98395c7029de8cf9ce61dddb83f7ef0e347ea62f21e3bb11cfb4845378233dd5e5bb9dc9bdeca08385c857418a0a3a930540d631724f5c1b94956caacb8236e51afb3d545b9d336c23686f0286bc9df73c6b511b1825447df47818896ff29d2a3000ff2994b057bdd8ed6526eac6d12a293c3a707f067a68fef755e11f2e589d0b6d3351a45ffe438762418465d444436eba57714c267076a96101321d78b31e02ac72319621253dec55a74ebd5de53d1d3688b18c4585a"], 0x40}, 0x10) socket$packet(0x11, 0x0, 0x300) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000007c0)={0x9, 0xfff, 0x0, 0x1, 0x2, [{0x40, 0x3ff, 0x6, '\x00', 0x1001}, {0x40, 0x6, 0x28000000000000, '\x00', 0x2000}]}) mq_notify(r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) mq_timedsend(r4, &(0x7f0000000200)="4a0cba59a31f32160302f3f24ba684f9dee4b1d9f874dd4a8684a07746", 0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) fcntl$dupfd(r3, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1254.182894] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1254.190683] 9pnet: Insufficient options for proto=fd 23:44:43 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x132f2985}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000a00)={0x3, 0xfffffffffffffffd, 0x26, &(0x7f00000009c0)=""/38}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000940)={0x0, 0xfffffffffffffffc, 0x4f, 0x20, @scatter={0xa, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/189, 0xbd}]}, &(0x7f00000007c0)="d4bb2c47ff1bae6038813673568bf76e6f7533112a1792f7c8048d1c436755adaf9781f2c146f59180eb03ed582e4bebc0162ffab114df9c245d862d29fecc7605eb13906df74df87a8832862d8be9", &(0x7f0000000840)=""/190, 0x8000, 0x5, 0x0, &(0x7f0000000900)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 23:44:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000940)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000a40)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000080)="d32cd9fbb321bce5430a3d1a0ef96a2eb26c8c8eaaf7da3b01001a25c0e4398f5241d92b7017555c5e36da6137b5862486654230d4d82b416125ef39598344650b13805dbb39b64b979e251297ac859f40394be28ddcf3ca831b6cafd2d6d9ac48643cdc3b9e12126e2628e8e4f916fb9bedcfc0c87b7b6ab284d1", 0x7b, 0x1000}, {&(0x7f00000001c0)="63ce07c74fb915cb679e83fb9533a348e7854ee4b0c1588da86a3c70d54930a28ccee8c8dfb531e664ca40e02361683507f11fad343533ed0eabd94eeeaafab92638589c586dd1628d93ac4f30d65362ba3d470d039d5dece5e57acaa7c22a4afe1628e2b311d1193ebd6e686ca35ae378fab9cd373182842f05532ab0cdeabd5135d9808b8ac12315", 0x89, 0x9}, {&(0x7f0000000280)="fb28a6485e6fd6c08dd13a390b16df1725b91199c1b7b24a95aaa5a459bb5752c25f843ad15097abc778107eb1e4c007e824c42108d0969e22e626dbbf2b86c193bfd4e4244ecc0d9f63b207d1cd0ff73e9678cfce8f4e2417a3d143fa4830c57616d5a7c63a5dda84f57d99d0e2e3e77920491ca90b4c46446704c9779354c7d52682a64336276b99e5f714ec910f0f01bff990cc2ecadffc17ff961bfb0623478f205baa960d642995176a0311ebfdd4051500ee45dfa9a89d291a", 0xbc, 0x400}, {&(0x7f0000000340)="70eeed471c5686ef3813419c7d65820fab0d6737192c08ae5698bad5d7d389288ce2832a7794f95d8b37e34b94d5ebb004997cce39fdc1a841f9f7e8ac48954ae26302cfda16ceddfc061e9a8d961d77635b572074ce79a4022fcaaa0f535b4b070b21854c4db693f8f16c814851b396118a11391856eb739a0b5411fbc2780ad31ab9a57661f90799263ae350a417ef6268da070a9264735e5bbaef18d279d0e8b50f0851322385d474a0dccb7233dea19c94900a1a04ff1312b7bfa562aa419845a5ca", 0xc4, 0x3}, {&(0x7f0000000440)="008c7219446849be171e85374e38749d", 0x10, 0x9}, {&(0x7f0000000480)="9cb5d6c448fa58d842c159a18f81d27ff25e3f91b357d2d2b379506fc884c0984df15dd282f2e614a42d6034d71ada3b568cca18ebb99281fac6ea6116436738b6d1738a0252dff82488bea0b23e5972474d6b57b85ac6c03ed56b420a21e3f2a828a887ec6ba2fa1f304048a0031c45f1967b2946a5305fc05be29a99bad44f403d9a3f763cce4c2de0d2f1066c1c2049def3b4b959eddb69673b1589e41995ba178d4306b85e585c8aea7c4e02ccf72f2348f61e1d4b5522628a990387c622f5ac41439d7a5276807400b1943082334ab9aef58cdedc263600610643", 0xdd, 0x81}, {&(0x7f00000005c0)="c01afadc84c66a7ad737678cf0638c3b63b885cfd57096671176e922c92557055d30b23464c4580dfa5df53f861abe902b1d4e58960168c9dfad03e8dcd962953bb94bd3c36c18d3d106dcb5f527491646ade9caaf06780d4146d53c83df047dc9a283babf7b2e440e4735ced10aa5fe59023fb3a9194b494cbd9cdc65d55bc946c49543eb6c314f018d9b4651c2b377ac01548cb7a00d11f10a8c0dec02187fb871fb3ec064aa45c83b865a6aa3eeccd4892205b35c19924f9f4bc073ed124590d127fe3c27c68e7e9564f3144eec48b2564009d280c63165cec6093917d31b2369f0b0f8a71066", 0xe8, 0x3000000000000000}, {&(0x7f00000006c0)="1d208fc75bfc9b3ca3b89707648885cf49a87e52149d550d87867c638cfd66f3152bf69ffcd13e9491ddddedea6b25619d9cd574ec60f8d0eb7ef3b42e99b661181fcb06de9441c209664672aa9f9204cbfa19cbc9df0965733d0e02e0d975a7f379f0366daeb01876d064820504410756ae753cc94be057005df4c1bb2d3df1678e77453d276721aafc0c921904fed69bc39955389b1ec83f1cdc6e182d2d9bf93de5b2b3f0f1e74f", 0xa9, 0x5}, {&(0x7f0000000780)="502eb5c18fbae84d48965625d7bcab01b338e69fd6a8127d7f0cfae46cf5cdc4f912e0a6669b730596edb6182b48d806cfa693404648aa8126be0c7a00ba8f42d18680527383e3765665423380bd047ae4c5d24a9262e5b5225addaaf1f8b7ecd7fdf381cdc819bc8582ac4bc1be766139b0e394dbf8b6ebc79e14c06a445cbe509f1672eefe9d36c4b425", 0x8b, 0x8000}], 0x90800, &(0x7f0000000a80)={[{@map_off}, {@nojoliet}, {@mode={'mode', 0x3d, 0x7}}, {@session={'session', 0x3d, 0x15}}, {@uid={'uid', 0x3d, r1}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@block}, {@nocompress}], [{@context={'context', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}, {@uid_gt={'uid>', r2}}]}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) clone3(&(0x7f0000000140)={0x60000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 23:44:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x32e}) 23:44:43 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x1000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '*@{'}}]}}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) fcntl$setsig(r1, 0xa, 0x3b) 23:44:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x163001) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4}) [ 1254.312856] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1254.363259] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1254.378030] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1254.415980] loop0: detected capacity change from 0 to 69206016 23:44:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:44:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x4003011, r1, 0x0) 23:44:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x5}) 23:44:55 executing program 3: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)=""/233, &(0x7f0000000040)=0x25) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:55 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="002400803f5de6", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 23:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x500}) 23:44:55 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74726101d43d00"/21, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='e)']) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x2001) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000008c0)={r4, 0x5, 0x80000001}) syz_io_uring_setup(0x6195, &(0x7f0000000180)={0x0, 0x619e, 0x4, 0x0, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0x3, 0x0, 0x7ff}, 0x10001) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={r4, 0x7, 0x1}) 23:44:55 executing program 0: clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086604, 0x0) 23:44:55 executing program 0: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/218, 0xda, 0x0, &(0x7f0000000240)=""/153, 0x99}, &(0x7f00000000c0)=0x40) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x480000, 0x29) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1266.357506] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:55 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r8, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x1, 0x2, 0x4, 0x8, "177ccb9821259252addf6a50b6b9451b92c9f695711be262f9c9b20a7c45c24d8b75bb0ac5fffe588df217146a2c00bfe48da90ee9bad114c1f68928bd9808", 0xa}, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r11, 0x0) io_uring_enter(r11, 0x22b1, 0x56ea, 0x1, &(0x7f0000000000)={[0x5]}, 0x8) [ 1266.389086] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1266.417018] 9pnet: Insufficient options for proto=fd 23:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x600}) 23:44:55 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20800) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @local, 0xfde4}, 0x1c) 23:44:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2042, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) [ 1266.542122] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:44:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6}) 23:44:55 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = inotify_init1(0x80800) fallocate(r1, 0x10, 0x4, 0x6) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:44:55 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0xc002, 0x28) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1266.661220] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1266.733792] 9pnet: Insufficient options for proto=fd 23:45:08 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:45:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x700}) 23:45:08 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:45:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 23:45:08 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:45:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x3ff, 0x29d, 0x6, 0x451, 0xa, [{0x400, 0x4, 0x4, '\x00', 0x5002}, {0x8dcd, 0x9, 0x100000000000000, '\x00', 0x804}, {0x9, 0x0, 0x1, '\x00', 0x108}, {0x8f01, 0x80000001, 0xffffffffffffffff, '\x00', 0x6}, {0x18dae12f, 0x8000, 0x8, '\x00', 0x2204}, {0x1000, 0x3, 0xfffffffffffffff9, '\x00', 0x900}, {0x614, 0x87cc, 0x7, '\x00', 0x500}, {0xb428, 0xfffffffffffffff9, 0xd2, '\x00', 0x1000}, {0x1f, 0x2, 0x7fffffff, '\x00', 0x2002}, {0x7, 0x2, 0x1, '\x00', 0x700}]}) fcntl$setlease(r0, 0x400, 0x0) 23:45:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x7}) 23:45:08 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xb0002011}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1280.046548] 9pnet: Insufficient options for proto=fd [ 1280.059925] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1280.091713] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1280.100555] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1280.131504] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0xa00}) 23:45:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open(&(0x7f0000000140)='./file1\x00', 0x10c00, 0x0) signalfd4(r1, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:45:09 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 23:45:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0}, 0x7f) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r4, 0x81, 0xe8b, 0x62d7}) pidfd_getfd(0xffffffffffffffff, r10, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000000c0)=0x8) fsync(r3) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000000)) 23:45:09 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r1, 0x4) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1280.220068] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1280.232843] 9pnet: Insufficient options for proto=fd 23:45:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=r2}, &(0x7f0000000200)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001540)={0x0, 0x0}) r4 = fork() r5 = fork() r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001600), 0x20a000, 0x0) clone3(&(0x7f0000001640)={0x40040000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), {0x1d}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/108, &(0x7f00000015c0)=[r2, r1, r3, r4, r5], 0x5, {r6}}, 0x58) ptrace(0x11, r1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) [ 1280.260069] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0xa}) [ 1280.333808] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1280.433508] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0xe9, 0x3, 0x3, 0x0, 0x9, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1d2bfcc1, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x88, 0x40, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x77b2) [ 1294.613160] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:23 executing program 1: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r0, 0x0) pipe(&(0x7f0000000580)) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x544401, 0x100) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/cgroups\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) fallocate(0xffffffffffffffff, 0x48, 0x4075, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 23:45:23 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x10}) 23:45:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x2e03}) 23:45:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:45:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) dup2(r0, r0) clone3(&(0x7f0000000040)={0x100048080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fork() ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:45:23 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000200)='./file1\x00', 0x181180, 0x120) open_tree(r1, &(0x7f0000000240)='./file0/file0/file0\x00', 0x1800) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="8787ced5000000000000000000", @ANYRES16=r5]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x8040, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}, {@fscache}, {@nodevmap}, {@access_user}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@appraise_type}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1294.646544] 9pnet: Insufficient options for proto=fd [ 1294.663851] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1294.672069] 9pnet: Insufficient options for proto=fd [ 1294.688850] loop1: detected capacity change from 0 to 41948160 [ 1294.787957] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x79a, 0x7}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xc9f) socket$packet(0x11, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r3, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x5}, 0x4) mq_notify(r2, 0x0) fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1294.841981] 9pnet: Insufficient options for proto=fd 23:45:23 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4004000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r8, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r0, 0x0, r0}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001dc0)={0x13b4, 0x25, 0x20, 0x70bd2d, 0x25dfdbfc, {0x1c}, [@generic="a2a68ce574146b0b342fc4b621189463b40c4ac53e0d87385b88d1e1f749dd08f5a6ebdf7dbb06ba79ff391797122ad455da28df", @typed={0xc, 0x53, 0x0, 0x0, @u64=0x7fff}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x58, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x88}, @generic="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", @typed={0x8, 0x7, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x320, 0x7e, 0x0, 0x1, [@typed={0xc, 0x44, 0x0, 0x0, @u64=0xffffffffffff78da}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x7f}, @typed={0x15, 0x14, 0x0, 0x0, @str='/proc/timer_list\x00'}, @generic="57aaf80c6bbfaad1df71e0fa038723356298a2a3a11bb392a89ba29d094709dbd3b7e89dabf7902c7b9c3f4a8963b2c223d7caaa28015b0f9bf2a15f65e39b4da91156664a1bc645359c8bcbb86c090cd91dda7a3f91764506b6e3b7db86302caaffcc4001b9354d29d761c90d9c22404b9abff8cca9b152f24774b1eb4a264d73be50fda6b74de550401b460962e9f51ff2703f54d1bd14b7a25fceea2cd4cad2f3ca89bffb5d28e35e9f838cb7f852b527ca6ece5435a81af50182068ed83077a2e36304a7fcc09e8b5ad15f768a57ef4c8bfda6ff1a1fdeb25a18f3d780fbf035d51568", @generic="1444720ac962e3736727e355a9050b9060303754839033ea", @generic="ac6617df824779a42de30598f3ead4e5c3ce3e151f33bca2e9783783b30f57f379a767000b09b1a6262c246b2e6b4d400ad8a42645359ac9ab47f5a2afe6c6b5d3993e387661dd8580e7a9e97d4d4f551b68a3818a9581a628f90e24eca07dd9786ec68f547343795372c9db3482ad39b00c89ca47865367f8b89bb0a61c732370b9c67c6591999d23b11dbc27", @generic="a74b6b135fc94cd381732ca2fe80be74119fd5c38867736b343255d8038ad4c1f80f3781a5baa0f2c2a9df9523c644b2f6bf8c9ae16692055af0ff8ada77b412bf73ea34af85bdda8aad5d106a19e7136ecca0cfb077dbc56befeb18d713afa7592bf7898a40c640ef469d72e779cd4da3b1de005ed8400cdbda5e380482", @generic="07c125e4994f69ab7c2241f78b57e30be051974c5a0162f5523175cd43aafdd3439cfd6a70166d7fd5f5d6fa4a3921205d618aa6b6c9123b25adf1ce67cb751a83547ac97035d8e38ea98f4028455cc1da127561fc757caab01c438685", @generic="93215837f016e0839a7ca4afec6a4be5a79cb545e3c69ef15c6a5dd37ee71d4b7214d5185832f903074c6a663895bdc8c311b148fb55188bee7c387c1c5a38b3a3151bca3e4a2b47bb638182025714c2b24484aa7c1b69ff5ecc20e1be863d7fa070de8c28da44f0a5174dfd98c7b1b976c0cf85f0a003e3ec9753", @typed={0x4, 0x3f}, @typed={0x4, 0x60}]}]}, 0x13b4}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20044090) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}}) write$binfmt_misc(r11, &(0x7f0000000080)={'syz1', "eea14107d080c6dbb05d7e7c93829b1c7e21df20681bc9414dd2a23513309c666649fef03f4f641fb3e112dce313f1633e0d2736dde62c82080f5eee2f9e9e5098e3287319926dd7401e1321a99f73f248e6556fc0ca3f1ab33987c402d391e50ce261c8c454397d466824165bb51798573081abcfe3f59d6c"}, 0x7d) [ 1294.869519] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4800}) 23:45:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x48}) 23:45:23 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() clone3(&(0x7f00000001c0)={0x2090a000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x3b}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000001940)=""/4096, &(0x7f0000000180)=[r1], 0x1, {r0}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='1&']) 23:45:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x400, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x1000, 0x4, 0x10000}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000001640)=0x400) mq_notify(r5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r6, 0x2285, &(0x7f00000015c0)={0x0, 0xfffffffffffffffb, 0x7e, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/147, 0x93}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/196, 0xc4}]}, &(0x7f00000003c0)="458f1f13737887888cad8a9972b2da93f046af0f855621d28fd90a4346d8cd9886f603157468ccaf79706b234638e2748bdf84a4385823c6f2aafde03ac474770f1cc6f9213619116909767b2be6fd51264345b0ca03e03455c8147e0f2ca0bb2b72c6fa7e083e638e2605ee26af73c6353ef4c6a52fa6baaa7ded914fbf", &(0x7f0000000440)=""/200, 0x8001, 0x0, 0x0, &(0x7f0000000540)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10, r5, 0x0) [ 1295.004520] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1295.032010] 9pnet: Insufficient options for proto=fd [ 1295.033163] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040100, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:45:38 executing program 3: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="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"/344], 0x164}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000041) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000000c0)=0x7, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001b40)={'batadv0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000003100)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="53bb521c1df4da0ab061822ecd4f0ce650ba31208a54af28e65539b2d25f14869f6730af8ba529b5ff5ff2ae5d6351738b442ff530bc0354cf45cbdac2afc9e6082ce487923fdf1b2b4cbbf43f598d97f566a4479b86541a49d0a7c790b8075fab43ebb4bfdd5bd7cf69008062", 0x6d}, {&(0x7f0000000400)="5a54b63ad62aadda4571dd8daaf1c40f85a93161cca2ce554175a41e52005a22430d367a33eaf43ffdbd507643e16d08d8704f30c0918b9981a5ae88cce7c05e83862f323a64dd994fbfe2badf3959f14b04572c06ee2daa6970e9", 0x5b}, {&(0x7f0000000480)="1bb38f555af9351799794622c06ba09ad2647c081d8970e469014c56f94a51c6cf35767b9c7395399924b3ee40881567f81435dfa69baff163a79828100a920288269a364138ce687340d2cf94cd7a79049219453130372209f5b4f5b7c8b17c1723accac578f86f52093b091bf372e8b7c0a5986ea5dea733cd5b792d0aa0db6084", 0x82}, {&(0x7f00000005c0)="e8550baa808112d1f651536f8f6eaa91fa152c056ff71968f63503d750887334de79c607fbf5a53b6769a05c5e7b622f35dc490b121e8b2a35628a63de584eaa80bb802ebaf68fe6564165ecfd13811c096be79eca28c94fea89c4d68beca1cfaf111148558d1110138b2517da3c3771095dde9ca856cbaf7473ce690f11282dfbf20342313d52b6092f53b061977d5620395ff60383e5431468fda0ebc4de55211154e456", 0xa5}], 0x4, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0xff, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x6c, 0xa, '\x00', [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x20}, @calipso={0x7, 0x20, {0x3916c5ff2b4e07, 0x6, 0x5, 0x7974, [0x9a25, 0x80000001, 0x8000]}}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @ra={0x5, 0x2, 0xce}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000008c0)="f2e09dda57ea65ede42c706c0a3dd53dc09b9b5906b28425afcefce164b8c8b88fbf01e79acf91e0a2912482ced7558e8d6de917bf8d9273c52380712ff37248340bb9e11a33595a6537deefb9428afa9ec05883a7e27109098a75f36fcdf78a", 0x60}, {&(0x7f0000000940)="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", 0x1000}], 0x2, &(0x7f0000001980)=[@rthdr={{0x78, 0x29, 0x39, {0x84, 0xc, 0x1, 0x3f, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)="75662fbad2b18851b2d1e39c74a1a18c8c0d22435f1e49d715388bc6b2e79d878dcec6e1602e5f26cc0f354207888ae4b84d078aaca84e91ff15701acb091717fbd21eb8fc29ae21af7208de3d9d54636fe9ce47b37a58726e453d5b918ca7d91b5b921b5389a70dbf9d3b1a64381d37768b6b1270aa79e797d6ca9b61a23873932af02d9baf487a0337e74dfbfb21b54e471cfc239e", 0x96}, {&(0x7f0000001ac0)="e1766224cba50a", 0x7}], 0x2, &(0x7f0000001b80)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff7}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x32, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x2e0}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1f, 0xff, [0x5, 0x5]}}, @enc_lim={0x4, 0x1, 0xd1}, @generic={0x20, 0x6, "c93b228bfc9a"}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x1, [0xff, 0xccff, 0x2]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @hopopts={{0x38, 0x29, 0x36, {0x1d, 0x3, '\x00', [@ra, @jumbo, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r4}}}], 0x168}}, {{&(0x7f0000001d00)={0xa, 0x4e21, 0x3f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x7}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000001d40)="903d187a3f538e6bc2c8503593508387842ee626095df7f154dce2704a9b7d377593c32fb78dd5244c", 0x29}, {&(0x7f0000001d80)="4ac281a0b2ee77e4", 0x8}, {&(0x7f0000001dc0)="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", 0x1000}], 0x3, &(0x7f0000002e00)=[@hopopts_2292={{0xb0, 0x29, 0x36, {0x5e, 0x12, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0x86, 0x72, "eef22e11321caf6c1d2a12b04450856fe215f8097c184188d8fc66a77701b5b905d6f86156b46a3d0711dc732b16c7929d3d0610ff7df9dbd2c162068fbeef1160f42f52bed7dbf9aff1784745935d4c853d39de5f034b72fc0462c3443e7d3244166ad311c41393a8d799dd832b2af33e16"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x2b, 0x28, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0xff, 0xa5, "ce38c582bfc9ea7d366ddbe1376e3ebadca15d8772f9661d6741d9b49606d843d86e85738a0f0a631ac6ffa7eab3272456a0723491dfc270b394b7ab43557a3edfe8ec2d64c7ca66add8fbf7829415cff0200ee553eae80ff234ecc3e114e6d2b618e179b25943295531517d432f14aee0ff8b05c3cb554be4e7dd7e631947d1ab085069b77b857721662f77a99fd5a4f00f4e98f52619939a51c1e73d06f4dbad293470b1"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x74, "cecae754b8bd6bbb6eccd87d5ec83efb8fede59cb2232a6d5d73d2063b87a4093469b6a7ae76730ac67dd5eece8c54f753c03d95df1ba17f5d2b8ead2ea277696bf5a9c0f99dbdf175525318b781d723ed9c47ebc95eace6eb5dbe32ccc3a73fce9863c724cf568610e827148b64feca9f5a3721"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0xc, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x78a56cf124814c63, 0x8, 0x6, 0x6, [0x9, 0x7, 0x8, 0xcaca]}}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0x5}, @ra, @jumbo={0xc2, 0x4, 0x7c6}, @generic={0x1, 0x27, "1c37dcfff047a12eebc5e9be5dd597db1b1f8a8eb2cf67d1cada89f89d2a176e2412cfb52a9a51"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x2f0}}], 0x4, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x30, 0xffffffffffffffff, 0x0) [ 1309.425347] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:38 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0xff, 0x9, 0x2, 0x3, 0x93, 0x29c, 0x40, 0x301, 0x4350, 0x1468, 0x38, 0x1, 0x0, 0x401, 0x6d}, [{0x2, 0x8, 0x40, 0x4ee, 0x9, 0x32b3, 0x2, 0x9}], "087ab9f5e74a887f3c7e95e3043b7ce1bd37155ebff187d534caf19f3fba1ac7e31391eae4268339636f00f99f840244514f4b86102d8496afbeee29", ['\x00', '\x00', '\x00']}, 0x3b4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x0) 23:45:38 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_open(r1, 0x0) mq_notify(r2, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x260000, 0x12) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 23:45:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4c}) 23:45:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x4c00}) 23:45:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x200, 0x80}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000001c0)={[0x8cc3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:45:38 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) r2 = socket$packet(0x11, 0x3, 0x300) sendfile(r0, r2, &(0x7f00000000c0)=0x8, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00c0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r4, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRESOCT, @ANYBLOB="8787ced5000000000000000000", @ANYRES16=r6]) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x20040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0xbf32}}, {@cache_none}, {@mmap}, {@aname={'aname', 0x3d, 'wfdno'}}, {@cache_none}, {@cache_none}, {@version_9p2000}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@version_L}], [{@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsmagic={'fsmagic', 0x3d, 0x85}}]}}) 23:45:38 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x0, "f0d5"}, 0xa, 0x800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) [ 1309.471143] 9pnet: Insufficient options for proto=fd [ 1309.473723] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6800}) [ 1309.517177] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x60314400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, 0x0) 23:45:38 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2a2c1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:45:38 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x24, 0x1, @buffer={0x0, 0xdb, &(0x7f00000002c0)=""/219}, &(0x7f00000000c0)="b2d6526a4f23d8fe2a45be704aa5c8e8bb5a47800b908cd6e39e5d054e9b25ce2344ea6e", &(0x7f0000000100)=""/115, 0xfff, 0x10034, 0x2000003, &(0x7f0000000180)}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) fallocate(r2, 0x37, 0x8, 0x10000) [ 1309.566711] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1309.597505] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 23:45:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6c00}) [ 1309.648430] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1309.662008] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:38 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) 23:45:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x7400}) [ 1309.722612] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 23:45:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x68}) 23:45:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x7a00}) [ 1309.784209] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1309.846087] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) VM DIAGNOSIS: 23:50:46 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e2edefc678 CR3=000000000e36c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000040000000000000000 XMM02=61746f7420636578650a0a0100010101 XMM03=6578650b006e6567206365786508006c XMM04=7320636578650a006567616972742063 XMM05=7220726f747563657865110073646565 XMM06=75662063657865090073747261747365 XMM07=616469646e616320636578650e007a7a XMM08=6e6567206365786508006c61746f7420 XMM09=650a0065676169727420636578650b00 XMM10=75636578651100736465657320636578 XMM11=78650900737472617473657220726f74 XMM12=616320636578650e007a7a7566206365 XMM13=696d20636578650d006574616469646e XMM14=616d7320636578650a00657a696d696e XMM15=000073746e696820636578650a006873 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f52b1c8b010 CR3=000000000e36c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184870580000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000