0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0xb}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:13 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481230, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2195.612497] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2195.617275] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2195.648499] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe00, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:00:13 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2195.770203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2195.777018] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2195.784937] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:00:13 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481258, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2195.828036] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:00:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) [ 2195.920930] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2195.970136] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:13 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481230, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2196.065234] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) open_tree(0xffffffffffffffff, 0x0, 0xc01) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0xb}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) 05:00:13 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481263, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1802, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2196.247160] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:14 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481258, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2196.400126] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2196.416212] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2196.424249] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2196.475107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:00:14 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481264, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) [ 2196.519891] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:14 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481263, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2196.628447] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2196.722157] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2196.833366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2196.847955] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:00:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:31 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481225, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:31 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481269, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:00:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) 05:00:31 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481264, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2213.915031] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2213.940425] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2213.962466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2213.975073] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2214.025477] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:00:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x0) 05:00:31 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481269, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:31 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126c, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4002, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2214.220947] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2214.264193] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2214.388385] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2214.471443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2214.569467] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 05:00:46 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126c, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:00:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:00:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x0) 05:00:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:00:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:00:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2229.385079] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2229.419996] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2229.459288] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2229.480359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:00:47 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2229.499483] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:00:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2229.516277] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2229.619158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 05:01:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481275, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340), 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80fe, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:01 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x0) [ 2243.640374] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2243.700059] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xc0fe, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:01 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481275, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2243.846141] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2243.865452] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2243.896315] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2243.912989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2243.987868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2243.991425] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340), 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481278, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe803, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:01 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481278, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:01 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc04812ba, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2244.405292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x218, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2244.437275] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2244.464116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:01:02 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc04812ba, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2244.512874] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2244.579455] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2244.644289] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2244.711438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 05:01:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) 05:01:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340), 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:17 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) 05:01:17 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf401, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2260.230592] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.246001] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.271370] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.294683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.310612] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2260.312954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:01:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2260.446970] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:01:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) 05:01:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2260.516444] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfc00, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:18 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2260.632351] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.658483] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2260.767098] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2260.796943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2260.814197] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2260.902198] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:01:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:32 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:32 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x80087601, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfe80, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2275.307849] blktrace: Concurrent blktraces are not allowed on loop14 [ 2275.319384] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2275.337830] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2275.405181] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2275.531209] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2275.533077] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2275.569327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2275.744969] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:01:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:46 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfec0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2288.674033] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2288.676790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2288.748170] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2288.749534] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2288.758027] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2288.760833] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:01:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xff00, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2288.826184] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:01:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2288.929457] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2288.969511] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:01:46 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x40081271, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:46 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:01:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2289.006937] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 05:01:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xff0f, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:01:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2289.188241] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2289.214162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:01:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2289.275892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2289.312262] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2289.371491] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2289.457110] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2289.606548] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:02:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:03 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x5451, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:03 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2305.465019] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2305.549033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2305.590263] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2305.732023] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2305.738889] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:02:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:03 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x4b49, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2306.004212] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2306.090906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2306.344565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2306.364102] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2306.451253] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:02:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d16"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:19 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x68, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2321.464861] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2321.557157] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2321.617432] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2321.631991] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2321.637263] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2321.643047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2321.646172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:02:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:19 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x58, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2321.920394] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2321.984055] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:19 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x74, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2322.053846] blktrace: Concurrent blktraces are not allowed on loop4 05:02:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2322.120937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2322.125495] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2322.136882] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2322.143062] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:02:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2322.220274] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x68, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2322.448131] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2322.498062] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2322.527899] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2322.531902] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2322.645145] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:02:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:35 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:35 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2338.207282] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2338.322497] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2338.328521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2338.381055] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2338.395442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2338.406390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 05:02:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2338.460429] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 05:02:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x74, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x8000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:36 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2338.689957] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2338.747917] blktrace: Concurrent blktraces are not allowed on loop14 [ 2338.774099] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:02:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:02:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2352.730546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2352.797484] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2352.821442] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2352.844328] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 05:02:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2352.943169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2352.949230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:02:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x18020000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2353.050990] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 05:02:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2353.124174] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb91, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2353.155628] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:02:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:02:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3bb02a5e, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:02:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2353.358431] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2353.487889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2353.504423] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2353.507181] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2353.539294] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2353.579142] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2353.675084] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:03:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 1) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x40000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2366.336644] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2366.370504] FAULT_INJECTION: forcing a failure. [ 2366.370504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.373458] CPU: 0 PID: 13104 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2366.374966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2366.376680] Call Trace: [ 2366.377232] dump_stack+0x107/0x167 [ 2366.378000] should_fail.cold+0x5/0xa [ 2366.378796] _copy_from_user+0x2e/0x1b0 [ 2366.379623] move_addr_to_kernel.part.0+0x31/0x110 [ 2366.380636] __sys_connect+0xda/0x1a0 [ 2366.381424] ? __sys_connect_file+0x1a0/0x1a0 [ 2366.382371] ? rcu_read_lock_any_held+0x75/0xa0 [ 2366.383330] ? vfs_write+0x354/0xa30 [ 2366.384101] ? fput_many+0x2f/0x1a0 [ 2366.384855] ? ksys_write+0x1a9/0x260 [ 2366.385651] __x64_sys_connect+0x6f/0xb0 [ 2366.386493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.387547] do_syscall_64+0x33/0x40 [ 2366.388338] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2366.389386] RIP: 0033:0x7f85e0168b19 [ 2366.390164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.393917] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2366.395497] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2366.396953] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2366.398420] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.399898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2366.401367] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2366.407175] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2366.428209] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2366.435415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:03:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x40020000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 1) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2366.554155] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2366.641305] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2366.650085] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2366.687004] FAULT_INJECTION: forcing a failure. [ 2366.687004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.688489] CPU: 1 PID: 13131 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2366.689234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2366.690165] Call Trace: [ 2366.690475] dump_stack+0x107/0x167 [ 2366.690865] should_fail.cold+0x5/0xa [ 2366.691275] _copy_from_user+0x2e/0x1b0 [ 2366.691697] move_addr_to_kernel.part.0+0x31/0x110 [ 2366.692227] __sys_connect+0xda/0x1a0 [ 2366.692644] ? __sys_connect_file+0x1a0/0x1a0 [ 2366.693131] ? rcu_read_lock_any_held+0x75/0xa0 [ 2366.693624] ? vfs_write+0x354/0xa30 [ 2366.694039] ? fput_many+0x2f/0x1a0 [ 2366.694431] ? ksys_write+0x1a9/0x260 [ 2366.694848] __x64_sys_connect+0x6f/0xb0 [ 2366.695289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.695841] do_syscall_64+0x33/0x40 [ 2366.696240] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2366.696793] RIP: 0033:0x7f3076304b19 [ 2366.697201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.699247] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2366.700065] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2366.700832] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2366.701593] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.702379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2366.703141] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 [ 2366.776371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:03:21 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x14f, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 2) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 2) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x50000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:21 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4000, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2383.361406] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2383.421915] FAULT_INJECTION: forcing a failure. [ 2383.421915] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.424425] CPU: 1 PID: 13159 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2383.425811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.427476] Call Trace: [ 2383.428012] dump_stack+0x107/0x167 [ 2383.428747] should_fail.cold+0x5/0xa [ 2383.429516] ? __inet_hash_connect+0x843/0xee0 [ 2383.430453] should_failslab+0x5/0x20 [ 2383.431218] kmem_cache_alloc+0x5b/0x360 [ 2383.432039] __inet_hash_connect+0x843/0xee0 [ 2383.432931] ? __inet6_lookup_established+0xa90/0xa90 [ 2383.433975] ? inet_hash+0x80/0x80 [ 2383.434704] ? __lock_acquire+0x1657/0x5b00 [ 2383.435584] tcp_v6_connect+0x119d/0x1c30 [ 2383.436429] ? rt6_get_cookie+0x390/0x390 [ 2383.437264] ? mark_lock+0xf5/0x2df0 [ 2383.438065] __inet_stream_connect+0x86b/0xda0 [ 2383.438984] ? lock_release+0x6b0/0x6b0 [ 2383.439782] ? lock_downgrade+0x6d0/0x6d0 [ 2383.440614] ? inet_init_net+0x5a0/0x5a0 [ 2383.441434] ? mark_held_locks+0x9e/0xe0 [ 2383.442266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.443313] ? __local_bh_enable_ip+0x9d/0x100 [ 2383.444233] inet_stream_connect+0x53/0xa0 [ 2383.445082] ? __inet_stream_connect+0xda0/0xda0 [ 2383.446049] __sys_connect_file+0x15b/0x1a0 [ 2383.446920] __sys_connect+0x165/0x1a0 [ 2383.447701] ? __sys_connect_file+0x1a0/0x1a0 [ 2383.448605] ? vfs_write+0x354/0xa30 [ 2383.449007] FAULT_INJECTION: forcing a failure. [ 2383.449007] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.449354] ? fput_many+0x2f/0x1a0 [ 2383.449382] ? ksys_write+0x1a9/0x260 [ 2383.453062] __x64_sys_connect+0x6f/0xb0 [ 2383.453876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.454914] do_syscall_64+0x33/0x40 [ 2383.455663] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2383.456688] RIP: 0033:0x7f3076304b19 [ 2383.457435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.461120] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2383.462650] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2383.464074] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2383.465499] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.466931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2383.468357] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 [ 2383.469818] CPU: 0 PID: 13158 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2383.471252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.473019] Call Trace: [ 2383.473563] dump_stack+0x107/0x167 [ 2383.474318] should_fail.cold+0x5/0xa [ 2383.475095] ? __inet_hash_connect+0x843/0xee0 [ 2383.476027] should_failslab+0x5/0x20 [ 2383.476799] kmem_cache_alloc+0x5b/0x360 [ 2383.477634] __inet_hash_connect+0x843/0xee0 [ 2383.478557] ? __inet6_lookup_established+0xa90/0xa90 [ 2383.479610] ? inet_hash+0x80/0x80 [ 2383.480341] ? __lock_acquire+0x1657/0x5b00 [ 2383.481234] tcp_v6_connect+0x119d/0x1c30 [ 2383.482098] ? rt6_get_cookie+0x390/0x390 [ 2383.482949] ? mark_lock+0xf5/0x2df0 [ 2383.483744] __inet_stream_connect+0x86b/0xda0 [ 2383.484672] ? lock_release+0x6b0/0x6b0 [ 2383.485479] ? lock_downgrade+0x6d0/0x6d0 [ 2383.486344] ? inet_init_net+0x5a0/0x5a0 [ 2383.487179] ? mark_held_locks+0x9e/0xe0 [ 2383.488013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.489069] ? __local_bh_enable_ip+0x9d/0x100 [ 2383.490200] inet_stream_connect+0x53/0xa0 [ 2383.491078] ? __inet_stream_connect+0xda0/0xda0 [ 2383.492212] __sys_connect_file+0x15b/0x1a0 [ 2383.493100] __sys_connect+0x165/0x1a0 [ 2383.493908] ? __sys_connect_file+0x1a0/0x1a0 [ 2383.494848] ? vfs_write+0x354/0xa30 [ 2383.495620] ? fput_many+0x2f/0x1a0 [ 2383.496368] ? ksys_write+0x1a9/0x260 [ 2383.497160] __x64_sys_connect+0x6f/0xb0 [ 2383.497981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.499052] do_syscall_64+0x33/0x40 [ 2383.499813] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2383.500859] RIP: 0033:0x7f85e0168b19 [ 2383.501617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.505350] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2383.506900] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2383.508348] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2383.509792] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.511244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2383.512692] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2383.525287] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2383.599570] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2383.616568] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:03:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5e2ab03b, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2383.664181] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:03:21 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:21 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1c0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2383.819263] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2383.916676] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2383.995041] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:03:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7a06b7d9, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:21 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2384.163961] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2384.167045] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2384.172002] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2384.299163] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:03:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:33 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 3) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x91ffffff, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 3) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2396.363359] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2396.378183] FAULT_INJECTION: forcing a failure. [ 2396.378183] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.380796] CPU: 0 PID: 13238 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2396.382200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.383878] Call Trace: [ 2396.384420] dump_stack+0x107/0x167 [ 2396.385213] should_fail.cold+0x5/0xa [ 2396.385990] ? create_object.isra.0+0x3a/0xa20 [ 2396.386929] should_failslab+0x5/0x20 [ 2396.387707] kmem_cache_alloc+0x5b/0x360 [ 2396.388527] ? lock_release+0x6b0/0x6b0 [ 2396.389442] create_object.isra.0+0x3a/0xa20 [ 2396.390338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.391367] kmem_cache_alloc+0x159/0x360 [ 2396.392213] __inet_hash_connect+0x843/0xee0 [ 2396.393111] ? __inet6_lookup_established+0xa90/0xa90 [ 2396.394180] ? inet_hash+0x80/0x80 [ 2396.394916] ? __lock_acquire+0x1657/0x5b00 [ 2396.395803] tcp_v6_connect+0x119d/0x1c30 [ 2396.396652] ? rt6_get_cookie+0x390/0x390 [ 2396.397495] ? mark_lock+0xf5/0x2df0 [ 2396.398307] __inet_stream_connect+0x86b/0xda0 [ 2396.399232] ? lock_release+0x6b0/0x6b0 [ 2396.400038] ? lock_downgrade+0x6d0/0x6d0 [ 2396.400879] ? inet_init_net+0x5a0/0x5a0 [ 2396.401705] ? mark_held_locks+0x9e/0xe0 [ 2396.402538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.403653] ? __local_bh_enable_ip+0x9d/0x100 [ 2396.404579] inet_stream_connect+0x53/0xa0 [ 2396.405437] ? __inet_stream_connect+0xda0/0xda0 [ 2396.406411] __sys_connect_file+0x15b/0x1a0 [ 2396.407286] __sys_connect+0x165/0x1a0 [ 2396.408071] ? __sys_connect_file+0x1a0/0x1a0 [ 2396.408979] ? vfs_write+0x354/0xa30 [ 2396.409735] ? fput_many+0x2f/0x1a0 [ 2396.410477] ? ksys_write+0x1a9/0x260 [ 2396.411260] __x64_sys_connect+0x6f/0xb0 [ 2396.412078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.413120] do_syscall_64+0x33/0x40 [ 2396.413874] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2396.414929] RIP: 0033:0x7f85e0168b19 [ 2396.415686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.419431] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2396.420984] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2396.422471] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2396.423944] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.425418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.426907] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2396.439424] FAULT_INJECTION: forcing a failure. [ 2396.439424] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.441906] CPU: 0 PID: 13244 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2396.443360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.445089] Call Trace: [ 2396.445636] dump_stack+0x107/0x167 [ 2396.446409] should_fail.cold+0x5/0xa [ 2396.447186] ? create_object.isra.0+0x3a/0xa20 [ 2396.448123] should_failslab+0x5/0x20 [ 2396.448912] kmem_cache_alloc+0x5b/0x360 [ 2396.449745] ? lock_release+0x6b0/0x6b0 [ 2396.450592] create_object.isra.0+0x3a/0xa20 [ 2396.451499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.452554] kmem_cache_alloc+0x159/0x360 [ 2396.453420] __inet_hash_connect+0x843/0xee0 [ 2396.454458] ? __inet6_lookup_established+0xa90/0xa90 [ 2396.455251] ? inet_hash+0x80/0x80 [ 2396.455803] ? __lock_acquire+0x1657/0x5b00 [ 2396.456461] tcp_v6_connect+0x119d/0x1c30 [ 2396.457092] ? rt6_get_cookie+0x390/0x390 [ 2396.457715] ? mark_lock+0xf5/0x2df0 [ 2396.458320] __inet_stream_connect+0x86b/0xda0 [ 2396.459015] ? lock_release+0x6b0/0x6b0 [ 2396.459608] ? lock_downgrade+0x6d0/0x6d0 [ 2396.460234] ? inet_init_net+0x5a0/0x5a0 [ 2396.460847] ? mark_held_locks+0x9e/0xe0 [ 2396.461463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.462240] ? __local_bh_enable_ip+0x9d/0x100 [ 2396.462927] inet_stream_connect+0x53/0xa0 [ 2396.463554] ? __inet_stream_connect+0xda0/0xda0 [ 2396.464260] __sys_connect_file+0x15b/0x1a0 [ 2396.464901] __sys_connect+0x165/0x1a0 [ 2396.465477] ? __sys_connect_file+0x1a0/0x1a0 [ 2396.466147] ? vfs_write+0x354/0xa30 [ 2396.466738] ? fput_many+0x2f/0x1a0 [ 2396.467292] ? ksys_write+0x1a9/0x260 [ 2396.467892] __x64_sys_connect+0x6f/0xb0 [ 2396.468511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.469305] do_syscall_64+0x33/0x40 [ 2396.469876] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2396.470660] RIP: 0033:0x7f3076304b19 [ 2396.471242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.473143] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2396.473932] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2396.474680] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2396.475412] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.476158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.476949] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 [ 2396.482041] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2396.507126] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2396.519981] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2396.567550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:03:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xd9b7067a, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:34 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2396.614667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:03:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 4) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2396.688858] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:03:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 4) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:34 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb91, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2396.720186] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:03:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe8030000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2396.753255] blktrace: Concurrent blktraces are not allowed on loop14 [ 2396.820665] FAULT_INJECTION: forcing a failure. [ 2396.820665] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.822163] CPU: 1 PID: 13275 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2396.822923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.823752] Call Trace: [ 2396.824027] dump_stack+0x107/0x167 [ 2396.824424] should_fail.cold+0x5/0xa [ 2396.824836] ? __alloc_skb+0x6d/0x5b0 [ 2396.825248] ? __alloc_skb+0x6d/0x5b0 [ 2396.825660] should_failslab+0x5/0x20 [ 2396.826088] kmem_cache_alloc_node+0x55/0x370 [ 2396.826587] ? lock_downgrade+0x6d0/0x6d0 [ 2396.827046] __alloc_skb+0x6d/0x5b0 [ 2396.827415] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 2396.827947] sk_stream_alloc_skb+0x109/0xc30 [ 2396.828420] tcp_connect+0xf13/0x4480 [ 2396.828845] ? __siphash_unaligned+0x19c/0x310 [ 2396.829360] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2396.829869] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2396.830348] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2396.830917] tcp_v6_connect+0x1425/0x1c30 [ 2396.831391] ? rt6_get_cookie+0x390/0x390 [ 2396.831859] ? mark_lock+0xf5/0x2df0 [ 2396.832318] __inet_stream_connect+0x86b/0xda0 [ 2396.832831] ? lock_release+0x6b0/0x6b0 [ 2396.833276] ? lock_downgrade+0x6d0/0x6d0 [ 2396.833692] ? inet_init_net+0x5a0/0x5a0 [ 2396.834143] ? mark_held_locks+0x9e/0xe0 [ 2396.834560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.835139] ? __local_bh_enable_ip+0x9d/0x100 [ 2396.835657] inet_stream_connect+0x53/0xa0 [ 2396.836136] ? __inet_stream_connect+0xda0/0xda0 [ 2396.836660] __sys_connect_file+0x15b/0x1a0 [ 2396.837145] __sys_connect+0x165/0x1a0 [ 2396.837580] ? __sys_connect_file+0x1a0/0x1a0 [ 2396.838037] ? vfs_write+0x354/0xa30 [ 2396.838474] ? fput_many+0x2f/0x1a0 [ 2396.838880] ? ksys_write+0x1a9/0x260 [ 2396.839316] __x64_sys_connect+0x6f/0xb0 [ 2396.839768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.840354] do_syscall_64+0x33/0x40 [ 2396.840775] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2396.841349] RIP: 0033:0x7f85e0168b19 [ 2396.841765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.843829] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2396.844679] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2396.845391] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2396.846097] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.846809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.847515] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2396.870393] FAULT_INJECTION: forcing a failure. [ 2396.870393] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.871669] CPU: 0 PID: 13285 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2396.872386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.873207] Call Trace: [ 2396.873480] dump_stack+0x107/0x167 [ 2396.873850] should_fail.cold+0x5/0xa [ 2396.874259] ? __alloc_skb+0x6d/0x5b0 [ 2396.874647] should_failslab+0x5/0x20 [ 2396.875026] kmem_cache_alloc_node+0x55/0x370 [ 2396.875472] ? lock_downgrade+0x6d0/0x6d0 [ 2396.875891] __alloc_skb+0x6d/0x5b0 [ 2396.876255] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 2396.876735] sk_stream_alloc_skb+0x109/0xc30 [ 2396.877173] tcp_connect+0xf13/0x4480 [ 2396.877565] ? __siphash_unaligned+0x19c/0x310 [ 2396.878020] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2396.878517] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2396.878971] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2396.879503] ? __lock_acquire+0x1657/0x5b00 [ 2396.879964] tcp_v6_connect+0x1425/0x1c30 [ 2396.880407] ? rt6_get_cookie+0x390/0x390 [ 2396.880848] ? mark_lock+0xf5/0x2df0 [ 2396.881259] __inet_stream_connect+0x86b/0xda0 [ 2396.881741] ? lock_release+0x6b0/0x6b0 [ 2396.882156] ? lock_downgrade+0x6d0/0x6d0 [ 2396.882602] ? inet_init_net+0x5a0/0x5a0 [ 2396.883040] ? mark_held_locks+0x9e/0xe0 [ 2396.883474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.884030] ? __local_bh_enable_ip+0x9d/0x100 [ 2396.884517] inet_stream_connect+0x53/0xa0 [ 2396.884965] ? __inet_stream_connect+0xda0/0xda0 [ 2396.885464] __sys_connect_file+0x15b/0x1a0 [ 2396.885922] __sys_connect+0x165/0x1a0 [ 2396.886339] ? __sys_connect_file+0x1a0/0x1a0 05:03:34 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2396.886814] ? vfs_write+0x354/0xa30 [ 2396.887321] ? fput_many+0x2f/0x1a0 [ 2396.887694] ? ksys_write+0x1a9/0x260 [ 2396.888084] __x64_sys_connect+0x6f/0xb0 [ 2396.888490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.889001] do_syscall_64+0x33/0x40 [ 2396.889376] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2396.889882] RIP: 0033:0x7f3076304b19 [ 2396.890269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.892081] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2396.892833] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2396.893532] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2396.894245] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.894952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.895654] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 [ 2396.926419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2396.934422] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2396.941334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2396.956516] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:03:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2397.078531] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:03:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf4010000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:34 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2397.193418] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2397.217224] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2397.240798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2397.244870] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:03:34 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf5ffffff, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2397.327082] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:03:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2397.474284] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2397.496996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:03:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 5) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x910b, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 5) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2000, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfc000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:03:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2412.851444] FAULT_INJECTION: forcing a failure. [ 2412.851444] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.854512] CPU: 1 PID: 13352 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2412.856127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2412.858026] Call Trace: [ 2412.858655] dump_stack+0x107/0x167 [ 2412.859499] should_fail.cold+0x5/0xa [ 2412.860454] ? create_object.isra.0+0x3a/0xa20 [ 2412.861601] ? create_object.isra.0+0x3a/0xa20 [ 2412.862666] should_failslab+0x5/0x20 [ 2412.863542] kmem_cache_alloc+0x5b/0x360 [ 2412.864480] create_object.isra.0+0x3a/0xa20 [ 2412.865488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2412.866663] kmem_cache_alloc_node+0x169/0x370 [ 2412.867710] ? lock_downgrade+0x6d0/0x6d0 [ 2412.868735] __alloc_skb+0x6d/0x5b0 [ 2412.869626] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 2412.870840] sk_stream_alloc_skb+0x109/0xc30 [ 2412.871848] tcp_connect+0xf13/0x4480 [ 2412.872744] ? __siphash_unaligned+0x19c/0x310 [ 2412.873789] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2412.874890] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2412.875934] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2412.877077] ? __lock_acquire+0x1657/0x5b00 [ 2412.878082] tcp_v6_connect+0x1425/0x1c30 [ 2412.879055] ? rt6_get_cookie+0x390/0x390 [ 2412.880001] ? mark_lock+0xf5/0x2df0 [ 2412.880884] __inet_stream_connect+0x86b/0xda0 [ 2412.881920] ? lock_release+0x6b0/0x6b0 [ 2412.882831] ? lock_downgrade+0x6d0/0x6d0 [ 2412.883774] ? inet_init_net+0x5a0/0x5a0 [ 2412.884702] ? mark_held_locks+0x9e/0xe0 [ 2412.885629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2412.886832] ? __local_bh_enable_ip+0x9d/0x100 [ 2412.887888] inet_stream_connect+0x53/0xa0 [ 2412.888851] ? __inet_stream_connect+0xda0/0xda0 [ 2412.889942] __sys_connect_file+0x15b/0x1a0 [ 2412.890934] __sys_connect+0x165/0x1a0 [ 2412.891830] ? __sys_connect_file+0x1a0/0x1a0 [ 2412.892849] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2412.894081] ? trace_hardirqs_on+0x5b/0x180 [ 2412.895077] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2412.896314] __x64_sys_connect+0x6f/0xb0 [ 2412.897227] do_syscall_64+0x33/0x40 [ 2412.898066] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2412.899225] RIP: 0033:0x7f85e0168b19 [ 2412.900067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.904201] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2412.905915] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2412.907525] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2412.909123] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.910728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2412.912329] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2412.952419] net_ratelimit: 2 callbacks suppressed [ 2412.952435] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2412.963439] FAULT_INJECTION: forcing a failure. [ 2412.963439] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.966435] CPU: 1 PID: 13358 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2412.968095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2412.969917] Call Trace: [ 2412.970506] dump_stack+0x107/0x167 [ 2412.971332] should_fail.cold+0x5/0xa [ 2412.972174] ? create_object.isra.0+0x3a/0xa20 [ 2412.973175] ? create_object.isra.0+0x3a/0xa20 [ 2412.974186] should_failslab+0x5/0x20 [ 2412.975068] kmem_cache_alloc+0x5b/0x360 [ 2412.975994] create_object.isra.0+0x3a/0xa20 [ 2412.976983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2412.978150] kmem_cache_alloc_node+0x169/0x370 [ 2412.979183] ? lock_downgrade+0x6d0/0x6d0 [ 2412.980129] __alloc_skb+0x6d/0x5b0 [ 2412.980954] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 2412.982047] sk_stream_alloc_skb+0x109/0xc30 [ 2412.983048] tcp_connect+0xf13/0x4480 [ 2412.983918] ? __siphash_unaligned+0x19c/0x310 [ 2412.984950] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2412.985995] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2412.987041] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2412.988153] ? __lock_acquire+0x1657/0x5b00 [ 2412.988680] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2412.989141] tcp_v6_connect+0x1425/0x1c30 [ 2412.991972] ? rt6_get_cookie+0x390/0x390 [ 2412.992907] ? mark_lock+0xf5/0x2df0 [ 2412.993781] __inet_stream_connect+0x86b/0xda0 [ 2412.994832] ? lock_release+0x6b0/0x6b0 [ 2412.995730] ? lock_downgrade+0x6d0/0x6d0 [ 2412.996675] ? inet_init_net+0x5a0/0x5a0 [ 2412.997585] ? mark_held_locks+0x9e/0xe0 [ 2412.998511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2412.999674] ? __local_bh_enable_ip+0x9d/0x100 [ 2413.000703] inet_stream_connect+0x53/0xa0 [ 2413.001645] ? __inet_stream_connect+0xda0/0xda0 [ 2413.002708] __sys_connect_file+0x15b/0x1a0 [ 2413.003666] __sys_connect+0x165/0x1a0 [ 2413.004528] ? __sys_connect_file+0x1a0/0x1a0 [ 2413.005523] ? vfs_write+0x354/0xa30 [ 2413.006352] ? fput_many+0x2f/0x1a0 [ 2413.007180] ? ksys_write+0x1a9/0x260 [ 2413.008039] __x64_sys_connect+0x6f/0xb0 [ 2413.008937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.010079] do_syscall_64+0x33/0x40 [ 2413.010912] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2413.012049] RIP: 0033:0x7f3076304b19 [ 2413.012875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.016975] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2413.018679] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2413.020262] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2413.021821] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.023391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2413.024952] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 05:03:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 6) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2413.088967] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2413.096273] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2413.159725] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:03:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4000, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2413.220828] FAULT_INJECTION: forcing a failure. [ 2413.220828] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.223041] CPU: 0 PID: 13386 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2413.224250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.225538] Call Trace: [ 2413.225960] dump_stack+0x107/0x167 [ 2413.226541] should_fail.cold+0x5/0xa [ 2413.227158] should_failslab+0x5/0x20 [ 2413.227753] __kmalloc_node_track_caller+0x74/0x3f0 [ 2413.228519] ? sk_stream_alloc_skb+0x109/0xc30 [ 2413.229231] ? lock_downgrade+0x6d0/0x6d0 [ 2413.229872] __alloc_skb+0xb1/0x5b0 [ 2413.230451] sk_stream_alloc_skb+0x109/0xc30 [ 2413.231140] tcp_connect+0xf13/0x4480 [ 2413.231767] ? __siphash_unaligned+0x19c/0x310 [ 2413.232469] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2413.233208] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2413.233933] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2413.234730] ? __lock_acquire+0x1657/0x5b00 [ 2413.235565] tcp_v6_connect+0x1425/0x1c30 [ 2413.236245] ? rt6_get_cookie+0x390/0x390 [ 2413.236905] ? mark_lock+0xf5/0x2df0 [ 2413.237523] __inet_stream_connect+0x86b/0xda0 [ 2413.238220] ? lock_release+0x6b0/0x6b0 [ 2413.238858] ? lock_downgrade+0x6d0/0x6d0 [ 2413.239514] ? inet_init_net+0x5a0/0x5a0 [ 2413.240161] ? mark_held_locks+0x9e/0xe0 [ 2413.240813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2413.241611] ? __local_bh_enable_ip+0x9d/0x100 [ 2413.242339] inet_stream_connect+0x53/0xa0 [ 2413.243004] ? __inet_stream_connect+0xda0/0xda0 [ 2413.243757] __sys_connect_file+0x15b/0x1a0 [ 2413.244415] __sys_connect+0x165/0x1a0 [ 2413.245037] ? __sys_connect_file+0x1a0/0x1a0 [ 2413.245753] ? vfs_write+0x354/0xa30 [ 2413.246346] ? fput_many+0x2f/0x1a0 [ 2413.246929] ? ksys_write+0x1a9/0x260 [ 2413.247535] __x64_sys_connect+0x6f/0xb0 [ 2413.248170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.248982] do_syscall_64+0x33/0x40 [ 2413.249573] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2413.250386] RIP: 0033:0x7f85e0168b19 [ 2413.250983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.253873] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2413.255083] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2413.256199] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2413.257322] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.258450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:03:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r3}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2413.259573] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 05:03:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:03:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf0ff, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:03:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:03:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfe800000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2413.503998] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2413.600438] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2413.602937] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2413.729413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 6) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfec00000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:07 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:07 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 7) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2430.349542] FAULT_INJECTION: forcing a failure. [ 2430.349542] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.351273] CPU: 0 PID: 13432 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2430.352172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.353250] Call Trace: [ 2430.353609] dump_stack+0x107/0x167 [ 2430.354091] should_fail.cold+0x5/0xa [ 2430.354599] ? create_object.isra.0+0x3a/0xa20 [ 2430.355228] should_failslab+0x5/0x20 [ 2430.355735] kmem_cache_alloc+0x5b/0x360 [ 2430.356272] create_object.isra.0+0x3a/0xa20 [ 2430.356864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2430.357553] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2430.358216] ? sk_stream_alloc_skb+0x109/0xc30 [ 2430.358839] ? lock_downgrade+0x6d0/0x6d0 [ 2430.359393] __alloc_skb+0xb1/0x5b0 [ 2430.359879] sk_stream_alloc_skb+0x109/0xc30 [ 2430.360468] tcp_connect+0xf13/0x4480 [ 2430.360987] ? __siphash_unaligned+0x19c/0x310 [ 2430.361606] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2430.362240] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2430.362855] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2430.363509] ? __lock_acquire+0x1657/0x5b00 [ 2430.364062] tcp_v6_connect+0x1425/0x1c30 [ 2430.364608] ? rt6_get_cookie+0x390/0x390 [ 2430.365138] ? mark_lock+0xf5/0x2df0 [ 2430.365658] __inet_stream_connect+0x86b/0xda0 [ 2430.366236] ? lock_release+0x6b0/0x6b0 [ 2430.366772] ? lock_downgrade+0x6d0/0x6d0 [ 2430.367302] ? inet_init_net+0x5a0/0x5a0 [ 2430.367830] ? mark_held_locks+0x9e/0xe0 [ 2430.368350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2430.369036] ? __local_bh_enable_ip+0x9d/0x100 [ 2430.369615] inet_stream_connect+0x53/0xa0 [ 2430.370175] ? __inet_stream_connect+0xda0/0xda0 [ 2430.370775] __sys_connect_file+0x15b/0x1a0 [ 2430.371341] __sys_connect+0x165/0x1a0 [ 2430.371833] ? __sys_connect_file+0x1a0/0x1a0 [ 2430.372417] ? vfs_write+0x354/0xa30 [ 2430.372890] ? fput_many+0x2f/0x1a0 [ 2430.373364] ? ksys_write+0x1a9/0x260 [ 2430.373855] __x64_sys_connect+0x6f/0xb0 [ 2430.374390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.375070] do_syscall_64+0x33/0x40 [ 2430.375558] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2430.376222] RIP: 0033:0x7f85e0168b19 [ 2430.376718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.379121] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2430.380106] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2430.381035] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2430.381948] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.382876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.383794] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2430.385116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2430.390548] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2430.392407] FAULT_INJECTION: forcing a failure. [ 2430.392407] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.395104] CPU: 1 PID: 13435 Comm: syz-executor.3 Not tainted 5.10.172 #1 [ 2430.396486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.398163] Call Trace: [ 2430.398712] dump_stack+0x107/0x167 [ 2430.399461] should_fail.cold+0x5/0xa [ 2430.400386] should_failslab+0x5/0x20 [ 2430.401170] __kmalloc_node_track_caller+0x74/0x3f0 [ 2430.402175] ? sk_stream_alloc_skb+0x109/0xc30 [ 2430.403114] ? lock_downgrade+0x6d0/0x6d0 [ 2430.403950] __alloc_skb+0xb1/0x5b0 [ 2430.404688] sk_stream_alloc_skb+0x109/0xc30 [ 2430.405570] tcp_connect+0xf13/0x4480 [ 2430.406354] ? __siphash_unaligned+0x19c/0x310 [ 2430.407286] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2430.408214] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2430.409128] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2430.410123] ? visit_groups_merge.constprop.0.isra.0+0xae0/0xae0 [ 2430.411372] tcp_v6_connect+0x1425/0x1c30 [ 2430.412237] ? rt6_get_cookie+0x390/0x390 [ 2430.413089] ? mark_lock+0xf5/0x2df0 [ 2430.413886] __inet_stream_connect+0x86b/0xda0 [ 2430.414830] ? lock_release+0x6b0/0x6b0 [ 2430.415639] ? lock_downgrade+0x6d0/0x6d0 [ 2430.416481] ? inet_init_net+0x5a0/0x5a0 [ 2430.417317] ? mark_held_locks+0x9e/0xe0 [ 2430.418152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2430.419213] ? __local_bh_enable_ip+0x9d/0x100 [ 2430.420136] inet_stream_connect+0x53/0xa0 [ 2430.420991] ? __inet_stream_connect+0xda0/0xda0 [ 2430.421942] __sys_connect_file+0x15b/0x1a0 [ 2430.422829] __sys_connect+0x165/0x1a0 [ 2430.423611] ? __sys_connect_file+0x1a0/0x1a0 [ 2430.424518] ? vfs_write+0x354/0xa30 [ 2430.425268] ? fput_many+0x2f/0x1a0 [ 2430.426004] ? ksys_write+0x1a9/0x260 [ 2430.426793] __x64_sys_connect+0x6f/0xb0 [ 2430.427615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.428647] do_syscall_64+0x33/0x40 [ 2430.429400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2430.430428] RIP: 0033:0x7f3076304b19 [ 2430.431190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.434883] RSP: 002b:00007f307387a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2430.436403] RAX: ffffffffffffffda RBX: 00007f3076417f60 RCX: 00007f3076304b19 [ 2430.437841] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2430.439274] RBP: 00007f307387a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.440705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.442131] R13: 00007ffdac6359af R14: 00007f307387a300 R15: 0000000000022000 [ 2430.468246] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2430.503979] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2430.518388] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2430.528066] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xff000000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2430.596539] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2430.628919] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:04:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 8) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xff0f0000, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2430.766966] FAULT_INJECTION: forcing a failure. [ 2430.766966] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.768643] CPU: 1 PID: 13463 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2430.769414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.770345] Call Trace: [ 2430.770673] dump_stack+0x107/0x167 [ 2430.771189] should_fail.cold+0x5/0xa [ 2430.771748] ? lock_release+0x6b0/0x6b0 [ 2430.772196] ? skb_clone+0x14f/0x3d0 [ 2430.772615] should_failslab+0x5/0x20 [ 2430.773041] kmem_cache_alloc+0x5b/0x360 [ 2430.773508] skb_clone+0x14f/0x3d0 [ 2430.773945] dev_queue_xmit_nit+0x3a7/0xad0 [ 2430.774540] dev_hard_start_xmit+0xab/0x840 [ 2430.775141] __dev_queue_xmit+0x17f0/0x2730 [ 2430.775621] ? find_held_lock+0x2c/0x110 [ 2430.776069] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2430.776586] ? mark_held_locks+0x9e/0xe0 [ 2430.777085] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2430.777865] ip6_finish_output2+0x171f/0x1f30 [ 2430.778501] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2430.779096] ip6_output+0x3b1/0x7f0 [ 2430.779521] ip6_xmit+0x10a1/0x1c40 [ 2430.779955] ? ip6_append_data+0x330/0x330 [ 2430.780463] ? inet6_csk_xmit+0xd6/0x620 [ 2430.781015] ? lock_release+0x6b0/0x6b0 [ 2430.781631] ? inet6_csk_route_socket+0x6a7/0xef0 [ 2430.782182] ? inet6_csk_route_req+0x7e0/0x7e0 [ 2430.782732] inet6_csk_xmit+0x316/0x620 [ 2430.783195] ? inet6_csk_update_pmtu+0x190/0x190 [ 2430.783741] ? lock_downgrade+0x6d0/0x6d0 [ 2430.784299] ? csum_ipv6_magic+0x1e/0x70 [ 2430.784902] ? inet6_csk_update_pmtu+0x190/0x190 [ 2430.785515] __tcp_transmit_skb+0x1906/0x35e0 [ 2430.786054] ? __tcp_select_window+0x900/0x900 [ 2430.786574] ? memset+0x20/0x50 [ 2430.786978] ? trace_hardirqs_on+0x5b/0x180 [ 2430.787482] ? recalibrate_cpu_khz+0x10/0x10 [ 2430.788106] tcp_connect+0x2ed3/0x4480 [ 2430.788647] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2430.789286] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2430.789819] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2430.790391] ? security_sk_classify_flow+0x35/0x90 [ 2430.790970] tcp_v6_connect+0x1425/0x1c30 [ 2430.791469] ? rt6_get_cookie+0x390/0x390 [ 2430.791964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2430.792560] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2430.793204] ? rt6_get_cookie+0x390/0x390 [ 2430.793719] ? __inet_stream_connect+0x817/0xda0 [ 2430.794411] __inet_stream_connect+0x86b/0xda0 [ 2430.795001] ? lock_release+0x6b0/0x6b0 [ 2430.795517] ? lock_downgrade+0x6d0/0x6d0 [ 2430.796089] ? inet_init_net+0x5a0/0x5a0 [ 2430.796656] ? mark_held_locks+0x9e/0xe0 [ 2430.797129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2430.797828] ? __local_bh_enable_ip+0x9d/0x100 [ 2430.798537] inet_stream_connect+0x53/0xa0 [ 2430.799033] ? __inet_stream_connect+0xda0/0xda0 [ 2430.799579] __sys_connect_file+0x15b/0x1a0 [ 2430.800072] __sys_connect+0x165/0x1a0 [ 2430.800517] ? __sys_connect_file+0x1a0/0x1a0 [ 2430.801044] ? hrtimer_interrupt+0x771/0x9b0 [ 2430.801567] __x64_sys_connect+0x6f/0xb0 [ 2430.802033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.802624] do_syscall_64+0x33/0x40 [ 2430.803069] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2430.803661] RIP: 0033:0x7f85e0168b19 [ 2430.804088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.806207] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2430.807091] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2430.808032] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2430.809055] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.810146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.811079] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2430.812401] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:04:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:08 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xffff, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2430.858427] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2430.873540] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2430.918043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:04:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2430.972530] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2430.996160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2431.069403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:04:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 7) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 9) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xffffff91, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4f01, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2445.054097] FAULT_INJECTION: forcing a failure. [ 2445.054097] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.057004] CPU: 1 PID: 13505 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2445.058599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.060512] Call Trace: [ 2445.061177] dump_stack+0x107/0x167 [ 2445.062123] should_fail.cold+0x5/0xa [ 2445.063112] ? create_object.isra.0+0x3a/0xa20 [ 2445.064160] should_failslab+0x5/0x20 [ 2445.065022] kmem_cache_alloc+0x5b/0x360 [ 2445.065943] ? lock_acquire+0x197/0x490 [ 2445.066860] create_object.isra.0+0x3a/0xa20 [ 2445.067893] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2445.069221] kmem_cache_alloc+0x159/0x360 [ 2445.070039] skb_clone+0x14f/0x3d0 [ 2445.070559] dev_queue_xmit_nit+0x3a7/0xad0 [ 2445.071201] dev_hard_start_xmit+0xab/0x840 [ 2445.071836] __dev_queue_xmit+0x17f0/0x2730 [ 2445.072459] ? find_held_lock+0x2c/0x110 [ 2445.073042] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2445.073707] ? mark_held_locks+0x9e/0xe0 [ 2445.074301] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2445.075077] ip6_finish_output2+0x171f/0x1f30 [ 2445.075799] __ip6_finish_output.part.0+0x4f7/0xb50 [ 2445.076643] ip6_output+0x3b1/0x7f0 [ 2445.077227] ip6_xmit+0x10a1/0x1c40 [ 2445.077758] ? ip6_append_data+0x330/0x330 [ 2445.078364] ? inet6_csk_xmit+0xd6/0x620 [ 2445.078969] ? lock_release+0x6b0/0x6b0 [ 2445.079536] ? inet6_csk_route_socket+0x6a7/0xef0 [ 2445.080221] ? inet6_csk_route_req+0x7e0/0x7e0 [ 2445.080883] inet6_csk_xmit+0x316/0x620 [ 2445.081451] ? inet6_csk_update_pmtu+0x190/0x190 [ 2445.082121] ? lock_downgrade+0x6d0/0x6d0 [ 2445.082720] ? csum_ipv6_magic+0x1e/0x70 [ 2445.083402] ? inet6_csk_update_pmtu+0x190/0x190 [ 2445.084160] __tcp_transmit_skb+0x1906/0x35e0 [ 2445.084904] ? __tcp_select_window+0x900/0x900 [ 2445.085549] ? memset+0x20/0x50 [ 2445.086035] ? trace_hardirqs_on+0x5b/0x180 [ 2445.086646] ? recalibrate_cpu_khz+0x10/0x10 [ 2445.087280] tcp_connect+0x2ed3/0x4480 [ 2445.087847] ? __tcp_transmit_skb+0x35e0/0x35e0 [ 2445.088508] ? secure_tcpv6_ts_off+0x1b5/0x2a0 [ 2445.089164] ? tcp_fastopen_cookie_check+0xb0/0xb0 [ 2445.089866] ? __lock_acquire+0x1657/0x5b00 [ 2445.090497] tcp_v6_connect+0x1425/0x1c30 [ 2445.091113] ? rt6_get_cookie+0x390/0x390 [ 2445.091716] ? mark_lock+0xf5/0x2df0 [ 2445.092274] __inet_stream_connect+0x86b/0xda0 [ 2445.092926] ? lock_release+0x6b0/0x6b0 [ 2445.093488] ? lock_downgrade+0x6d0/0x6d0 [ 2445.094074] ? inet_init_net+0x5a0/0x5a0 [ 2445.094660] ? mark_held_locks+0x9e/0xe0 [ 2445.095251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2445.096001] ? __local_bh_enable_ip+0x9d/0x100 [ 2445.096651] inet_stream_connect+0x53/0xa0 [ 2445.097260] ? __inet_stream_connect+0xda0/0xda0 [ 2445.097936] __sys_connect_file+0x15b/0x1a0 [ 2445.098558] __sys_connect+0x165/0x1a0 [ 2445.099132] ? __sys_connect_file+0x1a0/0x1a0 [ 2445.099769] ? vfs_write+0x354/0xa30 [ 2445.100300] ? fput_many+0x2f/0x1a0 [ 2445.100822] ? ksys_write+0x1a9/0x260 [ 2445.101381] __x64_sys_connect+0x6f/0xb0 [ 2445.101965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2445.102698] do_syscall_64+0x33/0x40 [ 2445.103236] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2445.103975] RIP: 0033:0x7f85e0168b19 [ 2445.104503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2445.107161] RSP: 002b:00007f85dd6de188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2445.108262] RAX: ffffffffffffffda RBX: 00007f85e027bf60 RCX: 00007f85e0168b19 [ 2445.109265] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 2445.110275] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2445.111304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2445.112324] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 [ 2445.113814] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2445.136360] blktrace: Concurrent blktraces are not allowed on loop4 [ 2445.211497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2445.233099] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:04:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2445.277929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (fail_nth: 10) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2445.620443] FAULT_INJECTION: forcing a failure. [ 2445.620443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2445.623095] CPU: 0 PID: 13540 Comm: syz-executor.5 Not tainted 5.10.172 #1 [ 2445.624491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.626186] Call Trace: [ 2445.626736] dump_stack+0x107/0x167 [ 2445.627489] should_fail.cold+0x5/0xa [ 2445.628278] _copy_to_user+0x2e/0x180 [ 2445.629065] simple_read_from_buffer+0xcc/0x160 [ 2445.630015] proc_fail_nth_read+0x198/0x230 [ 2445.630924] ? proc_sessionid_read+0x230/0x230 [ 2445.631851] ? security_file_permission+0x24e/0x570 [ 2445.632870] ? perf_trace_initcall_start+0x101/0x380 [ 2445.633901] ? proc_sessionid_read+0x230/0x230 [ 2445.634824] vfs_read+0x228/0x580 [ 2445.635541] ksys_read+0x12d/0x260 [ 2445.636261] ? vfs_write+0xa30/0xa30 [ 2445.637020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2445.638075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2445.639133] do_syscall_64+0x33/0x40 [ 2445.639894] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2445.640928] RIP: 0033:0x7f85e011b69c [ 2445.641681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2445.645391] RSP: 002b:00007f85dd6de170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2445.646954] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f85e011b69c [ 2445.648387] RDX: 000000000000000f RSI: 00007f85dd6de1e0 RDI: 0000000000000006 [ 2445.649828] RBP: 00007f85dd6de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2445.651271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2445.652705] R13: 00007ffd4e5b688f R14: 00007f85dd6de300 R15: 0000000000022000 05:04:23 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2445.867510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2445.929255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2445.934423] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:04:39 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:39 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff5, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2462.368578] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2462.416568] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2462.425820] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:40 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2462.833936] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2462.838019] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:04:40 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x148, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2463.028016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2463.357236] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:04:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:55 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x3, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:04:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x2}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2477.619145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2477.654124] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:04:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2477.726492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:55 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x168, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:04:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x910b, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2477.951354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2478.072358] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2478.114020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:04:55 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:04:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:04:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2478.397997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2478.504871] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:05:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x3, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:05:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:09 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc001, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:09 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x174, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x3}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x7, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2491.829187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:05:09 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2491.915254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:05:09 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf0ff, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2491.966515] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:05:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, 0x0, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2492.247290] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:05:10 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1f0, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2492.315951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2492.342426] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:05:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:10 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2492.602273] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:05:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:05:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0x7, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:26 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x300, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x4}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:26 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xffff, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2508.662113] blktrace: Concurrent blktraces are not allowed on loop14 [ 2508.681163] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2508.714087] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2508.715806] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2508.755968] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2508.784513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:05:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:26 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2509.010974] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2509.057442] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2509.172879] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:05:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:05:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x5}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:41 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x500, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:41 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2523.679689] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2523.769493] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2523.863213] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2523.892151] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:05:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2524.055222] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2524.132380] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2524.245345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2524.415124] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:05:55 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa00, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x6}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:05:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:05:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x15, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2538.126176] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2538.138812] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2538.144422] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:05:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:05:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:05:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:05:56 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2538.504316] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2538.526328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:05:56 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2538.650016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:06:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:11 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1400, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x7}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:11 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x18, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2553.953881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2554.013971] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2554.016928] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 05:06:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2554.254490] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:06:11 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4000, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x19, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2554.517998] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2554.554167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2554.620369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:06:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:06:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x8}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2554.896075] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2555.073946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:06:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0xe}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:34 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:06:34 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2576.576040] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2576.635304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2576.636505] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2576.678563] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2576.693105] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:06:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2576.876056] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2576.994522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:06:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2577.118563] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2577.164851] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2577.222334] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2577.254846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:06:48 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xba00, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:48 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:06:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:06:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x50}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2591.118082] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.133729] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.165637] blktrace: Concurrent blktraces are not allowed on loop14 [ 2591.176359] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.233529] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:06:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x50, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2591.313537] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2591.327223] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2591.331196] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:06:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2591.344859] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2591.361013] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:06:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:06:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:06:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:06:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfc, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2591.701872] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.733043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.767692] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2591.981415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2592.009023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:07:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) 05:07:04 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x162210, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 05:07:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:07:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xe, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1f4, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:07:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0xfc}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:07:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:07:04 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)=ANY=[@ANYBLOB="01001dee43128100000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_io_uring_setup(0x5b8a, &(0x7f0000000280)={0x0, 0x414f, 0x20, 0x3, 0x16e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) open_by_handle_at(r1, &(0x7f00000003c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0x0, 0x0, 0x1}}, 0x180) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[]) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) [ 2606.834924] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2606.839511] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2606.862271] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2606.878282] blktrace: Concurrent blktraces are not allowed on loop4 [ 2606.887116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2606.898356] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2606.974139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 05:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x218, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:07:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:07:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x50, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) 05:07:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2607.056932] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2607.074189] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:07:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e"]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 05:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x4e21, 0x8778, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x240, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) r4 = dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 2607.170109] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2607.221004] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2607.261090] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:07:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0xffffff6c) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) [ 2607.298051] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 05:07:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00dfa3373f18fda8b24c60a8e603000000000000007b7c20be559c6b22d875fe394fa2962fe4c287b222731ed63b78090dcad7c476310777f38138e295ca2e3e05aae3ced1344f93bf3b09a476e6d441d331bbbedea1a1351e815baf854bb2e563744f5c556bea24e9a7de7f6c5d1669f3c76b4f465e032359742b39a45d2d108e717ec613aa75ffe9dcf104000000000000008358fe6be31e044a8eabc4ae91b9840e16415b098402c21d84ba2a0f971af9741b696680d5a16dc7068a49f0a59213ac3b0c3fadbbc5f7897bf0d364dbfb96cfd3c7f72ec3d125c46f4b6a4df3f01200"/236]) r0 = open_tree(0xffffffffffffffff, 0x0, 0xc01) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x3f]}, 0x8, 0x80000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400000, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xb}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r4}}, 0x7f) umount2(&(0x7f0000000200)='./file0\x00', 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x288081, 0x84) [ 2607.335685] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2607.470157] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2607.570484] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2609.573089] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2609.575180] CPU: 0 PID: 285 Comm: syz-executor.2 Not tainted 5.10.172 #1 [ 2609.576367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2609.577827] Call Trace: [ 2609.578290] dump_stack+0x107/0x167 [ 2609.578921] dump_header+0x106/0x613 [ 2609.579572] oom_kill_process.cold+0x10/0x15 [ 2609.580337] out_of_memory+0x110f/0x1410 [ 2609.581042] ? oom_killer_disable+0x280/0x280 [ 2609.581820] ? mutex_trylock+0x237/0x2b0 [ 2609.582511] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2609.583552] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2609.584592] ? lock_acquire+0xe7/0x490 [ 2609.585298] ? warn_alloc+0x190/0x190 [ 2609.585991] __alloc_pages_nodemask+0x553/0x680 [ 2609.586814] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2609.587863] ? xas_load+0x66/0x2c0 [ 2609.588519] ? find_get_entry+0x2d9/0x6e0 [ 2609.589277] alloc_pages_current+0x187/0x280 [ 2609.590077] __page_cache_alloc+0x2d2/0x360 [ 2609.590871] pagecache_get_page+0x2c7/0xc80 [ 2609.591648] filemap_fault+0x177d/0x21b0 [ 2609.592374] ? read_cache_page_gfp+0x30/0x30 [ 2609.593180] ? replace_page_cache_page+0x1200/0x1200 [ 2609.594074] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2609.595005] ext4_filemap_fault+0x87/0xc0 [ 2609.595732] __do_fault+0x113/0x410 [ 2609.596390] handle_mm_fault+0x1e72/0x3520 [ 2609.597145] ? __pmd_alloc+0x5e0/0x5e0 [ 2609.597839] ? vmacache_find+0x55/0x2a0 [ 2609.598529] ? vmacache_update+0xce/0x140 [ 2609.599256] do_user_addr_fault+0x56e/0xc60 [ 2609.600023] exc_page_fault+0xa2/0x1a0 [ 2609.600708] ? asm_exc_page_fault+0x8/0x30 [ 2609.601471] asm_exc_page_fault+0x1e/0x30 [ 2609.602211] RIP: 0033:0x7fc34e62b688 [ 2609.602886] Code: Unable to access opcode bytes at RIP 0x7fc34e62b65e. [ 2609.604073] RSP: 002b:00007ffc295a9f80 EFLAGS: 00010216 [ 2609.605000] RAX: 0000001b2cf20000 RBX: 0000000000000418 RCX: 000000000027cf68 [ 2609.606236] RDX: 000000000027d0c0 RSI: 00007ffc295aa040 RDI: 0000000000000001 [ 2609.607483] RBP: 00007ffc295a9fdc R08: 0000000000000a31 R09: 00007ffc295f2080 [ 2609.608730] R10: 00007ffc295f2090 R11: 00000000004b5c5a R12: 0000000000000032 [ 2609.609994] R13: 000000000027c9bd R14: 000000000000000a R15: 00007ffc295aa040 [ 2609.612333] Mem-Info: [ 2609.612976] active_anon:229 inactive_anon:55827 isolated_anon:0 [ 2609.612976] active_file:0 inactive_file:19 isolated_file:0 [ 2609.612976] unevictable:0 dirty:0 writeback:0 [ 2609.612976] slab_reclaimable:9481 slab_unreclaimable:60666 [ 2609.612976] mapped:69643 shmem:115 pagetables:1037 bounce:0 [ 2609.612976] free:2788 free_pcp:0 free_cma:0 [ 2609.618424] Node 0 active_anon:916kB inactive_anon:223308kB active_file:0kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278572kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? no [ 2609.622490] Node 0 DMA free:6520kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2609.627048] lowmem_reserve[]: 0 1618 1618 1618 [ 2609.627906] Node 0 DMA32 free:4632kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:916kB inactive_anon:223300kB active_file:88kB inactive_file:40kB unevictable:0kB writepending:0kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:4148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2609.632805] lowmem_reserve[]: 0 0 0 0 [ 2609.633502] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6520kB [ 2609.636167] Node 0 DMA32: 325*4kB (UME) 71*8kB (UM) 53*16kB (UM) 26*32kB (UM) 19*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5020kB [ 2609.638788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2609.640298] 132 total pagecache pages [ 2609.640996] 0 pages in swap cache [ 2609.641641] Swap cache stats: add 0, delete 0, find 0/0 [ 2609.642608] Free swap = 0kB [ 2609.643147] Total swap = 0kB [ 2609.643703] 524158 pages RAM [ 2609.644229] 0 pages HighMem/MovableOnly [ 2609.644956] 104483 pages reserved [ 2609.645641] Unreclaimable slab info: [ 2609.646486] Name Used Total [ 2609.647540] pid_2 60KB 60KB [ 2609.648473] p9_req_t 8KB 8KB [ 2609.649451] fib6_nodes 28KB 28KB [ 2609.650373] ip6_dst_cache 33KB 33KB [ 2609.651335] RAWv6 189KB 189KB [ 2609.652291] UDPLITEv6 62KB 62KB [ 2609.653257] UDPv6 62KB 62KB [ 2609.654184] tw_sock_TCPv6 23KB 23KB [ 2609.655151] request_sock_TCPv6 15KB 15KB [ 2609.656089] TCPv6 156KB 156KB [ 2609.657073] scsi_sense_cache 4KB 4KB [ 2609.657997] sd_ext_cdb 3KB 3KB [ 2609.658944] virtio_scsi_cmd 16KB 16KB [ 2609.659895] sgpool-128 59KB 59KB [ 2609.660870] sgpool-64 63KB 63KB [ 2609.661817] sgpool-32 47KB 47KB [ 2609.662785] sgpool-16 120KB 120KB [ 2609.663728] sgpool-8 86KB 86KB [ 2609.664688] io_kiocb 15KB 30KB [ 2609.665622] mqueue_inode_cache 62KB 62KB [ 2609.666542] nfs_commit_data 15KB 15KB [ 2609.667485] nfs_write_data 47KB 47KB [ 2609.668442] jbd2_inode 7KB 7KB [ 2609.669417] ext4_system_zone 7KB 7KB [ 2609.670353] ext4_io_end_vec 7KB 7KB [ 2609.671300] ext4_bio_post_read_ctx 15KB 15KB [ 2609.672329] kioctx 31KB 31KB [ 2609.673260] aio_kiocb 7KB 7KB [ 2609.674208] dio 30KB 30KB [ 2609.675131] bio-2 4KB 4KB [ 2609.676102] fasync_cache 7KB 7KB [ 2609.677078] pid_namespace 7KB 7KB [ 2609.678033] rpc_buffers 31KB 31KB [ 2609.678981] rpc_tasks 3KB 3KB [ 2609.679948] UNIX 244KB 341KB [ 2609.680896] tcp_bind_bucket 12KB 12KB [ 2609.681856] ip_fib_trie 8KB 8KB [ 2609.682792] ip_fib_alias 15KB 15KB [ 2609.683720] ip_dst_cache 8KB 8KB [ 2609.684667] RAW 125KB 125KB [ 2609.685621] UDP 138KB 252KB [ 2609.686526] request_sock_TCP 15KB 15KB [ 2609.687465] TCP 60KB 60KB [ 2609.688411] hugetlbfs_inode_cache 30KB 30KB [ 2609.689432] bio-1 11KB 11KB [ 2609.690380] eventpoll_pwq 23KB 23KB [ 2609.691330] eventpoll_epi 43KB 43KB [ 2609.692255] inotify_inode_mark 89KB 89KB [ 2609.693212] request_queue 90KB 90KB [ 2609.694127] blkdev_ioc 30KB 30KB [ 2609.695071] bio-0 201KB 232KB [ 2609.696013] biovec-max 680KB 743KB [ 2609.696971] biovec-64 157KB 173KB [ 2609.697913] biovec-16 26KB 26KB [ 2609.698829] user_namespace 15KB 15KB [ 2609.699758] uid_cache 8KB 8KB [ 2609.700699] dmaengine-unmap-2 4KB 4KB [ 2609.701636] audit_buffer 7KB 7KB [ 2609.702536] skbuff_fclone_cache 52KB 82KB [ 2609.703499] skbuff_head_cache 335KB 697KB [ 2609.704416] file_lock_cache 43KB 43KB [ 2609.705303] file_lock_ctx 7KB 7KB [ 2609.706191] fsnotify_mark_connector 32KB 32KB [ 2609.707199] net_namespace 88KB 88KB [ 2609.708102] task_delay_info 57KB 92KB [ 2609.709023] taskstats 38KB 38KB [ 2609.709936] proc_dir_entry 356KB 356KB [ 2609.710851] pde_opener 31KB 31KB [ 2609.711790] seq_file 48KB 48KB [ 2609.712957] sigqueue 114KB 114KB [ 2609.713875] shmem_inode_cache 1257KB 1289KB [ 2609.714792] kernfs_iattrs_cache 212KB 212KB [ 2609.715754] kernfs_node_cache 5307KB 5307KB [ 2609.716659] mnt_cache 157KB 157KB [ 2609.717610] filp 1282KB 1796KB [ 2609.718522] names_cache 9328KB 10748KB [ 2609.719447] hashtab_node 278KB 278KB [ 2609.720356] ebitmap_node 1149KB 1149KB [ 2609.721253] avtab_node 4976KB 4976KB [ 2609.722138] avc_node 31KB 31KB [ 2609.723028] lsm_inode_cache 3242KB 3324KB [ 2609.723924] lsm_file_cache 172KB 172KB [ 2609.724805] key_jar 31KB 31KB [ 2609.725699] uts_namespace 15KB 15KB [ 2609.726592] nsproxy 7KB 7KB [ 2609.727494] vm_area_struct 717KB 976KB [ 2609.728392] mm_struct 232KB 315KB [ 2609.729310] fs_cache 43KB 52KB [ 2609.730198] files_cache 223KB 223KB [ 2609.731094] signal_cache 294KB 370KB [ 2609.731969] sighand_cache 300KB 390KB [ 2609.732828] task_struct 927KB 1313KB [ 2609.733713] cred_jar 122KB 156KB [ 2609.734599] anon_vma_chain 228KB 236KB [ 2609.735457] anon_vma 208KB 219KB [ 2609.736319] pid 54KB 71KB [ 2609.737235] Acpi-Operand 108KB 146KB [ 2609.738115] Acpi-ParseExt 31KB 31KB [ 2609.738987] Acpi-Parse 169KB 185KB [ 2609.739865] Acpi-State 82KB 98KB [ 2609.740736] Acpi-Namespace 24KB 24KB [ 2609.741625] numa_policy 3KB 3KB [ 2609.742483] trace_event_file 163KB 163KB [ 2609.743350] ftrace_event_field 280KB 280KB [ 2609.744218] pool_workqueue 48KB 48KB [ 2609.745112] task_group 16KB 16KB [ 2609.745961] vmap_area 126KB 126KB [ 2609.746838] page->ptl 138KB 185KB [ 2609.747703] kmemleak_scan_area 95KB 111KB [ 2609.749649] kmemleak_object 141191KB 155421KB [ 2609.750494] kmalloc-8k 4544KB 4768KB [ 2609.751378] kmalloc-4k 6312KB 7488KB [ 2609.752266] kmalloc-2k 3828KB 4416KB [ 2609.753139] kmalloc-1k 2534KB 3296KB [ 2609.754021] kmalloc-512 2388KB 4080KB [ 2609.754878] kmalloc-256 1344KB 1344KB [ 2609.755729] kmalloc-192 636KB 648KB [ 2609.756596] kmalloc-128 479KB 504KB [ 2609.757442] kmalloc-96 409KB 692KB [ 2609.758309] kmalloc-64 907KB 1196KB [ 2609.759176] kmalloc-32 741KB 824KB [ 2609.760023] kmalloc-16 352KB 356KB [ 2609.760866] kmalloc-8 278KB 314KB [ 2609.761731] kmem_cache_node 47KB 47KB [ 2609.762548] kmem_cache 75KB 75KB [ 2609.763403] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=285,uid=0 [ 2609.766299] Out of memory (oom_kill_allocating_task): Killed process 285 (syz-executor.2) total-vm:93280kB, anon-rss:384kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 2609.943680] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2609.944885] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.172 #1 [ 2609.945617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2609.946513] Call Trace: [ 2609.946809] dump_stack+0x107/0x167 [ 2609.947207] dump_header+0x106/0x613 [ 2609.947615] oom_kill_process.cold+0x10/0x15 [ 2609.948080] out_of_memory+0x110f/0x1410 [ 2609.948515] ? oom_killer_disable+0x280/0x280 [ 2609.948994] ? mutex_trylock+0x237/0x2b0 [ 2609.949433] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2609.950080] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2609.950700] ? lock_acquire+0xe7/0x490 [ 2609.951117] ? warn_alloc+0x190/0x190 [ 2609.951538] __alloc_pages_nodemask+0x553/0x680 [ 2609.952040] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2609.952666] ? xas_load+0x66/0x2c0 [ 2609.953064] ? find_get_entry+0x2d9/0x6e0 [ 2609.953516] alloc_pages_current+0x187/0x280 [ 2609.953980] __page_cache_alloc+0x2d2/0x360 [ 2609.954435] pagecache_get_page+0x2c7/0xc80 [ 2609.954906] filemap_fault+0x177d/0x21b0 [ 2609.955337] ? read_cache_page_gfp+0x30/0x30 [ 2609.955803] ? replace_page_cache_page+0x1200/0x1200 [ 2609.956340] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2609.956904] ext4_filemap_fault+0x87/0xc0 [ 2609.957341] __do_fault+0x113/0x410 [ 2609.957729] handle_mm_fault+0x1e72/0x3520 [ 2609.958175] ? find_held_lock+0x2c/0x110 [ 2609.958609] ? __pmd_alloc+0x5e0/0x5e0 [ 2609.959024] ? vmacache_find+0x55/0x2a0 [ 2609.959448] do_user_addr_fault+0x56e/0xc60 [ 2609.959911] exc_page_fault+0xa2/0x1a0 [ 2609.960322] ? asm_exc_page_fault+0x8/0x30 [ 2609.960764] asm_exc_page_fault+0x1e/0x30 [ 2609.961207] RIP: 0033:0x7f2a476ac980 [ 2609.961600] Code: Unable to access opcode bytes at RIP 0x7f2a476ac956. [ 2609.962281] RSP: 002b:00007ffdc441f1a8 EFLAGS: 00010202 [ 2609.962838] RAX: 000055ea6424d360 RBX: 000055ea6424d840 RCX: 0000000000001293 [ 2609.963579] RDX: 000055ea6424d878 RSI: 000055ea6424d840 RDI: 000055ea6424ac70 [ 2609.964328] RBP: 0000000000000001 R08: 0000000000000a31 R09: 00007ffdc4450080 [ 2609.965087] R10: 00007ffdc44500f0 R11: 00000000004b5e60 R12: 0000000000000001 [ 2609.965838] R13: 000000000000000c R14: 00007ffdc441f200 R15: 0000000000000000 [ 2609.966704] Mem-Info: [ 2609.966978] active_anon:230 inactive_anon:55817 isolated_anon:0 [ 2609.966978] active_file:0 inactive_file:15 isolated_file:0 [ 2609.966978] unevictable:0 dirty:0 writeback:0 [ 2609.966978] slab_reclaimable:9481 slab_unreclaimable:60030 [ 2609.966978] mapped:69636 shmem:115 pagetables:1010 bounce:0 [ 2609.966978] free:2864 free_pcp:48 free_cma:0 [ 2609.970252] Node 0 active_anon:920kB inactive_anon:223268kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278544kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:3904kB all_unreclaimable? no [ 2609.972612] Node 0 DMA free:6520kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2609.975343] lowmem_reserve[]: 0 1618 1618 1618 [ 2609.975858] Node 0 DMA32 free:4936kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:920kB inactive_anon:223260kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:4040kB bounce:0kB free_pcp:192kB local_pcp:192kB free_cma:0kB [ 2609.978831] lowmem_reserve[]: 0 0 0 0 [ 2609.979255] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6520kB [ 2609.980840] Node 0 DMA32: 269*4kB (UME) 60*8kB (UM) 44*16kB (UM) 43*32kB (UM) 21*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5236kB [ 2609.982407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2609.983308] 133 total pagecache pages [ 2609.983732] 0 pages in swap cache [ 2609.984095] Swap cache stats: add 0, delete 0, find 0/0 [ 2609.984676] Free swap = 0kB [ 2609.984997] Total swap = 0kB [ 2609.985340] 524158 pages RAM [ 2609.985681] 0 pages HighMem/MovableOnly [ 2609.986089] 104483 pages reserved [ 2609.986452] Unreclaimable slab info: [ 2609.986861] Name Used Total [ 2609.987435] pid_2 60KB 60KB [ 2609.988023] p9_req_t 8KB 8KB [ 2609.988617] fib6_nodes 28KB 28KB [ 2609.989181] ip6_dst_cache 33KB 33KB [ 2609.989764] RAWv6 189KB 189KB [ 2609.990322] UDPLITEv6 62KB 62KB [ 2609.990908] UDPv6 62KB 62KB [ 2609.991467] tw_sock_TCPv6 23KB 23KB [ 2609.992053] request_sock_TCPv6 15KB 15KB [ 2609.992633] TCPv6 156KB 156KB [ 2609.993211] scsi_sense_cache 4KB 4KB [ 2609.993783] sd_ext_cdb 3KB 3KB [ 2609.994337] virtio_scsi_cmd 16KB 16KB [ 2609.994925] sgpool-128 59KB 59KB [ 2609.995487] sgpool-64 63KB 63KB [ 2609.996066] sgpool-32 47KB 47KB [ 2609.996651] sgpool-16 120KB 120KB [ 2609.997229] sgpool-8 37KB 52KB [ 2609.997815] io_kiocb 15KB 30KB [ 2609.998369] mqueue_inode_cache 62KB 62KB [ 2609.998961] nfs_commit_data 15KB 15KB [ 2609.999517] nfs_write_data 47KB 47KB [ 2610.000115] jbd2_inode 7KB 7KB [ 2610.000694] ext4_system_zone 7KB 7KB [ 2610.001261] ext4_io_end_vec 7KB 7KB [ 2610.001853] ext4_bio_post_read_ctx 15KB 15KB [ 2610.002444] kioctx 31KB 31KB [ 2610.003024] aio_kiocb 7KB 7KB [ 2610.003600] dio 30KB 30KB [ 2610.004152] bio-2 4KB 4KB [ 2610.004730] fasync_cache 7KB 7KB [ 2610.005297] pid_namespace 7KB 7KB [ 2610.005901] rpc_buffers 31KB 31KB [ 2610.006458] rpc_tasks 3KB 3KB [ 2610.007046] UNIX 244KB 341KB [ 2610.007624] tcp_bind_bucket 12KB 12KB [ 2610.008191] ip_fib_trie 8KB 8KB [ 2610.008775] ip_fib_alias 15KB 15KB [ 2610.009350] ip_dst_cache 8KB 8KB [ 2610.009933] RAW 125KB 125KB [ 2610.010486] UDP 138KB 252KB [ 2610.011080] request_sock_TCP 15KB 15KB [ 2610.011658] TCP 60KB 60KB [ 2610.013046] hugetlbfs_inode_cache 30KB 30KB [ 2610.013771] bio-1 11KB 11KB [ 2610.014336] eventpoll_pwq 23KB 23KB [ 2610.014932] eventpoll_epi 43KB 43KB [ 2610.015493] inotify_inode_mark 89KB 89KB [ 2610.016109] request_queue 90KB 90KB [ 2610.016696] blkdev_ioc 30KB 30KB [ 2610.017279] bio-0 200KB 232KB [ 2610.017863] biovec-max 680KB 743KB [ 2610.018430] biovec-64 157KB 173KB [ 2610.019013] biovec-16 26KB 26KB [ 2610.019604] user_namespace 15KB 15KB [ 2610.020171] uid_cache 8KB 8KB [ 2610.020770] dmaengine-unmap-2 4KB 4KB [ 2610.021347] audit_buffer 7KB 7KB [ 2610.021926] skbuff_fclone_cache 52KB 82KB [ 2610.022532] skbuff_head_cache 368KB 693KB [ 2610.023108] file_lock_cache 43KB 43KB [ 2610.023685] file_lock_ctx 7KB 7KB [ 2610.024269] fsnotify_mark_connector 32KB 32KB [ 2610.024909] net_namespace 88KB 88KB [ 2610.025473] task_delay_info 57KB 92KB [ 2610.026060] taskstats 38KB 38KB [ 2610.026641] proc_dir_entry 356KB 356KB [ 2610.027204] pde_opener 31KB 31KB [ 2610.027778] seq_file 48KB 48KB [ 2610.028340] sigqueue 114KB 114KB [ 2610.028929] shmem_inode_cache 1257KB 1289KB [ 2610.029499] kernfs_iattrs_cache 212KB 212KB [ 2610.030097] kernfs_node_cache 5307KB 5307KB [ 2610.030681] mnt_cache 157KB 157KB [ 2610.031284] filp 1282KB 1796KB [ 2610.031894] names_cache 9328KB 10748KB [ 2610.032452] hashtab_node 278KB 278KB [ 2610.033030] ebitmap_node 1149KB 1149KB [ 2610.033617] avtab_node 4976KB 4976KB [ 2610.034194] avc_node 31KB 31KB [ 2610.034795] lsm_inode_cache 3242KB 3324KB [ 2610.035356] lsm_file_cache 172KB 172KB [ 2610.035934] key_jar 31KB 31KB [ 2610.036496] uts_namespace 15KB 15KB [ 2610.037082] nsproxy 7KB 7KB [ 2610.037696] vm_area_struct 717KB 976KB [ 2610.038256] mm_struct 232KB 315KB [ 2610.038841] fs_cache 43KB 52KB [ 2610.039401] files_cache 223KB 223KB [ 2610.040000] signal_cache 294KB 370KB [ 2610.040584] sighand_cache 300KB 390KB [ 2610.041166] task_struct 927KB 1313KB [ 2610.041755] cred_jar 122KB 156KB [ 2610.042320] anon_vma_chain 228KB 236KB [ 2610.042907] anon_vma 208KB 219KB [ 2610.043472] pid 54KB 71KB [ 2610.044060] Acpi-Operand 108KB 146KB [ 2610.044636] Acpi-ParseExt 31KB 31KB [ 2610.045214] Acpi-Parse 169KB 185KB [ 2610.045789] Acpi-State 82KB 98KB [ 2610.046350] Acpi-Namespace 24KB 24KB [ 2610.046927] numa_policy 3KB 3KB [ 2610.047492] trace_event_file 163KB 163KB [ 2610.048070] ftrace_event_field 280KB 280KB [ 2610.048664] pool_workqueue 48KB 48KB [ 2610.049238] task_group 16KB 16KB [ 2610.049825] vmap_area 126KB 126KB [ 2610.050392] page->ptl 138KB 185KB [ 2610.050973] kmemleak_scan_area 95KB 111KB [ 2610.052756] kmemleak_object 141399KB 155421KB [ 2610.053340] kmalloc-8k 4544KB 4768KB [ 2610.053929] kmalloc-4k 6312KB 7488KB [ 2610.054498] kmalloc-2k 3828KB 4416KB [ 2610.055100] kmalloc-1k 2534KB 3296KB [ 2610.055713] kmalloc-512 2495KB 4080KB [ 2610.056275] kmalloc-256 1344KB 1344KB [ 2610.056861] kmalloc-192 636KB 648KB [ 2610.057436] kmalloc-128 479KB 504KB [ 2610.058034] kmalloc-96 409KB 692KB [ 2610.058634] kmalloc-64 907KB 1196KB [ 2610.059203] kmalloc-32 741KB 824KB [ 2610.059782] kmalloc-16 352KB 356KB [ 2610.060343] kmalloc-8 278KB 314KB [ 2610.060927] kmem_cache_node 47KB 47KB [ 2610.061506] kmem_cache 75KB 75KB [ 2610.062092] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 2610.064277] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:31836kB, anon-rss:968kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:88kB oom_score_adj:-250 [ 2610.890956] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2610.892943] CPU: 0 PID: 1 Comm: systemd Not tainted 5.10.172 #1 [ 2610.894165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.895846] Call Trace: [ 2610.896385] dump_stack+0x107/0x167 [ 2610.897149] dump_header+0x106/0x613 [ 2610.897909] oom_kill_process.cold+0x10/0x15 [ 2610.898822] out_of_memory+0x358/0x1410 [ 2610.899631] ? oom_killer_disable+0x280/0x280 [ 2610.900538] ? mutex_trylock+0x237/0x2b0 [ 2610.901368] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2610.902573] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2610.903760] ? lock_acquire+0xe7/0x490 [ 2610.904551] ? warn_alloc+0x190/0x190 [ 2610.905365] __alloc_pages_nodemask+0x553/0x680 [ 2610.906308] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2610.907513] ? xas_load+0x66/0x2c0 [ 2610.908234] ? find_get_entry+0x2d9/0x6e0 [ 2610.909089] alloc_pages_current+0x187/0x280 [ 2610.909976] __page_cache_alloc+0x2d2/0x360 [ 2610.910850] pagecache_get_page+0x2c7/0xc80 [ 2610.911725] filemap_fault+0x177d/0x21b0 [ 2610.912550] ? read_cache_page_gfp+0x30/0x30 [ 2610.913446] ? replace_page_cache_page+0x1200/0x1200 [ 2610.914462] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2610.915526] ext4_filemap_fault+0x87/0xc0 [ 2610.916353] __do_fault+0x113/0x410 [ 2610.917101] handle_mm_fault+0x1e72/0x3520 [ 2610.917953] ? find_held_lock+0x2c/0x110 [ 2610.918769] ? __pmd_alloc+0x5e0/0x5e0 [ 2610.919558] ? vmacache_find+0x55/0x2a0 [ 2610.920361] do_user_addr_fault+0x56e/0xc60 [ 2610.921245] exc_page_fault+0xa2/0x1a0 [ 2610.922021] ? asm_exc_page_fault+0x8/0x30 [ 2610.922864] asm_exc_page_fault+0x1e/0x30 [ 2610.923686] RIP: 0033:0x7f4ba8935750 [ 2610.924428] Code: Unable to access opcode bytes at RIP 0x7f4ba8935726. [ 2610.925740] RSP: 002b:00007ffda5dcd728 EFLAGS: 00010202 [ 2610.926805] RAX: 0000000000000001 RBX: 0000000000000001 RCX: fffffffffffffffa [ 2610.928225] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00005609eddce900 [ 2610.929662] RBP: 0000000000000004 R08: 0000000000000a32 R09: 00007ffda5df8080 [ 2610.931081] R10: 00007ffda5df80f0 R11: 00000000004b6252 R12: 00005609eddce900 [ 2610.932500] R13: 00005609ee60d8b0 R14: 00007ffda5dcd7d0 R15: 0000000000000000 [ 2610.935242] Mem-Info: [ 2610.935933] active_anon:229 inactive_anon:55576 isolated_anon:0 [ 2610.935933] active_file:1 inactive_file:0 isolated_file:0 [ 2610.935933] unevictable:0 dirty:0 writeback:0 [ 2610.935933] slab_reclaimable:9473 slab_unreclaimable:60063 [ 2610.935933] mapped:69649 shmem:115 pagetables:991 bounce:0 [ 2610.935933] free:2880 free_pcp:0 free_cma:0 [ 2610.942096] Node 0 active_anon:916kB inactive_anon:222304kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278596kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:3872kB all_unreclaimable? yes [ 2610.946643] Node 0 DMA free:6520kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.951850] lowmem_reserve[]: 0 1618 1618 1618 [ 2610.952831] Node 0 DMA32 free:5000kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:916kB inactive_anon:222296kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:3964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2610.958392] lowmem_reserve[]: 0 0 0 0 [ 2610.959227] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6520kB [ 2610.962224] Node 0 DMA32: 428*4kB (ME) 81*8kB (ME) 47*16kB (UME) 20*32kB (UM) 21*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5352kB [ 2610.965215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2610.966926] 139 total pagecache pages [ 2610.967715] 0 pages in swap cache [ 2610.968411] Swap cache stats: add 0, delete 0, find 0/0 [ 2610.969522] Free swap = 0kB [ 2610.970156] Total swap = 0kB [ 2610.970790] 524158 pages RAM [ 2610.971395] 0 pages HighMem/MovableOnly [ 2610.972210] 104483 pages reserved [ 2610.972928] Unreclaimable slab info: [ 2610.973710] Name Used Total [ 2610.974840] pid_2 60KB 60KB [ 2610.975937] p9_req_t 8KB 8KB [ 2610.977034] fib6_nodes 28KB 28KB [ 2610.978135] ip6_dst_cache 33KB 33KB [ 2610.979229] RAWv6 189KB 189KB [ 2610.980324] UDPLITEv6 62KB 62KB [ 2610.981435] UDPv6 62KB 62KB [ 2610.982528] tw_sock_TCPv6 23KB 23KB [ 2610.983616] request_sock_TCPv6 15KB 15KB [ 2610.984720] TCPv6 156KB 156KB [ 2610.985840] scsi_sense_cache 4KB 4KB [ 2610.986936] sd_ext_cdb 3KB 3KB [ 2610.988043] virtio_scsi_cmd 16KB 16KB [ 2610.989145] sgpool-128 59KB 59KB [ 2610.990242] sgpool-64 63KB 63KB [ 2610.991329] sgpool-32 204KB 204KB [ 2610.992416] sgpool-16 120KB 120KB [ 2610.993526] sgpool-8 52KB 52KB [ 2610.994616] io_kiocb 15KB 30KB [ 2610.995704] mqueue_inode_cache 62KB 62KB [ 2610.996818] nfs_commit_data 15KB 15KB [ 2610.997926] nfs_write_data 47KB 47KB [ 2610.999034] jbd2_inode 7KB 7KB [ 2611.000134] ext4_system_zone 7KB 7KB [ 2611.001264] ext4_io_end_vec 7KB 7KB [ 2611.002370] ext4_bio_post_read_ctx 15KB 15KB [ 2611.003558] kioctx 31KB 31KB [ 2611.004687] aio_kiocb 7KB 7KB [ 2611.005800] dio 30KB 30KB [ 2611.006903] bio-2 4KB 4KB [ 2611.008006] fasync_cache 7KB 7KB [ 2611.009125] pid_namespace 7KB 7KB [ 2611.010230] rpc_buffers 31KB 31KB [ 2611.011324] rpc_tasks 3KB 3KB [ 2611.012421] UNIX 244KB 341KB [ 2611.013539] tcp_bind_bucket 12KB 12KB [ 2611.014640] ip_fib_trie 8KB 8KB [ 2611.015744] ip_fib_alias 15KB 15KB [ 2611.016841] ip_dst_cache 8KB 8KB [ 2611.017959] RAW 125KB 125KB [ 2611.019063] UDP 138KB 252KB [ 2611.020161] request_sock_TCP 15KB 15KB [ 2611.021270] TCP 60KB 60KB [ 2611.022360] hugetlbfs_inode_cache 30KB 30KB [ 2611.023527] bio-1 11KB 11KB [ 2611.024626] eventpoll_pwq 23KB 23KB [ 2611.025748] eventpoll_epi 43KB 43KB [ 2611.026849] inotify_inode_mark 89KB 89KB [ 2611.027973] request_queue 90KB 90KB [ 2611.029078] blkdev_ioc 30KB 30KB [ 2611.030185] bio-0 236KB 236KB [ 2611.031291] biovec-max 680KB 743KB [ 2611.032394] biovec-64 236KB 236KB [ 2611.033515] biovec-16 45KB 45KB [ 2611.034621] user_namespace 15KB 15KB [ 2611.035728] uid_cache 8KB 8KB [ 2611.036840] dmaengine-unmap-2 4KB 4KB [ 2611.037948] audit_buffer 7KB 7KB [ 2611.039054] skbuff_fclone_cache 52KB 82KB [ 2611.040211] skbuff_head_cache 463KB 693KB [ 2611.041326] file_lock_cache 43KB 43KB [ 2611.042438] file_lock_ctx 7KB 7KB [ 2611.043544] fsnotify_mark_connector 32KB 32KB [ 2611.044751] net_namespace 88KB 88KB [ 2611.045873] task_delay_info 57KB 92KB [ 2611.046973] taskstats 38KB 38KB [ 2611.048070] proc_dir_entry 356KB 356KB [ 2611.049201] pde_opener 31KB 31KB [ 2611.050306] seq_file 48KB 48KB [ 2611.051417] sigqueue 114KB 114KB [ 2611.052519] shmem_inode_cache 1257KB 1289KB [ 2611.054761] kernfs_iattrs_cache 212KB 212KB [ 2611.055904] kernfs_node_cache 5307KB 5307KB [ 2611.057005] mnt_cache 157KB 157KB [ 2611.058151] filp 1282KB 1796KB [ 2611.059270] names_cache 9324KB 10748KB [ 2611.060368] hashtab_node 278KB 278KB [ 2611.061480] ebitmap_node 1149KB 1149KB [ 2611.062601] avtab_node 4976KB 4976KB [ 2611.063699] avc_node 31KB 31KB [ 2611.064833] lsm_inode_cache 3190KB 3320KB [ 2611.065938] lsm_file_cache 172KB 172KB [ 2611.067042] key_jar 31KB 31KB [ 2611.068146] uts_namespace 15KB 15KB [ 2611.069267] nsproxy 7KB 7KB [ 2611.070447] vm_area_struct 710KB 976KB [ 2611.071675] mm_struct 232KB 315KB [ 2611.072787] fs_cache 43KB 52KB [ 2611.073900] files_cache 223KB 223KB [ 2611.074998] signal_cache 294KB 370KB [ 2611.076091] sighand_cache 300KB 390KB [ 2611.077206] task_struct 927KB 1313KB [ 2611.078307] cred_jar 122KB 156KB [ 2611.079399] anon_vma_chain 228KB 236KB [ 2611.080510] anon_vma 207KB 219KB [ 2611.081611] pid 54KB 71KB [ 2611.082711] Acpi-Operand 108KB 146KB [ 2611.083808] Acpi-ParseExt 31KB 31KB [ 2611.084899] Acpi-Parse 169KB 185KB [ 2611.086009] Acpi-State 82KB 98KB [ 2611.087114] Acpi-Namespace 24KB 24KB [ 2611.088214] numa_policy 3KB 3KB [ 2611.089318] trace_event_file 163KB 163KB [ 2611.090423] ftrace_event_field 280KB 280KB [ 2611.091539] pool_workqueue 48KB 48KB [ 2611.092636] task_group 16KB 16KB [ 2611.093756] vmap_area 126KB 126KB [ 2611.094862] page->ptl 137KB 185KB [ 2611.095958] kmemleak_scan_area 95KB 111KB [ 2611.098156] kmemleak_object 141805KB 155406KB [ 2611.099275] kmalloc-8k 4544KB 4768KB [ 2611.100387] kmalloc-4k 6312KB 7488KB [ 2611.101493] kmalloc-2k 3824KB 4416KB [ 2611.102606] kmalloc-1k 2534KB 3296KB [ 2611.103737] kmalloc-512 2796KB 4080KB [ 2611.104834] kmalloc-256 1344KB 1344KB [ 2611.105937] kmalloc-192 636KB 648KB [ 2611.107033] kmalloc-128 479KB 504KB [ 2611.108147] kmalloc-96 412KB 692KB [ 2611.109292] kmalloc-64 918KB 1196KB [ 2611.110394] kmalloc-32 741KB 824KB [ 2611.111494] kmalloc-16 352KB 356KB [ 2611.112596] kmalloc-8 278KB 314KB [ 2611.113701] kmem_cache_node 47KB 47KB [ 2611.114793] kmem_cache 75KB 75KB [ 2611.115886] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=14247,uid=0 [ 2611.118729] Out of memory: Killed process 14258 (syz-executor.7) total-vm:94072kB, anon-rss:456kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 2611.167953] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2611.170011] CPU: 0 PID: 254 Comm: syz-fuzzer Not tainted 5.10.172 #1 [ 2611.171307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2611.172979] Call Trace: [ 2611.173529] dump_stack+0x107/0x167 [ 2611.174267] dump_header+0x106/0x613 [ 2611.175023] oom_kill_process.cold+0x10/0x15 [ 2611.175912] out_of_memory+0x110f/0x1410 [ 2611.176738] ? oom_killer_disable+0x280/0x280 [ 2611.177649] ? mutex_trylock+0x237/0x2b0 [ 2611.178468] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2611.179661] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2611.180845] ? lock_acquire+0xe7/0x490 [ 2611.181651] ? warn_alloc+0x190/0x190 [ 2611.182444] __alloc_pages_nodemask+0x553/0x680 [ 2611.183384] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2611.184582] ? xas_load+0x66/0x2c0 [ 2611.185307] ? find_get_entry+0x2d9/0x6e0 [ 2611.186148] alloc_pages_current+0x187/0x280 [ 2611.187032] __page_cache_alloc+0x2d2/0x360 [ 2611.187908] pagecache_get_page+0x2c7/0xc80 [ 2611.188780] filemap_fault+0x177d/0x21b0 [ 2611.189612] ? read_cache_page_gfp+0x30/0x30 [ 2611.190498] ? replace_page_cache_page+0x1200/0x1200 [ 2611.191512] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2611.192570] ext4_filemap_fault+0x87/0xc0 [ 2611.193416] __do_fault+0x113/0x410 [ 2611.194152] handle_mm_fault+0x1e72/0x3520 [ 2611.195004] ? find_held_lock+0x2c/0x110 [ 2611.195819] ? __pmd_alloc+0x5e0/0x5e0 [ 2611.196609] ? vmacache_find+0x55/0x2a0 [ 2611.197423] do_user_addr_fault+0x56e/0xc60 [ 2611.198300] exc_page_fault+0xa2/0x1a0 [ 2611.199081] ? asm_exc_page_fault+0x8/0x30 [ 2611.199928] asm_exc_page_fault+0x1e/0x30 [ 2611.200750] RIP: 0033:0x40aaf0 [ 2611.201407] Code: Unable to access opcode bytes at RIP 0x40aac6. [ 2611.202615] RSP: 002b:000000c00003fed8 EFLAGS: 00010202 [ 2611.203687] RAX: 0000000001f4ba98 RBX: 000000c000030000 RCX: 000000c000000480 [ 2611.205119] RDX: 000000000ecfed4e RSI: 000000c00003ff10 RDI: 0000000000000001 [ 2611.206544] RBP: 000000c00003ff28 R08: 0000000000000a32 R09: 00007fff12bdd080 [ 2611.207973] R10: 00007fff12bdd090 R11: 00000000004b626e R12: 0000000000438880 [ 2611.209413] R13: 000000000123be80 R14: 0000000000000000 R15: 0000000000000000 [ 2611.209726] syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 2611.210968] Mem-Info: [ 2611.210987] syz7 [ 2611.212996] active_anon:229 inactive_anon:55576 isolated_anon:0 [ 2611.212996] active_file:1 inactive_file:2 isolated_file:0 [ 2611.212996] unevictable:0 dirty:0 writeback:0 [ 2611.212996] slab_reclaimable:9401 slab_unreclaimable:60002 [ 2611.212996] mapped:69633 shmem:115 pagetables:991 bounce:0 [ 2611.212996] free:2454 free_pcp:62 free_cma:0 [ 2611.213752] ,mems_allowed=0 [ 2611.214169] Node 0 active_anon:916kB inactive_anon:222304kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278532kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:3872kB all_unreclaimable? yes [ 2611.217721] [ 2611.217734] CPU: 1 PID: 14258 Comm: syz-executor.7 Not tainted 5.10.172 #1 [ 2611.217748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2611.218335] Node 0 DMA free:6496kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2611.220961] Call Trace: [ 2611.220983] dump_stack+0x107/0x167 [ 2611.220999] warn_alloc.cold+0x95/0x18a [ 2611.221328] lowmem_reserve[]: [ 2611.222104] ? zone_watermark_ok_safe+0x260/0x260 [ 2611.222118] ? schedule_timeout+0x1ce/0x3f0 [ 2611.222133] ? usleep_range+0x170/0x170 [ 2611.223805] 0 [ 2611.226547] ? __next_timer_interrupt+0x2c0/0x2c0 [ 2611.226572] __alloc_pages_slowpath.constprop.0+0x1cc3/0x2220 [ 2611.226593] ? lock_acquire+0xe7/0x490 [ 2611.226609] ? warn_alloc+0x190/0x190 [ 2611.227123] 1618 [ 2611.227545] __alloc_pages_nodemask+0x553/0x680 [ 2611.228337] 1618 [ 2611.228652] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2611.228666] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2611.228684] ? policy_node+0x14/0x140 [ 2611.229674] 1618 [ 2611.230118] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2611.230914] [ 2611.231100] alloc_pages_current+0x187/0x280 [ 2611.232067] Node 0 [ 2611.232669] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 2611.232683] relay_open_buf.part.0+0x2a5/0xc00 [ 2611.232701] relay_open+0x531/0xa10 [ 2611.233498] DMA32 free:3320kB min:9216kB low:10872kB high:12528kB reserved_highatomic:0KB active_anon:916kB inactive_anon:222296kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:3964kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2611.233901] do_blk_trace_setup+0x4db/0xbf0 [ 2611.233915] ? _copy_from_user+0xfb/0x1b0 [ 2611.233929] __blk_trace_setup+0xca/0x180 [ 2611.234337] lowmem_reserve[]: [ 2611.234858] ? do_blk_trace_setup+0xbf0/0xbf0 [ 2611.234869] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2611.234893] blk_trace_ioctl+0x155/0x290 [ 2611.235292] 0 [ 2611.235895] ? blk_add_trace_bio_remap+0x560/0x560 [ 2611.235906] ? do_vfs_ioctl+0x283/0x10d0 [ 2611.235918] ? selinux_inode_getsecctx+0x90/0x90 [ 2611.235933] ? generic_block_fiemap+0x60/0x60 [ 2611.237145] 0 [ 2611.237557] blkdev_ioctl+0xc1/0x710 [ 2611.237985] 0 [ 2611.238496] ? blkdev_common_ioctl+0x1870/0x1870 [ 2611.238841] 0 [ 2611.239326] ? selinux_file_ioctl+0xb1/0x260 [ 2611.239786] [ 2611.240311] block_ioctl+0xf9/0x140 [ 2611.242512] Node 0 [ 2611.244684] ? blkdev_read_iter+0x1c0/0x1c0 [ 2611.244697] __x64_sys_ioctl+0x19a/0x210 [ 2611.244710] do_syscall_64+0x33/0x40 [ 2611.244721] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2611.244729] RIP: 0033:0x7f2a6a9ebb19 [ 2611.244747] Code: Unable to access opcode bytes at RIP 0x7f2a6a9ebaef. [ 2611.244753] RSP: 002b:00007f2a67f61188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2611.244764] RAX: ffffffffffffffda RBX: 00007f2a6aafef60 RCX: 00007f2a6a9ebb19 [ 2611.244770] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 2611.244777] RBP: 00007f2a6aa45f6d R08: 0000000000000000 R09: 0000000000000000 [ 2611.244782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2611.244788] R13: 00007fffee3762af R14: 00007f2a67f61300 R15: 0000000000022000 [ 2611.245605] Mem-Info: [ 2611.245753] DMA: [ 2611.246212] active_anon:229 inactive_anon:55576 isolated_anon:0 [ 2611.246212] active_file:1 inactive_file:2 isolated_file:0 [ 2611.246212] unevictable:0 dirty:0 writeback:0 [ 2611.246212] slab_reclaimable:9401 slab_unreclaimable:60002 [ 2611.246212] mapped:69633 shmem:115 pagetables:991 bounce:0 [ 2611.246212] free:2454 free_pcp:62 free_cma:0 [ 2611.247042] 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) [ 2611.247504] Node 0 active_anon:916kB inactive_anon:222304kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278532kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:3872kB all_unreclaimable? yes [ 2611.247514] Node 0 [ 2611.248429] 1*1024kB [ 2611.249028] DMA free:6496kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2611.249037] lowmem_reserve[]: [ 2611.249868] (M) [ 2611.250065] 0 1618 [ 2611.251073] 0*2048kB [ 2611.251510] 1618 1618 [ 2611.252483] 1*4096kB [ 2611.252978] [ 2611.252984] Node 0 DMA32 free:3320kB min:9216kB low:10872kB high:12528kB reserved_highatomic:0KB active_anon:916kB inactive_anon:222296kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:3964kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2611.253014] lowmem_reserve[]: [ 2611.253395] (M) [ 2611.253817] 0 0 0 0 [ 2611.254201] = 6496kB [ 2611.254735] Node 0 DMA: 0*4kB 2*8kB [ 2611.255117] Node 0 [ 2611.255620] (UM) 1*16kB (M) 2*32kB [ 2611.255966] DMA32: [ 2611.256367] (UM) 2*64kB [ 2611.256850] 388*4kB [ 2611.257321] (UM) 1*128kB [ 2611.258159] (UME) [ 2611.258559] (M) [ 2611.259614] 73*8kB [ 2611.260011] 2*256kB (UM) [ 2611.261371] (UME) [ 2611.262222] 1*512kB (M) 1*1024kB (M) [ 2611.263686] 42*16kB [ 2611.264472] 0*2048kB 1*4096kB [ 2611.265931] (UME) [ 2611.266735] (M) = 6496kB [ 2611.266751] Node 0 [ 2611.268198] 10*32kB [ 2611.268455] DMA32: 388*4kB [ 2611.268899] (UM) [ 2611.272326] (UME) 73*8kB (UME) 42*16kB [ 2611.274207] 3*64kB [ 2611.276732] (UME) 10*32kB (UM) 3*64kB [ 2611.277204] (UM) [ 2611.277465] (UM) 0*128kB [ 2611.282526] 0*128kB [ 2611.282871] 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2611.283287] 0*256kB [ 2611.283525] 0*4096kB = 3320kB [ 2611.284039] 0*512kB [ 2611.284312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2611.284321] 118 total pagecache pages [ 2611.284822] 0*1024kB [ 2611.285002] 0 pages in swap cache [ 2611.290629] 0*2048kB [ 2611.290955] Swap cache stats: add 0, delete 0, find 0/0 [ 2611.290965] Free swap = 0kB [ 2611.291362] 0*4096kB [ 2611.291633] Total swap = 0kB [ 2611.291639] 524158 pages RAM [ 2611.291643] 0 pages HighMem/MovableOnly [ 2611.291653] 104483 pages reserved [ 2611.292115] = 3320kB [ 2611.318391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2611.320099] 118 total pagecache pages [ 2611.320883] 0 pages in swap cache [ 2611.321618] Swap cache stats: add 0, delete 0, find 0/0 [ 2611.322703] Free swap = 0kB [ 2611.323307] Total swap = 0kB [ 2611.323939] 524158 pages RAM [ 2611.324543] 0 pages HighMem/MovableOnly [ 2611.325365] 104483 pages reserved [ 2611.326081] Unreclaimable slab info: [ 2611.326852] Name Used Total [ 2611.327982] pid_2 60KB 60KB [ 2611.329101] p9_req_t 8KB 8KB [ 2611.330204] fib6_nodes 28KB 28KB [ 2611.331301] ip6_dst_cache 33KB 33KB [ 2611.332396] RAWv6 189KB 189KB [ 2611.333501] UDPLITEv6 62KB 62KB [ 2611.334595] UDPv6 62KB 62KB [ 2611.335689] tw_sock_TCPv6 23KB 23KB [ 2611.336781] request_sock_TCPv6 15KB 15KB [ 2611.337916] TCPv6 156KB 156KB [ 2611.339015] scsi_sense_cache 4KB 4KB [ 2611.340107] sd_ext_cdb 3KB 3KB [ 2611.341221] virtio_scsi_cmd 16KB 16KB [ 2611.342326] sgpool-128 59KB 59KB [ 2611.343419] sgpool-64 63KB 63KB [ 2611.344512] sgpool-32 204KB 204KB [ 2611.345616] sgpool-16 120KB 120KB [ 2611.346712] sgpool-8 52KB 52KB [ 2611.347806] io_kiocb 15KB 30KB [ 2611.348898] mqueue_inode_cache 62KB 62KB [ 2611.350028] nfs_commit_data 15KB 15KB [ 2611.351124] nfs_write_data 47KB 47KB [ 2611.352220] jbd2_inode 7KB 7KB [ 2611.353327] ext4_system_zone 7KB 7KB [ 2611.354419] ext4_io_end_vec 7KB 7KB [ 2611.355513] ext4_bio_post_read_ctx 15KB 15KB [ 2611.356696] kioctx 31KB 31KB [ 2611.357801] aio_kiocb 7KB 7KB [ 2611.358897] dio 30KB 30KB [ 2611.359994] bio-2 4KB 4KB [ 2611.361126] fasync_cache 7KB 7KB [ 2611.362225] pid_namespace 7KB 7KB [ 2611.363325] rpc_buffers 31KB 31KB [ 2611.364419] rpc_tasks 3KB 3KB [ 2611.365525] UNIX 244KB 341KB [ 2611.366622] tcp_bind_bucket 12KB 12KB [ 2611.367719] ip_fib_trie 8KB 8KB [ 2611.368815] ip_fib_alias 15KB 15KB [ 2611.369916] ip_dst_cache 8KB 8KB [ 2611.371012] RAW 125KB 125KB [ 2611.372107] UDP 138KB 252KB [ 2611.373222] request_sock_TCP 15KB 15KB [ 2611.374319] TCP 60KB 60KB [ 2611.375415] hugetlbfs_inode_cache 30KB 30KB [ 2611.376593] bio-1 11KB 11KB [ 2611.377694] eventpoll_pwq 23KB 23KB [ 2611.378791] eventpoll_epi 43KB 43KB [ 2611.379889] inotify_inode_mark 89KB 89KB [ 2611.381001] request_queue 90KB 90KB [ 2611.382112] blkdev_ioc 30KB 30KB [ 2611.383208] bio-0 236KB 236KB [ 2611.384302] biovec-max 680KB 743KB [ 2611.385406] biovec-64 236KB 236KB [ 2611.386501] biovec-16 45KB 45KB [ 2611.387597] user_namespace 15KB 15KB [ 2611.388693] uid_cache 8KB 8KB [ 2611.389796] dmaengine-unmap-2 4KB 4KB [ 2611.390891] audit_buffer 7KB 7KB [ 2611.392031] skbuff_fclone_cache 52KB 82KB [ 2611.393171] skbuff_head_cache 479KB 686KB [ 2611.394335] file_lock_cache 43KB 43KB [ 2611.395496] file_lock_ctx 7KB 7KB [ 2611.396721] fsnotify_mark_connector 32KB 32KB [ 2611.398087] net_namespace 88KB 88KB [ 2611.399337] task_delay_info 57KB 92KB [ 2611.400615] taskstats 38KB 38KB [ 2611.401896] proc_dir_entry 356KB 356KB [ 2611.403149] pde_opener 31KB 31KB [ 2611.404407] seq_file 48KB 48KB [ 2611.405690] sigqueue 114KB 114KB [ 2611.406792] shmem_inode_cache 1257KB 1289KB [ 2611.408050] kernfs_iattrs_cache 212KB 212KB [ 2611.409345] kernfs_node_cache 5307KB 5307KB [ 2611.410628] mnt_cache 157KB 157KB [ 2611.411877] filp 1282KB 1796KB [ 2611.413154] names_cache 9226KB 10569KB [ 2611.414414] hashtab_node 278KB 278KB [ 2611.415678] ebitmap_node 1149KB 1149KB [ 2611.416937] avtab_node 4976KB 4976KB [ 2611.418219] avc_node 31KB 31KB [ 2611.419496] lsm_inode_cache 3085KB 3296KB [ 2611.420828] lsm_file_cache 172KB 172KB [ 2611.421967] key_jar 31KB 31KB [ 2611.423208] uts_namespace 15KB 15KB [ 2611.424516] nsproxy 7KB 7KB [ 2611.425781] vm_area_struct 710KB 976KB [ 2611.427083] mm_struct 232KB 315KB [ 2611.428381] fs_cache 43KB 52KB [ 2611.429669] files_cache 223KB 223KB [ 2611.430770] signal_cache 294KB 370KB [ 2611.431864] sighand_cache 300KB 390KB [ 2611.432960] task_struct 920KB 1313KB [ 2611.434073] cred_jar 93KB 156KB [ 2611.435173] anon_vma_chain 228KB 236KB [ 2611.436475] anon_vma 207KB 219KB [ 2611.437620] pid 54KB 71KB [ 2611.438842] Acpi-Operand 108KB 146KB [ 2611.440122] Acpi-ParseExt 31KB 31KB [ 2611.441410] Acpi-Parse 169KB 185KB [ 2611.442679] Acpi-State 82KB 98KB [ 2611.443774] Acpi-Namespace 24KB 24KB [ 2611.444867] numa_policy 3KB 3KB [ 2611.445982] trace_event_file 163KB 163KB [ 2611.447078] ftrace_event_field 280KB 280KB [ 2611.448193] pool_workqueue 48KB 48KB [ 2611.449303] task_group 16KB 16KB [ 2611.450447] vmap_area 126KB 126KB [ 2611.451675] page->ptl 137KB 185KB [ 2611.452777] kmemleak_scan_area 95KB 111KB [ 2611.454287] kmemleak_object 141201KB 155398KB [ 2611.455397] kmalloc-8k 4544KB 4768KB [ 2611.456500] kmalloc-4k 6296KB 7488KB [ 2611.457802] kmalloc-2k 3824KB 4416KB [ 2611.458907] kmalloc-1k 2534KB 3296KB [ 2611.460013] kmalloc-512 2879KB 4080KB [ 2611.461132] kmalloc-256 1344KB 1344KB [ 2611.462238] kmalloc-192 636KB 648KB [ 2611.463347] kmalloc-128 479KB 504KB [ 2611.464455] kmalloc-96 418KB 692KB [ 2611.465619] kmalloc-64 927KB 1184KB [ 2611.466737] kmalloc-32 741KB 824KB [ 2611.468011] kmalloc-16 352KB 356KB [ 2611.469135] kmalloc-8 278KB 314KB [ 2611.470239] kmem_cache_node 47KB 47KB [ 2611.471341] kmem_cache 75KB 75KB [ 2611.472441] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=254,uid=0 [ 2611.476267] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1237716kB, anon-rss:187364kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:892kB oom_score_adj:0 [ 2611.534435] systemd[1]: ssh.service: A process of this unit has been killed by the OOM killer. [ 2611.544212] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2611.547866] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 2611.582998] systemd[1]: systemd-journald.service: Consumed 3.724s CPU time. [ 2611.592056] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 2611.630371] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2611.941784] device lo left promiscuous mode [ 2611.970159] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2612.152373] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 2612.154077] systemd[1]: ssh.service: Unit process 247 (sshd) remains running after unit stopped. [ 2612.181856] systemd[1]: ssh.service: Consumed 36min 23.000s CPU time. [ 2612.413026] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 2612.607633] journalctl invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2612.608760] CPU: 1 PID: 14321 Comm: journalctl Not tainted 5.10.172 #1 [ 2612.609454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2612.610327] Call Trace: [ 2612.610613] dump_stack+0x107/0x167 [ 2612.611010] dump_header+0x106/0x613 [ 2612.611408] oom_kill_process.cold+0x10/0x15 [ 2612.611873] out_of_memory+0x110f/0x1410 [ 2612.612301] ? oom_killer_disable+0x280/0x280 [ 2612.612770] ? mutex_trylock+0x237/0x2b0 [ 2612.613221] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2612.613865] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2612.614494] ? lock_acquire+0xe7/0x490 [ 2612.614912] ? warn_alloc+0x190/0x190 [ 2612.615335] __alloc_pages_nodemask+0x553/0x680 [ 2612.615826] ? xas_start+0x156/0x530 [ 2612.616222] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2612.616851] ? xas_load+0x66/0x2c0 [ 2612.617234] ? find_get_entry+0x2d9/0x6e0 [ 2612.617681] alloc_pages_current+0x187/0x280 [ 2612.618143] __page_cache_alloc+0x2d2/0x360 [ 2612.618599] pagecache_get_page+0x2c7/0xc80 [ 2612.619055] filemap_fault+0x177d/0x21b0 [ 2612.619488] ? read_cache_page_gfp+0x30/0x30 [ 2612.619948] ? replace_page_cache_page+0x1200/0x1200 [ 2612.620472] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2612.621029] ext4_filemap_fault+0x87/0xc0 [ 2612.621464] __do_fault+0x113/0x410 [ 2612.621849] handle_mm_fault+0x1e72/0x3520 [ 2612.622296] ? __pmd_alloc+0x5e0/0x5e0 [ 2612.622712] ? vmacache_find+0x55/0x2a0 [ 2612.623129] ? vmacache_update+0xce/0x140 [ 2612.623569] do_user_addr_fault+0x56e/0xc60 [ 2612.624027] exc_page_fault+0xa2/0x1a0 [ 2612.624441] ? asm_exc_page_fault+0x8/0x30 [ 2612.624889] asm_exc_page_fault+0x1e/0x30 [ 2612.625334] RIP: 0033:0x7fa9feb4087d [ 2612.625737] Code: Unable to access opcode bytes at RIP 0x7fa9feb40853. [ 2612.626435] RSP: 002b:00007fff93af2010 EFLAGS: 00010206 [ 2612.627011] RAX: 0000000000000000 RBX: 00005596c94ceb40 RCX: 00007fa9fec01d77 [ 2612.627762] RDX: 000000000000002f RSI: 00007fa9fecdb000 RDI: 000000000000000a [ 2612.628517] RBP: 000000000000000a R08: 0000000000000003 R09: 0000000000000000 [ 2612.629286] R10: 0000000000000002 R11: 0000000000000213 R12: 000000000000002f [ 2612.630040] R13: 00007fff93af2060 R14: 0000000000000003 R15: 00007fa9fecdb000 [ 2612.630844] Mem-Info: [ 2612.631130] active_anon:38 inactive_anon:7918 isolated_anon:0 [ 2612.631130] active_file:49 inactive_file:146 isolated_file:0 [ 2612.631130] unevictable:0 dirty:16 writeback:0 [ 2612.631130] slab_reclaimable:8426 slab_unreclaimable:58012 [ 2612.631130] mapped:17436 shmem:84 pagetables:370 bounce:0 [ 2612.631130] free:2924 free_pcp:112 free_cma:0 [ 2612.634472] Node 0 active_anon:152kB inactive_anon:31672kB active_file:196kB inactive_file:584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69744kB dirty:64kB writeback:0kB shmem:336kB writeback_tmp:0kB kernel_stack:3104kB all_unreclaimable? no [ 2612.636932] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.639684] lowmem_reserve[]: 0 1618 1618 1618 [ 2612.640193] Node 0 DMA32 free:5204kB min:11264kB low:12920kB high:14576kB reserved_highatomic:0KB active_anon:152kB inactive_anon:31748kB active_file:548kB inactive_file:660kB unevictable:0kB writepending:36kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:1480kB bounce:0kB free_pcp:508kB local_pcp:448kB free_cma:0kB [ 2612.643235] lowmem_reserve[]: 0 0 0 0 [ 2612.643682] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 0*16kB 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6492kB [ 2612.645273] Node 0 DMA32: 455*4kB (UME) 241*8kB (UME) 75*16kB (UM) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5204kB [ 2612.646741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2612.647649] 299 total pagecache pages [ 2612.648056] 0 pages in swap cache [ 2612.648431] Swap cache stats: add 0, delete 0, find 0/0 [ 2612.649010] Free swap = 0kB [ 2612.649345] Total swap = 0kB [ 2612.649692] 524158 pages RAM [ 2612.650010] 0 pages HighMem/MovableOnly [ 2612.650431] 104483 pages reserved [ 2612.650839] Unreclaimable slab info: [ 2612.651230] Name Used Total [ 2612.651835] pid_2 60KB 60KB [ 2612.652407] p9_req_t 8KB 8KB [ 2612.652989] fib6_nodes 28KB 28KB [ 2612.653576] ip6_dst_cache 33KB 33KB [ 2612.654144] RAWv6 189KB 189KB [ 2612.654728] UDPLITEv6 62KB 62KB [ 2612.655297] UDPv6 62KB 62KB [ 2612.655881] tw_sock_TCPv6 23KB 23KB [ 2612.656448] request_sock_TCPv6 15KB 15KB [ 2612.657041] TCPv6 156KB 156KB [ 2612.657627] scsi_sense_cache 4KB 4KB [ 2612.658188] sd_ext_cdb 3KB 3KB [ 2612.658772] virtio_scsi_cmd 16KB 16KB [ 2612.659350] sgpool-128 59KB 59KB [ 2612.659927] sgpool-64 63KB 63KB [ 2612.660490] sgpool-32 330KB 330KB [ 2612.661076] sgpool-16 127KB 127KB [ 2612.661665] sgpool-8 60KB 60KB [ 2612.662224] io_kiocb 15KB 30KB [ 2612.662807] mqueue_inode_cache 62KB 62KB [ 2612.663409] nfs_commit_data 15KB 15KB [ 2612.664143] nfs_write_data 47KB 47KB [ 2612.664914] jbd2_inode 7KB 7KB [ 2612.665684] ext4_system_zone 7KB 7KB [ 2612.666410] ext4_io_end_vec 7KB 7KB [ 2612.667177] ext4_bio_post_read_ctx 15KB 15KB [ 2612.668005] kioctx 31KB 31KB [ 2612.668667] aio_kiocb 7KB 7KB [ 2612.669267] dio 30KB 30KB [ 2612.669905] bio-2 4KB 4KB [ 2612.670488] fasync_cache 7KB 7KB [ 2612.671097] pid_namespace 7KB 7KB [ 2612.671785] rpc_buffers 31KB 31KB [ 2612.672379] rpc_tasks 3KB 3KB [ 2612.672963] UNIX 244KB 341KB [ 2612.673582] tcp_bind_bucket 12KB 12KB [ 2612.674148] ip_fib_trie 8KB 8KB [ 2612.675200] ip_fib_alias 15KB 15KB [ 2612.675851] ip_dst_cache 8KB 8KB [ 2612.676418] RAW 125KB 125KB [ 2612.676997] UDP 138KB 252KB [ 2612.677589] request_sock_TCP 15KB 15KB [ 2612.678155] TCP 60KB 60KB [ 2612.678731] hugetlbfs_inode_cache 30KB 30KB [ 2612.679335] bio-1 11KB 11KB [ 2612.679915] eventpoll_pwq 23KB 23KB [ 2612.680473] eventpoll_epi 43KB 43KB [ 2612.681057] inotify_inode_mark 89KB 89KB [ 2612.681655] request_queue 90KB 90KB [ 2612.682212] blkdev_ioc 30KB 30KB [ 2612.682794] bio-0 372KB 372KB [ 2612.683356] biovec-max 773KB 773KB [ 2612.683932] biovec-64 362KB 362KB [ 2612.684489] biovec-16 48KB 48KB [ 2612.685070] user_namespace 15KB 15KB [ 2612.685647] uid_cache 8KB 8KB [ 2612.686218] dmaengine-unmap-2 4KB 4KB [ 2612.686801] audit_buffer 7KB 7KB [ 2612.687372] skbuff_fclone_cache 52KB 82KB [ 2612.687969] skbuff_head_cache 685KB 686KB [ 2612.688530] file_lock_cache 43KB 43KB [ 2612.689124] file_lock_ctx 7KB 7KB [ 2612.689706] fsnotify_mark_connector 32KB 32KB [ 2612.690441] net_namespace 88KB 88KB [ 2612.691117] task_delay_info 57KB 92KB [ 2612.691874] taskstats 38KB 38KB [ 2612.692434] proc_dir_entry 356KB 356KB [ 2612.693161] pde_opener 31KB 31KB [ 2612.693770] seq_file 56KB 56KB [ 2612.694328] sigqueue 114KB 114KB [ 2612.694913] shmem_inode_cache 1204KB 1289KB [ 2612.695471] kernfs_iattrs_cache 219KB 219KB [ 2612.696081] kernfs_node_cache 5307KB 5307KB [ 2612.696676] mnt_cache 157KB 157KB [ 2612.697275] filp 871KB 1458KB [ 2612.697874] names_cache 4347KB 4781KB [ 2612.698660] hashtab_node 278KB 278KB [ 2612.699218] ebitmap_node 1149KB 1149KB [ 2612.699807] avtab_node 4976KB 4976KB [ 2612.700374] avc_node 31KB 31KB [ 2612.700997] lsm_inode_cache 2625KB 3055KB [ 2612.701583] lsm_file_cache 172KB 172KB [ 2612.702144] key_jar 31KB 31KB [ 2612.702735] uts_namespace 15KB 15KB [ 2612.703311] nsproxy 7KB 7KB [ 2612.703903] vm_area_struct 879KB 976KB [ 2612.704461] mm_struct 232KB 315KB [ 2612.705039] fs_cache 43KB 52KB [ 2612.705628] files_cache 223KB 223KB [ 2612.706188] signal_cache 294KB 370KB [ 2612.706773] sighand_cache 296KB 390KB [ 2612.707367] task_struct 901KB 1236KB [ 2612.707951] cred_jar 86KB 156KB [ 2612.708514] anon_vma_chain 228KB 236KB [ 2612.709122] anon_vma 196KB 219KB [ 2612.709705] pid 54KB 71KB [ 2612.710268] Acpi-Operand 108KB 146KB [ 2612.710849] Acpi-ParseExt 31KB 31KB [ 2612.711412] Acpi-Parse 169KB 185KB [ 2612.711993] Acpi-State 82KB 98KB [ 2612.712554] Acpi-Namespace 24KB 24KB [ 2612.713137] numa_policy 3KB 3KB [ 2612.713717] trace_event_file 163KB 163KB [ 2612.714276] ftrace_event_field 280KB 280KB [ 2612.714869] pool_workqueue 48KB 48KB [ 2612.715430] task_group 16KB 16KB [ 2612.716006] vmap_area 126KB 126KB [ 2612.716590] page->ptl 135KB 185KB [ 2612.717159] kmemleak_scan_area 95KB 111KB [ 2612.718968] kmemleak_object 136469KB 155132KB [ 2612.719544] kmalloc-8k 4544KB 4768KB [ 2612.720136] kmalloc-4k 6936KB 7392KB [ 2612.720736] kmalloc-2k 4032KB 4416KB [ 2612.721320] kmalloc-1k 2762KB 3296KB [ 2612.721913] kmalloc-512 3275KB 3744KB [ 2612.722473] kmalloc-256 1304KB 1336KB [ 2612.723045] kmalloc-192 672KB 672KB [ 2612.723638] kmalloc-128 464KB 504KB [ 2612.724217] kmalloc-96 417KB 672KB [ 2612.724809] kmalloc-64 932KB 1164KB [ 2612.725387] kmalloc-32 747KB 824KB [ 2612.726032] kmalloc-16 352KB 356KB [ 2612.726652] kmalloc-8 278KB 314KB [ 2612.727218] kmem_cache_node 47KB 47KB [ 2612.727804] kmem_cache 75KB 75KB [ 2612.728363] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journal-flush.service,task=journalctl,pid=14321,uid=0 [ 2612.730640] Out of memory (oom_kill_allocating_task): Killed process 14321 (journalctl) total-vm:13196kB, anon-rss:600kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:0 [ 2612.754801] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2612.755880] CPU: 1 PID: 177 Comm: in:imklog Not tainted 5.10.172 #1 [ 2612.756552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2612.757451] Call Trace: [ 2612.757735] dump_stack+0x107/0x167 [ 2612.758121] dump_header+0x106/0x613 [ 2612.758514] oom_kill_process.cold+0x10/0x15 [ 2612.758977] out_of_memory+0x110f/0x1410 [ 2612.759411] ? oom_killer_disable+0x280/0x280 [ 2612.759886] ? mutex_trylock+0x237/0x2b0 [ 2612.760324] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2220 [ 2612.760954] __alloc_pages_slowpath.constprop.0+0x1bf3/0x2220 [ 2612.761596] ? lock_acquire+0xe7/0x490 [ 2612.762027] ? warn_alloc+0x190/0x190 [ 2612.762467] __alloc_pages_nodemask+0x553/0x680 [ 2612.762967] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2612.763600] ? xas_load+0x66/0x2c0 [ 2612.763984] ? find_get_entry+0x2d9/0x6e0 [ 2612.764424] alloc_pages_current+0x187/0x280 [ 2612.764886] __page_cache_alloc+0x2d2/0x360 [ 2612.765375] pagecache_get_page+0x2c7/0xc80 [ 2612.765832] filemap_fault+0x177d/0x21b0 [ 2612.766270] ? read_cache_page_gfp+0x30/0x30 [ 2612.766825] ? replace_page_cache_page+0x1200/0x1200 [ 2612.767542] ? count_memcg_event_mm.part.0+0x110/0x2a0 [ 2612.768272] ext4_filemap_fault+0x87/0xc0 [ 2612.768836] __do_fault+0x113/0x410 [ 2612.769343] handle_mm_fault+0x1e72/0x3520 [ 2612.769929] ? fsnotify+0xf30/0xf30 [ 2612.770380] ? __pmd_alloc+0x5e0/0x5e0 [ 2612.770799] ? vmacache_find+0x55/0x2a0 [ 2612.771237] do_user_addr_fault+0x56e/0xc60 [ 2612.771726] exc_page_fault+0xa2/0x1a0 [ 2612.772136] ? asm_exc_page_fault+0x8/0x30 [ 2612.772629] asm_exc_page_fault+0x1e/0x30 [ 2612.773063] RIP: 0033:0x7fce0526908c [ 2612.773500] Code: Unable to access opcode bytes at RIP 0x7fce05269062. [ 2612.774199] RSP: 002b:00007fce048054d0 EFLAGS: 00010246 [ 2612.774793] RAX: 0000000000000b6f RBX: 0000000000000000 RCX: 00007fce0526908c [ 2612.775551] RDX: 0000000000001fa0 RSI: 00007fce04805d00 RDI: 0000000000000005 [ 2612.776294] RBP: 00005628c367a4c0 R08: 0000000000000000 R09: 0000000000000000 [ 2612.777052] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007fce04805d00 [ 2612.777809] R13: 0000000000001fa0 R14: 00007fce04805d00 R15: 00007fce04805d5c [ 2612.779011] Mem-Info: [ 2612.779290] active_anon:38 inactive_anon:7771 isolated_anon:0 [ 2612.779290] active_file:24 inactive_file:23 isolated_file:0 [ 2612.779290] unevictable:0 dirty:16 writeback:0 [ 2612.779290] slab_reclaimable:8426 slab_unreclaimable:58012 [ 2612.779290] mapped:17415 shmem:84 pagetables:370 bounce:0 [ 2612.779290] free:2751 free_pcp:62 free_cma:0 [ 2612.782623] Node 0 active_anon:152kB inactive_anon:31084kB active_file:96kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69660kB dirty:64kB writeback:0kB shmem:336kB writeback_tmp:0kB kernel_stack:3072kB all_unreclaimable? no [ 2612.785015] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2612.787772] lowmem_reserve[]: 0 1618 1618 1618 [ 2612.788274] Node 0 DMA32 free:4512kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:152kB inactive_anon:31244kB active_file:548kB inactive_file:660kB unevictable:0kB writepending:36kB present:2080640kB managed:1662792kB mlocked:0kB pagetables:1480kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2612.791289] lowmem_reserve[]: 0 0 0 0 [ 2612.791727] Node 0 DMA: 1*4kB (M) 3*8kB (UM) 0*16kB 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6492kB [ 2612.793330] Node 0 DMA32: 467*4kB (UME) 194*8kB (UME) 62*16kB (UM) 11*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4764kB [ 2612.794819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2612.795740] 131 total pagecache pages [ 2612.796155] 0 pages in swap cache [ 2612.796525] Swap cache stats: add 0, delete 0, find 0/0 [ 2612.797104] Free swap = 0kB [ 2612.797422] Total swap = 0kB [ 2612.797763] 524158 pages RAM [ 2612.798080] 0 pages HighMem/MovableOnly [ 2612.798490] 104483 pages reserved [ 2612.798873] Unreclaimable slab info: [ 2612.799260] Name Used Total [ 2612.799875] pid_2 60KB 60KB [ 2612.800434] p9_req_t 8KB 8KB [ 2612.801015] fib6_nodes 28KB 28KB [ 2612.801606] ip6_dst_cache 33KB 33KB [ 2612.802163] RAWv6 189KB 189KB [ 2612.802742] UDPLITEv6 62KB 62KB [ 2612.803302] UDPv6 62KB 62KB [ 2612.803874] tw_sock_TCPv6 23KB 23KB [ 2612.804440] request_sock_TCPv6 15KB 15KB [ 2612.805026] TCPv6 156KB 156KB [ 2612.805637] scsi_sense_cache 4KB 4KB [ 2612.806197] sd_ext_cdb 3KB 3KB [ 2612.806773] virtio_scsi_cmd 16KB 16KB [ 2612.807337] sgpool-128 59KB 59KB [ 2612.807924] sgpool-64 63KB 63KB [ 2612.808484] sgpool-32 330KB 330KB [ 2612.809060] sgpool-16 127KB 127KB [ 2612.809655] sgpool-8 60KB 60KB [ 2612.810225] io_kiocb 15KB 30KB [ 2612.810804] mqueue_inode_cache 62KB 62KB [ 2612.811376] nfs_commit_data 15KB 15KB [ 2612.811957] nfs_write_data 47KB 47KB [ 2612.812523] jbd2_inode 7KB 7KB [ 2612.813129] ext4_system_zone 7KB 7KB [ 2612.813712] ext4_io_end_vec 7KB 7KB [ 2612.814276] ext4_bio_post_read_ctx 15KB 15KB [ 2612.814899] kioctx 31KB 31KB [ 2612.815461] aio_kiocb 7KB 7KB [ 2612.816037] dio 30KB 30KB [ 2612.816618] bio-2 4KB 4KB [ 2612.817180] fasync_cache 7KB 7KB [ 2612.817754] pid_namespace 7KB 7KB [ 2612.818330] rpc_buffers 31KB 31KB [ 2612.818909] rpc_tasks 3KB 3KB [ 2612.819471] UNIX 244KB 341KB [ 2612.820049] tcp_bind_bucket 12KB 12KB [ 2612.820631] ip_fib_trie 8KB 8KB [ 2612.821220] ip_fib_alias 15KB 15KB [ 2612.821797] ip_dst_cache 8KB 8KB [ 2612.822359] RAW 125KB 125KB [ 2612.822941] UDP 138KB 252KB [ 2612.823500] request_sock_TCP 15KB 15KB [ 2612.824075] TCP 60KB 60KB [ 2612.824655] hugetlbfs_inode_cache 30KB 30KB [ 2612.825253] bio-1 11KB 11KB [ 2612.825833] eventpoll_pwq 23KB 23KB [ 2612.826403] eventpoll_epi 43KB 43KB [ 2612.826980] inotify_inode_mark 89KB 89KB [ 2612.827590] request_queue 90KB 90KB [ 2612.828160] blkdev_ioc 30KB 30KB [ 2612.828759] bio-0 372KB 372KB [ 2612.829326] biovec-max 773KB 773KB [ 2612.829910] biovec-64 378KB 378KB [ 2612.830476] biovec-16 48KB 48KB [ 2612.831059] user_namespace 15KB 15KB [ 2612.831639] uid_cache 8KB 8KB [ 2612.832204] dmaengine-unmap-2 4KB 4KB [ 2612.832780] audit_buffer 7KB 7KB [ 2612.833356] skbuff_fclone_cache 52KB 82KB [ 2612.833966] skbuff_head_cache 690KB 690KB [ 2612.834533] file_lock_cache 43KB 43KB [ 2612.835136] file_lock_ctx 7KB 7KB [ 2612.835725] fsnotify_mark_connector 32KB 32KB [ 2612.836332] net_namespace 88KB 88KB [ 2612.836923] task_delay_info 57KB 92KB [ 2612.837509] taskstats 38KB 38KB [ 2612.838105] proc_dir_entry 356KB 356KB [ 2612.838684] pde_opener 31KB 31KB [ 2612.839259] seq_file 56KB 56KB [ 2612.839843] sigqueue 114KB 114KB [ 2612.840411] shmem_inode_cache 1204KB 1289KB [ 2612.841006] kernfs_iattrs_cache 219KB 219KB [ 2612.841647] kernfs_node_cache 5307KB 5307KB [ 2612.842240] mnt_cache 157KB 157KB [ 2612.842852] filp 871KB 1458KB [ 2612.843429] names_cache 4347KB 4781KB [ 2612.844016] hashtab_node 278KB 278KB [ 2612.844599] ebitmap_node 1149KB 1149KB [ 2612.845171] avtab_node 4976KB 4976KB [ 2612.845769] avc_node 31KB 31KB [ 2612.846369] lsm_inode_cache 2625KB 3055KB [ 2612.846951] lsm_file_cache 172KB 172KB [ 2612.847527] key_jar 31KB 31KB [ 2612.848105] uts_namespace 15KB 15KB [ 2612.848681] nsproxy 7KB 7KB [ 2612.849270] vm_area_struct 879KB 976KB [ 2612.849865] mm_struct 232KB 315KB [ 2612.850431] fs_cache 43KB 52KB [ 2612.851011] files_cache 223KB 223KB [ 2612.851599] signal_cache 294KB 370KB [ 2612.852187] sighand_cache 296KB 390KB [ 2612.852782] task_struct 901KB 1236KB [ 2612.853412] cred_jar 86KB 156KB [ 2612.854021] anon_vma_chain 228KB 236KB [ 2612.854636] anon_vma 196KB 219KB [ 2612.855216] pid 54KB 71KB [ 2612.855812] Acpi-Operand 108KB 146KB [ 2612.856397] Acpi-ParseExt 31KB 31KB [ 2612.856998] Acpi-Parse 169KB 185KB [ 2612.857609] Acpi-State 82KB 98KB [ 2612.858167] Acpi-Namespace 24KB 24KB [ 2612.858775] numa_policy 3KB 3KB [ 2612.859357] trace_event_file 163KB 163KB [ 2612.859939] ftrace_event_field 280KB 280KB [ 2612.860512] pool_workqueue 48KB 48KB [ 2612.861109] task_group 16KB 16KB [ 2612.861703] vmap_area 126KB 126KB [ 2612.862275] page->ptl 135KB 185KB [ 2612.862861] kmemleak_scan_area 95KB 111KB [ 2612.864650] kmemleak_object 136513KB 155132KB [ 2612.865251] kmalloc-8k 4544KB 4768KB [ 2612.865847] kmalloc-4k 6960KB 7392KB [ 2612.866427] kmalloc-2k 4032KB 4416KB [ 2612.867013] kmalloc-1k 2762KB 3296KB [ 2612.867618] kmalloc-512 3296KB 3744KB [ 2612.868191] kmalloc-256 1304KB 1336KB [ 2612.868778] kmalloc-192 672KB 672KB [ 2612.869532] kmalloc-128 464KB 504KB [ 2612.870338] kmalloc-96 417KB 672KB [ 2612.871123] kmalloc-64 932KB 1164KB [ 2612.871846] kmalloc-32 747KB 824KB [ 2612.872438] kmalloc-16 352KB 356KB [ 2612.873039] kmalloc-8 278KB 314KB [ 2612.873667] kmem_cache_node 47KB 47KB [ 2612.874242] kmem_cache 75KB 75KB [ 2612.874874] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=177,uid=0 [ 2612.877402] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:1336kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2612.942378] systemd[1]: Stopped OpenBSD Secure Shell server. [ 2612.947801] systemd[1]: ssh.service: Consumed 36min 23.063s CPU time. [ 2613.014488] systemd[1]: Starting OpenBSD Secure Shell server... [ 2613.023387] systemd[1]: rsyslog.service: A process of this unit has been killed by the OOM killer. [ 2613.030648] systemd[1]: systemd-journal-flush.service: A process of this unit has been killed by the OOM killer. [ 2613.035965] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2613.083325] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2613.098102] systemd[1]: rsyslog.service: Failed with result 'oom-kill'. [ 2613.132920] systemd[1]: rsyslog.service: Consumed 3.553s CPU time. [ 2613.142147] systemd[1]: systemd-journal-flush.service: Control process exited, code=killed, status=9/KILL [ 2613.155642] systemd[1]: systemd-journal-flush.service: Failed with result 'oom-kill'. [ 2613.196796] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2613.211488] systemd[1]: Stopped target Bluetooth. [ 2613.212639] systemd[1]: Stopped Journal Service. [ 2613.214028] systemd[1]: systemd-journald.service: Consumed 3.724s CPU time. [ 2613.261719] systemd[1]: Starting Journal Service... [ 2613.268441] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1. [ 2613.269458] systemd[1]: Stopped System Logging Service. [ 2613.271402] systemd[1]: rsyslog.service: Consumed 3.553s CPU time. [ 2613.318482] systemd[1]: Starting System Logging Service... [ 2613.420807] systemd[1]: Started System Logging Service. [ 2613.581980] systemd[1]: Started OpenBSD Secure Shell server. [ 2613.631748] systemd-journald[14330]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2614.395293] systemd[1]: Started Journal Service. [ 2614.513953] systemd-journald[14330]: Received client request to flush runtime journal. VM DIAGNOSIS: 05:07:10 Registers: info registers vcpu 0 RAX=0000000000020006 RBX=ffff888008e72278 RCX=0000000000000000 RDX=1ffff110011ce45d RSI=0000000000000004 RDI=ffff888008e722ec RBP=0000000000000000 RSP=ffff8880183e7118 R8 =0000000000000000 R9 =0000000000020000 R10=000000000000000a R11=0000000000000001 R12=ffff888008e719c0 R13=ffff888008e722c8 R14=ffffffff84ff8a60 R15=0000000000020000 RIP=ffffffff81269b39 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4abb3918c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c972b02710 CR3=000000000d05c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000055a040cc9ca0000055a040cdf1e0 XMM01=00000008ffffffff000055a040cc9ca0 XMM02=000055a040cb8b400000000000000000 XMM03=000055a040cb7020000055a040ccb9d0 XMM04=00000000ffffffff000055a040cb7020 XMM05=000055a040c89370000055a040cb8b40 XMM06=00000000000000000000000300000000 XMM07=00000000000000000000000000000000 XMM08=20202020203a657a697320656c696600 XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801d543000 RCX=ffffffff8199165a RDX=ffff888008c03380 RSI=ffffffff81991674 RDI=0000000000000007 RBP=ffff88801a63be48 RSP=ffff88800d52f6f0 R8 =0000000000000000 R9 =ffff88801d543007 R10=ffffffffffff0000 R11=0000000000000001 R12=0000000000000088 R13=1ffff11001aa5ee3 R14=ffffffffffff0000 R15=ffff88800911e400 RIP=ffffffff81991674 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcdfffff700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce1c889710 CR3=0000000015a8e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2039303a37303a35302036202072614d XMM01=656b2072656c6c616b7a79732039303a XMM02=695f6b636f6c6220205d313133303432 XMM03=72656c6c616b7a79732039303a37303a XMM04=2039303a37303a35302036202072614d XMM05=303a7063705f6c61636f6c20426b3834 XMM06=636e756f6220426b343639333a73656c XMM07=6f6c6d20426b323937323636313a6465 XMM08=746e657365727020426b303a676e6964 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000