tup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffff) 10:31:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) [ 2420.385970] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2420.388258] EXT4-fs (loop1): group descriptors corrupted! [ 2420.393477] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2420.447894] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2420.449043] EXT4-fs (loop1): group descriptors corrupted! 10:31:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 10:31:50 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x8000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:31:50 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) (fail_nth: 4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:31:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:31:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0300000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:31:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}) 10:31:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffea) 10:31:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x181080, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) open_tree(r3, &(0x7f00000000c0)='./mnt\x00', 0x9001) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x1, 0x1]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x400, 0x5]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4) getpid() unshare(0x40000000) [ 2433.250229] FAULT_INJECTION: forcing a failure. [ 2433.250229] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.251556] CPU: 0 PID: 52035 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2433.252323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.253229] Call Trace: [ 2433.253526] dump_stack+0x107/0x167 [ 2433.253920] should_fail.cold+0x5/0xa [ 2433.254339] ? create_object.isra.0+0x3a/0xa20 [ 2433.254836] ? create_object.isra.0+0x3a/0xa20 [ 2433.255350] should_failslab+0x5/0x20 [ 2433.255760] kmem_cache_alloc+0x5b/0x310 [ 2433.256212] ? mark_held_locks+0x9e/0xe0 [ 2433.256676] create_object.isra.0+0x3a/0xa20 [ 2433.257157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.257698] kmem_cache_alloc_bulk+0x168/0x320 [ 2433.258192] io_submit_sqes+0x6f76/0x85c0 [ 2433.258655] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.259183] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.259705] ? lock_downgrade+0x6d0/0x6d0 [ 2433.260147] ? find_held_lock+0x2c/0x110 [ 2433.260595] ? io_submit_sqes+0x85c0/0x85c0 [ 2433.261063] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2433.261601] ? wait_for_completion_io+0x270/0x270 [ 2433.262164] ? rcu_read_lock_any_held+0x75/0xa0 [ 2433.262688] ? vfs_write+0x354/0xa70 [ 2433.263086] ? fput_many+0x2f/0x1a0 [ 2433.263498] ? ksys_write+0x1a9/0x260 [ 2433.263988] ? __ia32_sys_read+0xb0/0xb0 [ 2433.264437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.265038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.265645] do_syscall_64+0x33/0x40 [ 2433.266072] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2433.266663] RIP: 0033:0x7f2b12dadb19 [ 2433.267094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.269232] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2433.270115] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2433.270930] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2433.271756] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.272587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2433.273343] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2433.282952] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2433.286769] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.287935] EXT4-fs (loop1): group descriptors corrupted! [ 2433.339160] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.340288] EXT4-fs (loop1): group descriptors corrupted! [ 2433.343162] FAULT_INJECTION: forcing a failure. [ 2433.343162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2433.345681] CPU: 1 PID: 52036 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 2433.347087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.348788] Call Trace: [ 2433.349331] dump_stack+0x107/0x167 [ 2433.350080] should_fail.cold+0x5/0xa [ 2433.350859] _copy_to_user+0x2e/0x180 [ 2433.351647] simple_read_from_buffer+0xcc/0x160 [ 2433.352609] proc_fail_nth_read+0x198/0x230 [ 2433.353486] ? proc_sessionid_read+0x230/0x230 [ 2433.354414] ? security_file_permission+0x24e/0x570 [ 2433.355430] ? perf_trace_initcall_start+0x101/0x380 [ 2433.356478] ? proc_sessionid_read+0x230/0x230 [ 2433.357406] vfs_read+0x228/0x580 [ 2433.358121] ksys_read+0x12d/0x260 [ 2433.358847] ? vfs_write+0xa70/0xa70 [ 2433.359610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.360681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.361730] do_syscall_64+0x33/0x40 [ 2433.362481] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2433.363513] RIP: 0033:0x7fe2ddd6769c [ 2433.364274] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 10:31:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) [ 2433.367980] RSP: 002b:00007fe2db32a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2433.369662] RAX: ffffffffffffffda RBX: 000000000000007a RCX: 00007fe2ddd6769c [ 2433.371101] RDX: 000000000000000f RSI: 00007fe2db32a1e0 RDI: 0000000000000005 [ 2433.372552] RBP: 00007fe2db32a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.373990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2433.375427] R13: 00007fffcb5aa28f R14: 00007fe2db32a300 R15: 0000000000022000 [ 2433.414411] serio: Serial port tty25 10:31:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0400000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:31:50 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2433.486658] FAULT_INJECTION: forcing a failure. [ 2433.486658] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.489297] CPU: 1 PID: 52133 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2433.490707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.492413] Call Trace: [ 2433.492963] dump_stack+0x107/0x167 [ 2433.493708] should_fail.cold+0x5/0xa [ 2433.494492] ? create_object.isra.0+0x3a/0xa20 [ 2433.495426] should_failslab+0x5/0x20 [ 2433.496194] kmem_cache_alloc+0x5b/0x310 [ 2433.497029] ? mark_held_locks+0x9e/0xe0 [ 2433.497877] create_object.isra.0+0x3a/0xa20 [ 2433.498771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.499810] kmem_cache_alloc_bulk+0x168/0x320 [ 2433.500801] io_submit_sqes+0x6f76/0x85c0 [ 2433.501684] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.501703] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.501726] ? lock_downgrade+0x6d0/0x6d0 [ 2433.501743] ? find_held_lock+0x2c/0x110 [ 2433.501766] ? io_submit_sqes+0x85c0/0x85c0 [ 2433.501794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2433.501817] ? wait_for_completion_io+0x270/0x270 [ 2433.501840] ? rcu_read_lock_any_held+0x75/0xa0 [ 2433.501857] ? vfs_write+0x354/0xa70 [ 2433.501880] ? fput_many+0x2f/0x1a0 [ 2433.501905] ? ksys_write+0x1a9/0x260 [ 2433.510990] ? __ia32_sys_read+0xb0/0xb0 [ 2433.511821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.512900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.513957] do_syscall_64+0x33/0x40 [ 2433.514713] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2433.515757] RIP: 0033:0x7f2b12dadb19 [ 2433.516522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.519228] serio: Serial port tty29 [ 2433.520300] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2433.520321] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2433.520332] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2433.520347] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.526572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2433.528018] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2433.545256] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.546449] EXT4-fs (loop1): group descriptors corrupted! 10:31:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}) [ 2433.629238] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:31:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0500000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:31:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffff) 10:31:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) [ 2433.728052] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.730160] EXT4-fs (loop1): group descriptors corrupted! [ 2433.754976] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! 10:31:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) [ 2433.757071] EXT4-fs (loop1): group descriptors corrupted! 10:31:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0600000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2433.808211] FAULT_INJECTION: forcing a failure. [ 2433.808211] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.810659] CPU: 1 PID: 52375 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2433.812071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.813776] Call Trace: [ 2433.814323] dump_stack+0x107/0x167 [ 2433.815069] should_fail.cold+0x5/0xa [ 2433.815850] ? create_object.isra.0+0x3a/0xa20 [ 2433.816791] should_failslab+0x5/0x20 [ 2433.817567] kmem_cache_alloc+0x5b/0x310 [ 2433.818395] ? mark_held_locks+0x9e/0xe0 [ 2433.819228] create_object.isra.0+0x3a/0xa20 [ 2433.820123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.821179] kmem_cache_alloc_bulk+0x168/0x320 [ 2433.822119] io_submit_sqes+0x6f76/0x85c0 [ 2433.822995] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.824013] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2433.825031] ? lock_downgrade+0x6d0/0x6d0 [ 2433.825875] ? find_held_lock+0x2c/0x110 [ 2433.826721] ? io_submit_sqes+0x85c0/0x85c0 [ 2433.827611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2433.828620] ? wait_for_completion_io+0x270/0x270 [ 2433.829611] ? rcu_read_lock_any_held+0x75/0xa0 [ 2433.830563] ? vfs_write+0x354/0xa70 [ 2433.831324] ? fput_many+0x2f/0x1a0 [ 2433.832075] ? ksys_write+0x1a9/0x260 [ 2433.832868] ? __ia32_sys_read+0xb0/0xb0 [ 2433.833711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.834777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.835852] do_syscall_64+0x33/0x40 [ 2433.836628] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2433.837685] RIP: 0033:0x7f2b12dadb19 [ 2433.838449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.842228] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2433.843791] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2433.845255] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2433.846717] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.848168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2433.849647] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2433.860631] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.862854] EXT4-fs (loop1): group descriptors corrupted! [ 2433.886613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2433.889622] EXT4-fs (loop1): group descriptors corrupted! 10:32:04 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x100000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffff) 10:32:04 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x2000023a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 10:32:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}) 10:32:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0700000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:04 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:32:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) [ 2447.258300] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2447.316598] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2447.318693] EXT4-fs (loop1): group descriptors corrupted! [ 2447.348214] FAULT_INJECTION: forcing a failure. [ 2447.348214] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.350844] CPU: 0 PID: 52503 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2447.352252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.353958] Call Trace: [ 2447.354504] dump_stack+0x107/0x167 [ 2447.355244] should_fail.cold+0x5/0xa [ 2447.356031] ? create_object.isra.0+0x3a/0xa20 [ 2447.356975] should_failslab+0x5/0x20 [ 2447.357745] kmem_cache_alloc+0x5b/0x310 [ 2447.358572] ? mark_held_locks+0x9e/0xe0 [ 2447.359396] create_object.isra.0+0x3a/0xa20 [ 2447.360275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.361317] kmem_cache_alloc_bulk+0x168/0x320 [ 2447.362244] io_submit_sqes+0x6f76/0x85c0 [ 2447.363107] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2447.364112] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2447.365110] ? io_submit_sqes+0x85c0/0x85c0 [ 2447.365986] ? recalibrate_cpu_khz+0x10/0x10 [ 2447.366874] ? ktime_get+0x158/0x1f0 [ 2447.367632] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2447.368512] ? clockevents_program_event+0x131/0x360 [ 2447.369545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.370605] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2447.371695] ? trace_hardirqs_on+0x5b/0x180 [ 2447.372581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2447.373685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.374735] do_syscall_64+0x33/0x40 [ 2447.375492] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2447.376546] RIP: 0033:0x7f2b12dadb19 [ 2447.377305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.381026] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2447.382561] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2447.383999] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2447.385448] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.386889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.388325] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2447.418557] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2447.420661] EXT4-fs (loop1): group descriptors corrupted! [ 2447.422599] serio: Serial port tty25 10:32:04 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2447.530408] serio: Serial port tty29 10:32:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0800000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 10:32:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:32:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}) [ 2447.654988] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2447.657345] EXT4-fs (loop1): group descriptors corrupted! 10:32:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0b00000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2447.735648] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2447.788564] FAULT_INJECTION: forcing a failure. [ 2447.788564] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.791236] CPU: 0 PID: 52722 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2447.792661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.794347] Call Trace: [ 2447.794894] dump_stack+0x107/0x167 [ 2447.795642] should_fail.cold+0x5/0xa [ 2447.796419] ? create_object.isra.0+0x3a/0xa20 [ 2447.797363] should_failslab+0x5/0x20 [ 2447.798138] kmem_cache_alloc+0x5b/0x310 [ 2447.798967] create_object.isra.0+0x3a/0xa20 [ 2447.799854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.800907] kmem_cache_alloc_bulk+0x168/0x320 [ 2447.801849] io_submit_sqes+0x6f76/0x85c0 [ 2447.802725] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2447.803749] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2447.804749] ? lock_downgrade+0x6d0/0x6d0 [ 2447.805588] ? find_held_lock+0x2c/0x110 [ 2447.806439] ? io_submit_sqes+0x85c0/0x85c0 [ 2447.807318] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2447.808316] ? wait_for_completion_io+0x270/0x270 [ 2447.809307] ? rcu_read_lock_any_held+0x75/0xa0 [ 2447.810244] ? vfs_write+0x354/0xa70 [ 2447.811000] ? fput_many+0x2f/0x1a0 [ 2447.811731] ? ksys_write+0x1a9/0x260 [ 2447.812509] ? __ia32_sys_read+0xb0/0xb0 [ 2447.813334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.814385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.815438] do_syscall_64+0x33/0x40 [ 2447.816191] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2447.817230] RIP: 0033:0x7f2b12dadb19 [ 2447.817983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.821698] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2447.823227] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2447.824668] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2447.826101] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.827531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.828978] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2447.845642] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2447.847929] EXT4-fs (loop1): group descriptors corrupted! [ 2447.924930] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2447.927094] EXT4-fs (loop1): group descriptors corrupted! 10:32:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x74}) 10:32:21 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:32:21 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x200000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a1800000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:21 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffffffffffff) 10:32:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 10:32:21 executing program 0: msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpgrp(0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000540)={0x3, "4b67c3b0890d10d779600a1caf969bacb56ff3aff2cdd22813c1d29028c29b98225814a4bcecd7cb84b34cec1a8bdcf2731288a8c6d8d3cdbd9997e269e81792fa852f751b632974393b32e492d9941607227e99e7df53a05d81edfb296f550543d3aef84614b137cf7c8a792dc451d5be5d6fbba7d9c89e"}, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f00000005c0)="5621b5495d060607689fe80e9d3e7eab8d480451ab0e4ec54195bf6235d007075d0c4142d5bfb79fff1075dc51d1ea8bc166c8a795e05d1d4217cba609a1ac4d4cae01db7a35661cd3e55d71efdeb27817d524952c7a9916fa5cb2005e1946b0e323e64889eef1d4cee8cb4dfd531b8fc393c980a7f9ed2264c47e58ae73710381f97dc03dd4086262", 0x89}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) getpgrp(r0) r2 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0], 0x6}, 0x58) getpgrp(r3) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) getpid() getpgrp(0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x7, 0x80, 0x7, 0x40, 0x5, 0x2, 0x0, 0x7, 0x21, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x82, 0x90c0, 0x339da2c0, 0x0, 0x5, 0xfb, 0x5, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xf, r5, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 2464.467618] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2464.469637] EXT4-fs (loop1): group descriptors corrupted! [ 2464.474697] FAULT_INJECTION: forcing a failure. [ 2464.474697] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.477512] CPU: 0 PID: 52955 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2464.479041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.480869] Call Trace: [ 2464.481459] dump_stack+0x107/0x167 [ 2464.482266] should_fail.cold+0x5/0xa [ 2464.483102] ? create_object.isra.0+0x3a/0xa20 [ 2464.484102] should_failslab+0x5/0x20 [ 2464.484982] kmem_cache_alloc+0x5b/0x310 [ 2464.485878] ? mark_held_locks+0x9e/0xe0 [ 2464.486770] create_object.isra.0+0x3a/0xa20 [ 2464.487736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.488892] kmem_cache_alloc_bulk+0x168/0x320 [ 2464.489897] io_submit_sqes+0x6f76/0x85c0 [ 2464.490839] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2464.491933] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2464.492998] ? lock_downgrade+0x6d0/0x6d0 [ 2464.493903] ? find_held_lock+0x2c/0x110 [ 2464.494801] ? io_submit_sqes+0x85c0/0x85c0 [ 2464.495754] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2464.496854] ? wait_for_completion_io+0x270/0x270 [ 2464.497913] ? rcu_read_lock_any_held+0x75/0xa0 [ 2464.498927] ? vfs_write+0x354/0xa70 [ 2464.499756] ? fput_many+0x2f/0x1a0 [ 2464.500553] ? ksys_write+0x1a9/0x260 [ 2464.501400] ? __ia32_sys_read+0xb0/0xb0 [ 2464.502291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.503433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.504562] do_syscall_64+0x33/0x40 [ 2464.505386] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2464.506499] RIP: 0033:0x7f2b12dadb19 [ 2464.507313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.511335] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2464.513011] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2464.514554] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2464.516096] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.517673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.519261] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2464.540753] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2464.542743] EXT4-fs (loop1): group descriptors corrupted! 10:32:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a1c00000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2464.588084] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2464.632714] serio: Serial port tty25 [ 2464.637149] serio: Serial port tty29 [ 2464.661522] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2464.663295] EXT4-fs (loop1): group descriptors corrupted! 10:32:21 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 10:32:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a6500000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}) 10:32:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) [ 2464.867332] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:32:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2464.911554] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2464.913184] EXT4-fs (loop1): group descriptors corrupted! [ 2464.948327] FAULT_INJECTION: forcing a failure. [ 2464.948327] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.950292] CPU: 1 PID: 53201 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2464.951280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.952390] Call Trace: [ 2464.952494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2464.952764] dump_stack+0x107/0x167 [ 2464.954950] should_fail.cold+0x5/0xa [ 2464.955459] ? create_object.isra.0+0x3a/0xa20 [ 2464.956081] should_failslab+0x5/0x20 [ 2464.956583] kmem_cache_alloc+0x5b/0x310 [ 2464.957144] ? mark_held_locks+0x9e/0xe0 [ 2464.957681] create_object.isra.0+0x3a/0xa20 [ 2464.958262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.958927] kmem_cache_alloc_bulk+0x168/0x320 [ 2464.959525] io_submit_sqes+0x6f76/0x85c0 [ 2464.960088] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2464.960743] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2464.961384] ? lock_downgrade+0x6d0/0x6d0 [ 2464.961955] ? find_held_lock+0x2c/0x110 [ 2464.962525] ? io_submit_sqes+0x85c0/0x85c0 [ 2464.963105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2464.963788] ? wait_for_completion_io+0x270/0x270 [ 2464.964424] ? rcu_read_lock_any_held+0x75/0xa0 [ 2464.965076] ? vfs_write+0x354/0xa70 [ 2464.965592] ? fput_many+0x2f/0x1a0 [ 2464.966112] ? ksys_write+0x1a9/0x260 [ 2464.966651] ? __ia32_sys_read+0xb0/0xb0 [ 2464.967230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.967971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.968741] do_syscall_64+0x33/0x40 [ 2464.969264] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2464.970014] RIP: 0033:0x7f2b12dadb19 [ 2464.970546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.973184] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2464.974257] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2464.975260] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2464.976291] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.977326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.978367] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2464.996572] ext4 filesystem being mounted at /syzkaller-testdir050436853/syzkaller.f3qzZ8/212/file0 supports timestamps until 2038 (0x7fffffff) [ 2465.001454] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2465.002866] EXT4-fs (loop1): group descriptors corrupted! 10:32:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0003000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) [ 2465.140702] FAULT_INJECTION: forcing a failure. [ 2465.140702] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.143248] CPU: 0 PID: 53393 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2465.144646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2465.146340] Call Trace: [ 2465.146891] dump_stack+0x107/0x167 [ 2465.147639] should_fail.cold+0x5/0xa [ 2465.148429] ? create_object.isra.0+0x3a/0xa20 [ 2465.149369] should_failslab+0x5/0x20 [ 2465.150155] kmem_cache_alloc+0x5b/0x310 [ 2465.150977] ? mark_held_locks+0x9e/0xe0 [ 2465.151790] create_object.isra.0+0x3a/0xa20 [ 2465.152696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2465.153711] kmem_cache_alloc_bulk+0x168/0x320 [ 2465.154645] io_submit_sqes+0x6f76/0x85c0 [ 2465.155525] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2465.156550] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2465.157525] ? lock_downgrade+0x6d0/0x6d0 [ 2465.158364] ? find_held_lock+0x2c/0x110 [ 2465.159181] ? io_submit_sqes+0x85c0/0x85c0 [ 2465.160059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2465.161039] ? wait_for_completion_io+0x270/0x270 [ 2465.162017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2465.162939] ? vfs_write+0x354/0xa70 [ 2465.163693] ? fput_many+0x2f/0x1a0 [ 2465.164419] ? ksys_write+0x1a9/0x260 [ 2465.165200] ? __ia32_sys_read+0xb0/0xb0 [ 2465.166013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2465.167066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2465.168104] do_syscall_64+0x33/0x40 [ 2465.168878] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2465.169903] RIP: 0033:0x7f2b12dadb19 [ 2465.170664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.174321] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2465.175847] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2465.177335] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2465.178775] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2465.180211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.181657] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2465.187525] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2465.189923] EXT4-fs (loop1): group descriptors corrupted! [ 2465.237458] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2465.239555] EXT4-fs (loop1): group descriptors corrupted! [ 2465.293214] serio: Serial port tty25 [ 2465.317718] serio: Serial port tty29 [ 2477.674388] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2477.675630] EXT4-fs (loop1): group descriptors corrupted! [ 2477.685192] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:32:34 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:32:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffea) 10:32:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 10:32:34 executing program 0: msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpgrp(0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000540)={0x3, "4b67c3b0890d10d779600a1caf969bacb56ff3aff2cdd22813c1d29028c29b98225814a4bcecd7cb84b34cec1a8bdcf2731288a8c6d8d3cdbd9997e269e81792fa852f751b632974393b32e492d9941607227e99e7df53a05d81edfb296f550543d3aef84614b137cf7c8a792dc451d5be5d6fbba7d9c89e"}, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f00000005c0)="5621b5495d060607689fe80e9d3e7eab8d480451ab0e4ec54195bf6235d007075d0c4142d5bfb79fff1075dc51d1ea8bc166c8a795e05d1d4217cba609a1ac4d4cae01db7a35661cd3e55d71efdeb27817d524952c7a9916fa5cb2005e1946b0e323e64889eef1d4cee8cb4dfd531b8fc393c980a7f9ed2264c47e58ae73710381f97dc03dd4086262", 0x89}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) getpgrp(r0) r2 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0], 0x6}, 0x58) getpgrp(r3) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) getpid() getpgrp(0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x7, 0x80, 0x7, 0x40, 0x5, 0x2, 0x0, 0x7, 0x21, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x82, 0x90c0, 0x339da2c0, 0x0, 0x5, 0xfb, 0x5, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xf, r5, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 10:32:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a8004000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:34 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x300000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) [ 2477.741327] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2477.742680] EXT4-fs (loop1): group descriptors corrupted! [ 2477.751769] FAULT_INJECTION: forcing a failure. [ 2477.751769] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.754449] CPU: 0 PID: 53419 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2477.755859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.757555] Call Trace: [ 2477.758095] dump_stack+0x107/0x167 [ 2477.758843] should_fail.cold+0x5/0xa [ 2477.759615] ? create_object.isra.0+0x3a/0xa20 [ 2477.760552] should_failslab+0x5/0x20 [ 2477.761354] kmem_cache_alloc+0x5b/0x310 [ 2477.762184] ? mark_held_locks+0x9e/0xe0 [ 2477.763024] create_object.isra.0+0x3a/0xa20 [ 2477.763925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2477.764965] kmem_cache_alloc_bulk+0x168/0x320 [ 2477.765903] io_submit_sqes+0x6f76/0x85c0 [ 2477.766781] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.767793] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.768780] ? lock_downgrade+0x6d0/0x6d0 [ 2477.769629] ? find_held_lock+0x2c/0x110 [ 2477.770463] ? io_submit_sqes+0x85c0/0x85c0 [ 2477.771349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2477.772329] ? wait_for_completion_io+0x270/0x270 [ 2477.773325] ? rcu_read_lock_any_held+0x75/0xa0 [ 2477.774267] ? vfs_write+0x354/0xa70 [ 2477.775026] ? fput_many+0x2f/0x1a0 [ 2477.775766] ? ksys_write+0x1a9/0x260 [ 2477.776537] ? __ia32_sys_read+0xb0/0xb0 [ 2477.777373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2477.778433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2477.779486] do_syscall_64+0x33/0x40 [ 2477.780248] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2477.781293] RIP: 0033:0x7f2b12dadb19 [ 2477.782052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.785802] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2477.787331] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2477.788800] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2477.790253] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.791701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.793167] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:32:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0005000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:35 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 2477.869405] serio: Serial port tty25 10:32:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 2477.924435] FAULT_INJECTION: forcing a failure. [ 2477.924435] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.926095] CPU: 1 PID: 53594 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2477.926842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.927724] Call Trace: [ 2477.928021] dump_stack+0x107/0x167 [ 2477.928415] should_fail.cold+0x5/0xa [ 2477.928837] ? create_object.isra.0+0x3a/0xa20 [ 2477.929331] should_failslab+0x5/0x20 [ 2477.929741] kmem_cache_alloc+0x5b/0x310 [ 2477.930181] ? mark_held_locks+0x9e/0xe0 [ 2477.930343] serio: Serial port tty29 [ 2477.930615] create_object.isra.0+0x3a/0xa20 [ 2477.930628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2477.930648] kmem_cache_alloc_bulk+0x168/0x320 [ 2477.932903] io_submit_sqes+0x6f76/0x85c0 [ 2477.933371] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.933926] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.934451] ? io_submit_sqes+0x85c0/0x85c0 [ 2477.934939] ? recalibrate_cpu_khz+0x10/0x10 [ 2477.935409] ? ktime_get+0x158/0x1f0 [ 2477.935827] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2477.936290] ? clockevents_program_event+0x131/0x360 [ 2477.936856] ? tick_program_event+0xa8/0x140 [ 2477.937333] ? hrtimer_interrupt+0x771/0x9b0 [ 2477.937829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2477.938396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2477.938973] do_syscall_64+0x33/0x40 [ 2477.939375] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2477.939933] RIP: 0033:0x7f2b12dadb19 [ 2477.940329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.942305] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2477.943111] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2477.943872] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2477.944623] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.945382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.946132] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:32:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0006000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2477.976335] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2477.977490] EXT4-fs (loop1): group descriptors corrupted! [ 2477.992171] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2477.993315] EXT4-fs (loop1): group descriptors corrupted! 10:32:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0007000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 2478.053241] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:32:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a000b000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2478.132228] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2478.133419] EXT4-fs (loop1): group descriptors corrupted! 10:32:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) [ 2478.190010] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2478.192303] EXT4-fs (loop1): group descriptors corrupted! [ 2478.197555] FAULT_INJECTION: forcing a failure. [ 2478.197555] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.199028] CPU: 1 PID: 53834 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2478.199786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.200675] Call Trace: [ 2478.200980] dump_stack+0x107/0x167 [ 2478.201373] should_fail.cold+0x5/0xa [ 2478.201778] ? create_object.isra.0+0x3a/0xa20 [ 2478.202266] should_failslab+0x5/0x20 [ 2478.202669] kmem_cache_alloc+0x5b/0x310 [ 2478.203116] ? mark_held_locks+0x9e/0xe0 [ 2478.203551] create_object.isra.0+0x3a/0xa20 [ 2478.204019] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2478.204557] kmem_cache_alloc_bulk+0x168/0x320 [ 2478.205060] io_submit_sqes+0x6f76/0x85c0 [ 2478.205536] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2478.206061] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2478.206591] ? lock_downgrade+0x6d0/0x6d0 [ 2478.207029] ? find_held_lock+0x2c/0x110 [ 2478.207469] ? io_submit_sqes+0x85c0/0x85c0 [ 2478.207929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2478.208440] ? wait_for_completion_io+0x270/0x270 [ 2478.208954] ? rcu_read_lock_any_held+0x75/0xa0 [ 2478.209451] ? vfs_write+0x354/0xa70 [ 2478.209846] ? fput_many+0x2f/0x1a0 [ 2478.210233] ? ksys_write+0x1a9/0x260 [ 2478.210640] ? __ia32_sys_read+0xb0/0xb0 [ 2478.211068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.211622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.212175] do_syscall_64+0x33/0x40 [ 2478.212571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2478.213123] RIP: 0033:0x7f2b12dadb19 [ 2478.213524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.215513] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2478.216321] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2478.217139] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2478.217895] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.218681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.219452] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:32:49 executing program 0: msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpgrp(0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000540)={0x3, "4b67c3b0890d10d779600a1caf969bacb56ff3aff2cdd22813c1d29028c29b98225814a4bcecd7cb84b34cec1a8bdcf2731288a8c6d8d3cdbd9997e269e81792fa852f751b632974393b32e492d9941607227e99e7df53a05d81edfb296f550543d3aef84614b137cf7c8a792dc451d5be5d6fbba7d9c89e"}, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f00000005c0)="5621b5495d060607689fe80e9d3e7eab8d480451ab0e4ec54195bf6235d007075d0c4142d5bfb79fff1075dc51d1ea8bc166c8a795e05d1d4217cba609a1ac4d4cae01db7a35661cd3e55d71efdeb27817d524952c7a9916fa5cb2005e1946b0e323e64889eef1d4cee8cb4dfd531b8fc393c980a7f9ed2264c47e58ae73710381f97dc03dd4086262", 0x89}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) getpgrp(r0) r2 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0], 0x6}, 0x58) getpgrp(r3) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) getpid() getpgrp(0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x7, 0x80, 0x7, 0x40, 0x5, 0x2, 0x0, 0x7, 0x21, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x82, 0x90c0, 0x339da2c0, 0x0, 0x5, 0xfb, 0x5, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xf, r5, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 10:32:49 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:49 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x400000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:32:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7f) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0)={r4, r5+10000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xfdc8) io_uring_enter(r0, 0x58ab, 0x79a9, 0x1, 0x0, 0x0) 10:32:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 10:32:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:32:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0018000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x57f}) [ 2491.811149] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2491.815865] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2491.817127] EXT4-fs (loop1): group descriptors corrupted! [ 2491.843101] serio: Serial port tty29 [ 2491.863977] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2491.865200] EXT4-fs (loop1): group descriptors corrupted! [ 2491.880282] FAULT_INJECTION: forcing a failure. [ 2491.880282] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.883327] CPU: 0 PID: 53889 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2491.884986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2491.886990] Call Trace: [ 2491.887627] dump_stack+0x107/0x167 [ 2491.888507] should_fail.cold+0x5/0xa [ 2491.889444] ? create_object.isra.0+0x3a/0xa20 [ 2491.890542] should_failslab+0x5/0x20 [ 2491.891460] kmem_cache_alloc+0x5b/0x310 [ 2491.892434] ? mark_held_locks+0x9e/0xe0 [ 2491.893434] create_object.isra.0+0x3a/0xa20 [ 2491.894491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2491.895715] kmem_cache_alloc_bulk+0x168/0x320 [ 2491.896670] io_submit_sqes+0x6f76/0x85c0 [ 2491.897697] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2491.898699] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2491.899666] ? lock_downgrade+0x6d0/0x6d0 [ 2491.900499] ? find_held_lock+0x2c/0x110 [ 2491.901330] ? io_submit_sqes+0x85c0/0x85c0 [ 2491.902206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2491.903179] ? wait_for_completion_io+0x270/0x270 [ 2491.904154] ? rcu_read_lock_any_held+0x75/0xa0 [ 2491.905100] ? vfs_write+0x354/0xa70 [ 2491.905849] ? fput_many+0x2f/0x1a0 [ 2491.906576] ? ksys_write+0x1a9/0x260 [ 2491.907335] ? __ia32_sys_read+0xb0/0xb0 [ 2491.908154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2491.909207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2491.910241] do_syscall_64+0x33/0x40 [ 2491.910985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2491.912008] RIP: 0033:0x7f2b12dadb19 [ 2491.912755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.916433] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2491.917957] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2491.919362] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2491.920775] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.922195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2491.923610] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:32:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 10:32:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a001c000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2491.964088] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:32:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4, 0x200000000, 0x0, 0x0, 0x8000, 0x0, 0xfffe}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) [ 2492.006189] serio: Serial port tty25 10:32:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0020000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2492.092613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2492.094765] EXT4-fs (loop1): group descriptors corrupted! 10:32:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 10:32:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000080)='./file0\x00', 0x80, 0x200, 0x12345}, 0xfffff40c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0], 0x6}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2492.140926] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2492.166941] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2492.169068] EXT4-fs (loop1): group descriptors corrupted! 10:32:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 10:32:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a003f000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:32:49 executing program 0: msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpgrp(0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000540)={0x3, "4b67c3b0890d10d779600a1caf969bacb56ff3aff2cdd22813c1d29028c29b98225814a4bcecd7cb84b34cec1a8bdcf2731288a8c6d8d3cdbd9997e269e81792fa852f751b632974393b32e492d9941607227e99e7df53a05d81edfb296f550543d3aef84614b137cf7c8a792dc451d5be5d6fbba7d9c89e"}, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f00000005c0)="5621b5495d060607689fe80e9d3e7eab8d480451ab0e4ec54195bf6235d007075d0c4142d5bfb79fff1075dc51d1ea8bc166c8a795e05d1d4217cba609a1ac4d4cae01db7a35661cd3e55d71efdeb27817d524952c7a9916fa5cb2005e1946b0e323e64889eef1d4cee8cb4dfd531b8fc393c980a7f9ed2264c47e58ae73710381f97dc03dd4086262", 0x89}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) getpgrp(r0) r2 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0], 0x6}, 0x58) getpgrp(r3) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) getpid() getpgrp(0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x7, 0x80, 0x7, 0x40, 0x5, 0x2, 0x0, 0x7, 0x21, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x82, 0x90c0, 0x339da2c0, 0x0, 0x5, 0xfb, 0x5, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xf, r5, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 10:32:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}) [ 2492.304142] FAULT_INJECTION: forcing a failure. [ 2492.304142] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.306727] CPU: 0 PID: 54411 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2492.308105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2492.309758] Call Trace: [ 2492.310292] dump_stack+0x107/0x167 [ 2492.311024] should_fail.cold+0x5/0xa [ 2492.311790] should_failslab+0x5/0x20 [ 2492.312553] kmem_cache_alloc_bulk+0x4b/0x320 [ 2492.313480] io_submit_sqes+0x6f76/0x85c0 [ 2492.314328] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2492.315310] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2492.316269] ? lock_downgrade+0x6d0/0x6d0 [ 2492.317099] ? find_held_lock+0x2c/0x110 [ 2492.317905] ? io_submit_sqes+0x85c0/0x85c0 [ 2492.318763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2492.319719] ? wait_for_completion_io+0x270/0x270 [ 2492.320674] ? rcu_read_lock_any_held+0x75/0xa0 [ 2492.321604] ? vfs_write+0x354/0xa70 [ 2492.322346] ? fput_many+0x2f/0x1a0 [ 2492.323067] ? ksys_write+0x1a9/0x260 [ 2492.323857] ? __ia32_sys_read+0xb0/0xb0 [ 2492.324673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2492.325761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2492.326796] do_syscall_64+0x33/0x40 [ 2492.327557] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2492.328577] RIP: 0033:0x7f2b12dadb19 [ 2492.329344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2492.332970] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2492.334498] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2492.335905] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2492.337331] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2492.338736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2492.340140] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2492.346980] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2492.349077] EXT4-fs (loop1): group descriptors corrupted! [ 2492.354053] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2492.406729] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2492.408911] EXT4-fs (loop1): group descriptors corrupted! 10:33:03 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2505.979035] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:33:03 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0065000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}) 10:33:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 10:33:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7f) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0)={r4, r5+10000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xfdc8) io_uring_enter(r0, 0x58ab, 0x79a9, 0x1, 0x0, 0x0) 10:33:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000019c0)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001980)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x1) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x1, 0x1, 0x1, {0x0, r6}}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000001940)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x230a815dd5a46a34, @fd, 0xb2, &(0x7f0000001880)=[{&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/185, 0xb9}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/152, 0x98}], 0xa, 0x4, 0x1, {0x0, r6}}, 0x5) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x40, 0x0, 0x31713}, 0xdf3) 10:33:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2506.015440] FAULT_INJECTION: forcing a failure. [ 2506.015440] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.016818] CPU: 1 PID: 54639 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2506.017635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.018604] Call Trace: [ 2506.018921] dump_stack+0x107/0x167 [ 2506.019353] should_fail.cold+0x5/0xa [ 2506.019792] ? create_object.isra.0+0x3a/0xa20 [ 2506.020330] should_failslab+0x5/0x20 [ 2506.020769] kmem_cache_alloc+0x5b/0x310 [ 2506.021248] create_object.isra.0+0x3a/0xa20 [ 2506.021758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.022354] kmem_cache_alloc_bulk+0x168/0x320 [ 2506.022890] io_submit_sqes+0x6f76/0x85c0 [ 2506.023398] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2506.023985] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2506.024555] ? lock_downgrade+0x6d0/0x6d0 [ 2506.025057] ? find_held_lock+0x2c/0x110 [ 2506.025589] ? io_submit_sqes+0x85c0/0x85c0 [ 2506.026116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2506.026699] ? wait_for_completion_io+0x270/0x270 [ 2506.027285] ? rcu_read_lock_any_held+0x75/0xa0 [ 2506.027841] ? vfs_write+0x354/0xa70 [ 2506.028290] ? fput_many+0x2f/0x1a0 [ 2506.028726] ? ksys_write+0x1a9/0x260 [ 2506.029193] ? __ia32_sys_read+0xb0/0xb0 [ 2506.029688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.030324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.030952] do_syscall_64+0x33/0x40 [ 2506.031399] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2506.032014] RIP: 0033:0x7f2b12dadb19 [ 2506.032469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.034699] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2506.035632] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2506.036499] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2506.037361] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2506.038216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.039068] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2506.047633] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.048970] EXT4-fs (loop1): group descriptors corrupted! [ 2506.064001] serio: Serial port tty25 [ 2506.070453] serio: Serial port tty29 [ 2506.078327] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.079503] EXT4-fs (loop1): group descriptors corrupted! 10:33:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0480000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}) 10:33:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0xe100, 0x101) read(r4, &(0x7f0000000080)=""/120, 0x78) [ 2506.185762] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.186938] EXT4-fs (loop1): group descriptors corrupted! 10:33:03 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2506.212195] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.213740] EXT4-fs (loop1): group descriptors corrupted! 10:33:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006afdef000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2506.260162] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:33:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}) [ 2506.358568] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.359770] EXT4-fs (loop1): group descriptors corrupted! 10:33:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006aeffd000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2506.408468] serio: Serial port tty21 10:33:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_io_uring_setup(0x4fd0, &(0x7f0000000080)={0x0, 0xc8c1, 0x8, 0x2, 0x228, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2506.457150] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2506.513613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.514841] EXT4-fs (loop1): group descriptors corrupted! [ 2506.561434] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.562602] EXT4-fs (loop1): group descriptors corrupted! [ 2506.806965] serio: Serial port tty25 10:33:04 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 10:33:04 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:33:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}) 10:33:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000001f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:04 executing program 3: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:04 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x600000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2506.928272] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.929451] EXT4-fs (loop1): group descriptors corrupted! [ 2506.934107] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2506.935731] FAULT_INJECTION: forcing a failure. [ 2506.935731] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.937424] CPU: 1 PID: 55299 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2506.938185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2506.939118] Call Trace: [ 2506.939424] dump_stack+0x107/0x167 [ 2506.939838] should_fail.cold+0x5/0xa [ 2506.940273] ? create_object.isra.0+0x3a/0xa20 [ 2506.940779] should_failslab+0x5/0x20 [ 2506.941231] kmem_cache_alloc+0x5b/0x310 [ 2506.941705] ? mark_held_locks+0x9e/0xe0 [ 2506.942173] create_object.isra.0+0x3a/0xa20 [ 2506.942671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2506.943256] kmem_cache_alloc_bulk+0x168/0x320 [ 2506.943793] io_submit_sqes+0x6f76/0x85c0 [ 2506.944294] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2506.944304] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2506.944317] ? lock_downgrade+0x6d0/0x6d0 [ 2506.944326] ? find_held_lock+0x2c/0x110 [ 2506.944339] ? io_submit_sqes+0x85c0/0x85c0 [ 2506.944354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2506.944367] ? wait_for_completion_io+0x270/0x270 [ 2506.944379] ? rcu_read_lock_any_held+0x75/0xa0 [ 2506.944389] ? vfs_write+0x354/0xa70 [ 2506.944401] ? fput_many+0x2f/0x1a0 [ 2506.944411] ? ksys_write+0x1a9/0x260 [ 2506.944422] ? __ia32_sys_read+0xb0/0xb0 [ 2506.944434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2506.944444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2506.944458] do_syscall_64+0x33/0x40 [ 2506.944470] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2506.944477] RIP: 0033:0x7f2b12dadb19 [ 2506.944490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2506.944495] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 10:33:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0002000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2506.944507] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2506.944514] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2506.944520] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2506.944526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2506.944532] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2506.997124] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2506.997131] EXT4-fs (loop1): group descriptors corrupted! 10:33:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}) 10:33:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) [ 2507.098292] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2507.100404] EXT4-fs (loop1): group descriptors corrupted! 10:33:04 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2507.158660] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2507.208748] FAULT_INJECTION: forcing a failure. [ 2507.208748] name failslab, interval 1, probability 0, space 0, times 0 [ 2507.210406] CPU: 1 PID: 55468 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2507.211207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2507.212138] Call Trace: [ 2507.212438] dump_stack+0x107/0x167 [ 2507.212853] should_fail.cold+0x5/0xa [ 2507.213296] ? create_object.isra.0+0x3a/0xa20 [ 2507.213808] should_failslab+0x5/0x20 [ 2507.214241] kmem_cache_alloc+0x5b/0x310 [ 2507.214696] ? mark_held_locks+0x9e/0xe0 [ 2507.215151] create_object.isra.0+0x3a/0xa20 [ 2507.215644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2507.216214] kmem_cache_alloc_bulk+0x168/0x320 [ 2507.216721] io_submit_sqes+0x6f76/0x85c0 [ 2507.217212] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2507.217779] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2507.218312] ? lock_downgrade+0x6d0/0x6d0 [ 2507.218770] ? find_held_lock+0x2c/0x110 [ 2507.219228] ? io_submit_sqes+0x85c0/0x85c0 [ 2507.219716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2507.220239] ? wait_for_completion_io+0x270/0x270 [ 2507.220776] ? rcu_read_lock_any_held+0x75/0xa0 [ 2507.221309] ? vfs_write+0x354/0xa70 [ 2507.221722] ? fput_many+0x2f/0x1a0 [ 2507.222136] ? ksys_write+0x1a9/0x260 [ 2507.222564] ? __ia32_sys_read+0xb0/0xb0 [ 2507.223028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2507.223611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2507.224192] do_syscall_64+0x33/0x40 [ 2507.224595] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2507.225152] RIP: 0033:0x7f2b12dadb19 [ 2507.225584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2507.227625] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2507.228431] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2507.229239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2507.230037] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2507.230808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2507.231609] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2507.256943] serio: Serial port tty29 10:33:19 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:19 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:33:19 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x700000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x339e, @mcast2, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000240), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/77, 0x4d}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="3db733346f8886f9f11e79a4649bf2df41f635bc2c27a4d880fb9a5c7a6429ce059379e51510804ff8a17f1307685dd2ac9e460d8c5ea6a577df130a64fc807b8f4467bfa37dac132da340bf14ecae8307cac0e29c6034af92707ec455cbbc79c578afd933004e9317a2b10700e02f2af041420569c547d9227fc02a8f0c5cfe85d023468446bcb66d1b253f42b34c6451cfc5d3caa95abe861b77c478c3dee8faa63ac601f6093933d463e62b007631c12f8cdcca84ae4e9caa4c1783eb31c9c64700"/208, @ANYBLOB="0000b900c66978492d637277ec50b6ae00000000fa6fdd682d4a9664919d4866ec5c4fd7a89af1d222363d23b15f764f48e8d1a905a393c09b0fcf589bf282ad38a00f1cc7a074fb0c0b5da8db6c3152abd5fe1704be33960f1b3e9c296c8e76b2aafa992fc9b8127f14a8373baa2efc4696ee51e71aa3a96b3ee18ddb779e5351740bb8d61f87e73239d272d838d5931a8e368122acbbfdd671ba1ede067f46e43fc083700dbeeb6ece6517d1b4ee5b871fd1b55e04ea2e6748", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000180)={&(0x7f0000000040)=""/180, 0xb4, 0x8, 0x7fffffff}) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0xf0e5, 0x0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r7) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x4, 0x2, [{0x1, 0x9, 0x8, '\x00', 0x4}, {0x3, 0x8, 0x7, '\x00', 0x1284}]}) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), r7, 0x1, 0x0, 0x1}, 0x8) 10:33:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0003000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}) 10:33:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) [ 2522.514516] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2522.540499] FAULT_INJECTION: forcing a failure. [ 2522.540499] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.543163] CPU: 0 PID: 55640 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2522.544638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.546332] Call Trace: [ 2522.546880] dump_stack+0x107/0x167 [ 2522.547622] should_fail.cold+0x5/0xa [ 2522.548398] ? create_object.isra.0+0x3a/0xa20 [ 2522.549321] should_failslab+0x5/0x20 [ 2522.550089] kmem_cache_alloc+0x5b/0x310 [ 2522.550920] ? mark_held_locks+0x9e/0xe0 [ 2522.551737] create_object.isra.0+0x3a/0xa20 [ 2522.552622] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2522.553665] kmem_cache_alloc_bulk+0x168/0x320 [ 2522.554590] io_submit_sqes+0x6f76/0x85c0 [ 2522.555458] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2522.556458] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2522.557438] ? lock_downgrade+0x6d0/0x6d0 [ 2522.558267] ? find_held_lock+0x2c/0x110 [ 2522.559092] ? io_submit_sqes+0x85c0/0x85c0 [ 2522.559984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2522.560956] ? wait_for_completion_io+0x270/0x270 [ 2522.561980] ? rcu_read_lock_any_held+0x75/0xa0 [ 2522.562918] ? vfs_write+0x354/0xa70 [ 2522.563680] ? fput_many+0x2f/0x1a0 [ 2522.564415] ? ksys_write+0x1a9/0x260 [ 2522.565209] ? __ia32_sys_read+0xb0/0xb0 [ 2522.566324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.567577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.568799] do_syscall_64+0x33/0x40 [ 2522.569701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2522.570913] RIP: 0033:0x7f2b12dadb19 [ 2522.571806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.575796] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2522.577320] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2522.578755] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2522.580181] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.581617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2522.583044] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2522.601897] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2522.604169] EXT4-fs (loop1): group descriptors corrupted! [ 2522.621541] serio: Serial port tty29 [ 2522.699754] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2522.702057] EXT4-fs (loop1): group descriptors corrupted! [ 2522.706491] serio: Serial port tty25 [ 2522.717325] serio: Serial port tty21 10:33:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0004000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) sendmmsg$inet6(r5, &(0x7f0000001780)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @private2, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000340)="cbfda5785024ab142d23e4d828682033ff1913de0e78352870f41bf749f2d500c37b90b733826a70e1c13df38b41c4dc2206bc1de4f1904f8bb649dea446c4e9f24736e77406820d71b332bd6075081be731ff96c8288dbad92430a2ba970eb3a0d43a6e10a3f4a1d7d1e30b311b44768d4c297e9b13e4710ea27bacf6ebb590a653d41a9157ab177b2ef6589095f82653b6052a6fcfd2462d615bf3acee7aee64ba2c4759ce830808c47fe0f30991d33acd68a4f168094038", 0xb9}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x401}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)="a3d99f47c43b0cdb7f8f1da757c638b01ed54fdea09c342978518291815a1cdaf575e825520f38506cec41ed5b4f4556220f8d0eeda5c5ba4ec083e78750308f43c0b711086304cc7ec9fa8a577023ca72555ec116f91af9be8b098ee5cf1c17823ae0ba0b7ffe88de68864ed03acae2294f369c664da2ba07123b562c6fee68f6cd1a502c080ae3fc7672f41dc41e6caac4c56f23a82b0b4b4563034c942eafb10c64f568ad8fa80393194e7e49ff2562532f2e72a790c52868f4c2264ac531db99d73cead8fe9f04", 0xc9}, {&(0x7f00000001c0)="c68c6a", 0x3}, {&(0x7f0000000240)="ca56f118e2bf5fdeda56c20176054fb44565181ce99ea3a0c3", 0x19}, {&(0x7f0000000500)="f03a7791dac13d0cf1cc7f3436c4d77fdc329a3937d22f660f01417501805d36878cf8c36fb823c96cc9d699f8aeff17e58126897a6047e28ba3180c4413a680bc312755a727946b9a6d21c0ccd66d36c94fc6e559bd7199151561dcdd0df5b6383348eaa902579c754f21ca641497d1769624178c1fdc2908793bcd2013f42598be68c55fe4edece41e58de475e518a75c1fd0f74efd7262c85d5c24ff5212a1566b91b792e7e50ede20b6497a5f436d7fd7a", 0xb3}], 0x4}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x5, @private2, 0x80}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000600)="7fb928f16e696f2dddb56e81ada6e11ce5ae9e0abc00791f97eaf78b0150e3a684301649847af7ec8df7963be416f3a8e73cea00f5cfbee53901c2dc6ed68b754bd0df889ec26aeac66b2b54f6c4f1e44e4d5e5c6792d66d28d3133cb1fbc795b5e585256075c513e612ba442ddbf50c83690c626c96219e174e74e96023905ee8600b774aeb02afca080d57bc37af34eeecc6ae6300950bffc85f80dc0de7316e3d6477f5df3e71bbdad082946c74f52dbb115380cbbd5ea16d10ff8d3351ebb2f4253d510a99cba2ad96e098d08b1d61959ce17a4659a9d64551b95826712c8192821c", 0xe4}, {&(0x7f0000000700)="efee1617014a", 0x6}, {&(0x7f0000000740)="11e6fb1283ae5ecc0033e3e0a620c4ee8254d4b2c9ebbb9328303b672f6d3ff04bcc5ce2f981a4c55a4da3d7787ac03249eeb8820733726e3d5b086436c51552c92d5c2295cadefa39222646ecf17be81095cc930488e90d638301e73ec206b9e8f260a4b106b72d1111315d2f909b2ecf264cfe607e0ed933b43e9af6cac61e87cec845853e501cd6e889c093e1215a25a052aa050d5a9514cb3eae61f1fd519bf551d8f67e21c78649e43ff1f56e826454fcc7efd8021568364fec799f7c9f5537aa2d4e8ed8ec71d3bf51a81de6d43d0f47b46b8d10d10422294227e3db797f1d8e93", 0xe4}, {&(0x7f0000000840)="7038d976e5a67d2a488ffbaab1435623669f8d7e840142d073831d08d23e35111a87c08cae2561dff8c03bee744d50ce71c025cca1496c80a9db6f39f30aa73319e4b2a6fc643ee12fc772f9e2b8bbd099e684620a9093f4eeb099db9b8d6bca1862733305de59c00333e1f17f77d3e542c101460c2a206950be3a8050c749e0df7de8881ef092a6857311e3cf0e203494e27f93df0311ac81dc6e3109feda9ea5c32b403febda704a4f9e184dbf7c2bdd136c236ed7868908960fa0487ac4f29497d6a7ac85ec6748217b7eef9a6168e833b19ddb04e3", 0xd7}, {&(0x7f0000000940)="c2b16459c6452ae97c7201e841353285da5d0ba314a2bfff2c17ed2d9d2a6a3d4a71b44a8d2b271f780b8a65b842c4d98b95d97e61c0a1784530321c56b2183555aa0eb2d862232fff0e5a91e9743eb1e895fdb27ca7ccf55742201a99570cb4d28e6f3f0baf70dfd12559d49a57339d01ac8afea472d6c67a933ecdef5c43c5645373281164a6df373eba3001c0758133b64748935bb92e7a757d58b73dd1e92ef4742ed69fe576a4e2ed2dee0eeca493ec493c82dd080fb94fb88b3082f252d0f4dc50b3e58ee186560b5ac344f570", 0xd0}, {&(0x7f0000000a40)="3c7148dc01cc8f7605002c3a77abc0ad179e76640039b31060526f9a9e63a2a4d064d2561798bee66f8ba64f3b821f30f6528e79fa650ecd", 0x38}, {&(0x7f0000000a80)="aae31cc012e3689f79df271669ccae60bd00", 0x12}, {&(0x7f0000000ac0)="4af33078a788ecabce4ef84f0a90f577c1a5233ff25e276c7c6309ddb92b638b58a02947eb5d8522288bd8166d311d99e6b4edcb597feb87fa0e89c9765c15e48c8a69199fb4a9eb3d016e951bfb86fafc50dcb39209134c3db014d7512c940b9cd514abaf3d603abcf738eb3f701596ca4b7803345dbc40fd017544938905f47c59aee27abb299adf37affe0cd8a341c5fd47600b42462b5aae97e95bde87f7f16f9cc1bab5b5b4f66d6049644bb2ac98204ccc124490e69f4eb2f48f4b317ea4078aab4f34d26ed0c6045f1c682b3880fde037664646dd30c9a32ed41eb36aeeb0", 0xe2}, {&(0x7f0000000bc0)="a0b7af7816101a611e512e502ae671f98d4412df1721ee181525bfec810e63a4206702433df9af5b199bdf5e75d144e5caf7c33257578f5fabd86f3bb439ba", 0x3f}], 0x9, &(0x7f0000000cc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x80}}, @hopopts_2292={{0x1c8, 0x29, 0x36, {0x2a, 0x35, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @generic={0x4, 0xa4, "d367b9f92f496945b7a2d689686bacdf8db0d1882777fc2c9e9379057f74ed63e605136c5d778df1e0707d906e106d41e97ec86e2c6ea70342b74e297140262c2987b7712426a339bddb4334364364d09b47e34c746d2731309c1bc6b2e235ea0768859b6445633c4ef483a452b125adb7bedbbefcc72c0351ffc1e860c4332746927a12ffc1b926c5b12a250d97ed8e10dd590e1fe356dc493474cb3fb547c2c168f0ec"}, @ra={0x5, 0x2, 0x4}, @generic={0xb2, 0xfb, "a1e136b8c8f74f999ed5230d9184094e6230355e0f2f34976d037077705a1bc6b37dd5dad17e98db5716a1f1f5f20250a9d40d0b5152d5817a38ff33e6ad796811507b3a84c20756a32918ad2cc5993179e0ffa4bfff5e354c8229ec415cc4b6b1ac29a7f0f23262702581b7763dd4047176ab676a5a540a0fdc0e5d2e18c6725db496a562ea7702980869857d9f5f83647d5cf7c826eec9b25cb23bb682420d1342db3dc658e2a91944a2cb5f60569544332928ff31457dd9cbda8933617f12055bb00ff5a09c88b07adc3ef195c34e89263600fb8ac092fcc35ea457bd2d3b0fd3c0e23b744f5f9161d50ca4c63151a3565680ee9822758e2263"}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x87, 0xb, '\x00', [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x8, [0x7fff]}}, @hao={0xc9, 0x10, @private0}, @generic={0x1, 0x33, "07d093d9855447b15d0d4018c5760c20b9cfc614a66c3e5a175d4bf10a84f990491a9405ffa7b93c37ed3311061936bb4b07c6"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @mcast2, @private0]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x3b, 0xc, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x6}, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x4, [0x80000001, 0x7, 0x549, 0x0, 0x1, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}}}], 0x348}}, {{&(0x7f0000001040)={0xa, 0x4e21, 0x1f, @empty, 0x5}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001080)="8144e5ac33fa631bf94f9293c7a43adc3f0e149e17c37db11f343d3c40049814178ecf54bda5ecc9c2fc41e8a16265f1246c78c0908a5a061d0c4a1f98b1bc40e26f309af22b740773f62bc875cbf55ea4b7df626794b4e98a4c39424bd50191877c96590a136a66da4a4d64f499ab04ea01a188f0f4ffe483aaa5ef5ac9dd8bcf8f4d8a5359fd927d76d463ea01ec326421ac21ea004fec2697400c36b972031971bf184e3101b95286e03963266ee82fcf4515db59c2b5a542c62b21487ed7f8ceafb7e2351c329ccaf445bbcedd1ea4", 0xd1}, {&(0x7f0000001180)="30ea7c36b4e06adeb439268c7ef0819ec9d21580a9a8d59b91b56de1b38cc4471508352878d8a92182a409eadf5e780818ad5e05f207f36a6eaab907138f58278870c0bbfea268d73693049a33d55247c740c3aef69d0e0817ca38fa932a942a05cd9a8c654badbcc5e054fbb472f69ff79185e4c6af080d7d3d08796d1d7e045ad467e856d2878d9d8170bb90f65a35b8e7834d0bffda5ba674e627db40d5f6e2978772251e99fe", 0xa8}, {&(0x7f0000001240)="5aa2ec9563b6", 0x6}, {&(0x7f0000001280)="6db9e392777265ba415782b7", 0xc}], 0x4, &(0x7f0000001300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x8, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xfff9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0x80, "71827dbb74e7d789814dc88dd3bcbf798276280fbfc351ecaaa5457efb99fd447ec1931637174755c2269f773720aa75315bc55048a3c331a74f30501be6ab0cc823cc6cd41579ece38608a6214b79e144739402a520b64109654cecf2adb59ad506308a44f10f969bb2cdf23eb5b8d5ea88863df0aa5bf2bef2ed956173b520"}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x50, {0x1, 0x12, 0x7, 0x8, [0x9, 0xdc9d, 0x400, 0x3, 0x9, 0x1000, 0x9, 0x40, 0x6]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x6}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x14, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x6, 0x4, [0xe03, 0x10000, 0x3ff, 0x200, 0x80000001, 0x8, 0x5bb6b158, 0x9]}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x0, 0x6, 0x0, [@empty]}}}, @dstopts={{0x28, 0x29, 0x37, {0x11, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @jumbo={0xc2, 0x4, 0x800}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x4, 0x8, 0x2, 0x3, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x278}}, {{&(0x7f0000001580)={0xa, 0x4e20, 0x600, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe9ee}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000015c0)="c09de1367291841cec5cb2bce48f40905252e498391c284ad59a60355ac5951c24cc1cb406de9cbdbaa3b873f5c08d21c555b84cad2066a9764c4949a3924dbf4d86d4431ca92fd6ccd2b77581edcb8e4785631dee7347d837c051b50c3875d70ee1ac108825910bec156d375a1bca61f32745b10ef636d2c821750be56c1c5075cce815737f33c121e73805dd3e3a72c17cb26a5574ee697c0a2b5544ad7a2238", 0xa1}], 0x1}}, {{&(0x7f00000016c0)={0xa, 0x4e24, 0x80000000, @private0, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001700)="bce9bb1c6676da4fdf66fd6624519451f24f73f7b67f12d349ece12454ea17", 0x1f}], 0x1}}], 0x6, 0x4000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f05}) [ 2522.853119] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2522.855323] EXT4-fs (loop1): group descriptors corrupted! [ 2522.881075] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:33:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0005000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) [ 2522.993930] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2522.996065] EXT4-fs (loop1): group descriptors corrupted! 10:33:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0006000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x7f1e, 0x3d2b, 0x1, &(0x7f0000000040)={[0x80]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2523.126647] FAULT_INJECTION: forcing a failure. [ 2523.126647] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.129421] CPU: 1 PID: 56064 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2523.130857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.132547] Call Trace: [ 2523.133097] dump_stack+0x107/0x167 [ 2523.133857] should_fail.cold+0x5/0xa [ 2523.134640] ? create_object.isra.0+0x3a/0xa20 [ 2523.135580] should_failslab+0x5/0x20 [ 2523.136358] kmem_cache_alloc+0x5b/0x310 [ 2523.137191] ? mark_held_locks+0x9e/0xe0 [ 2523.138043] create_object.isra.0+0x3a/0xa20 [ 2523.138945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2523.139985] kmem_cache_alloc_bulk+0x168/0x320 [ 2523.140927] io_submit_sqes+0x6f76/0x85c0 [ 2523.141822] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2523.142884] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2523.143875] ? lock_downgrade+0x6d0/0x6d0 [ 2523.144720] ? find_held_lock+0x2c/0x110 [ 2523.145577] ? io_submit_sqes+0x85c0/0x85c0 [ 2523.146474] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2523.147462] ? wait_for_completion_io+0x270/0x270 [ 2523.148458] ? rcu_read_lock_any_held+0x75/0xa0 [ 2523.149419] ? vfs_write+0x354/0xa70 [ 2523.150187] ? fput_many+0x2f/0x1a0 [ 2523.150934] ? ksys_write+0x1a9/0x260 [ 2523.151717] ? __ia32_sys_read+0xb0/0xb0 [ 2523.152546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.153618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.154669] do_syscall_64+0x33/0x40 [ 2523.155433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2523.156478] RIP: 0033:0x7f2b12dadb19 [ 2523.157240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.160987] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2523.162549] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2523.164003] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2523.165472] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2523.166933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.168381] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:33:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2523.178770] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2523.181776] EXT4-fs (loop1): group descriptors corrupted! [ 2523.217653] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2523.219789] EXT4-fs (loop1): group descriptors corrupted! [ 2523.244217] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2523.342223] serio: Serial port tty25 [ 2523.371978] serio: Serial port tty29 10:33:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0007000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:33:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 10:33:34 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:34 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa00000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2537.165483] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2537.174450] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2537.176890] EXT4-fs (loop1): group descriptors corrupted! 10:33:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) io_uring_enter(r5, 0x8ae, 0xf2d6, 0x3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 10:33:34 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2537.241183] serio: Serial port tty25 [ 2537.279797] FAULT_INJECTION: forcing a failure. [ 2537.279797] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.282687] CPU: 0 PID: 56308 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2537.284085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2537.285755] Call Trace: [ 2537.286290] dump_stack+0x107/0x167 [ 2537.287021] should_fail.cold+0x5/0xa [ 2537.287782] ? create_object.isra.0+0x3a/0xa20 [ 2537.288698] should_failslab+0x5/0x20 [ 2537.289467] kmem_cache_alloc+0x5b/0x310 [ 2537.290269] ? mark_held_locks+0x9e/0xe0 [ 2537.291080] create_object.isra.0+0x3a/0xa20 [ 2537.291951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2537.292958] kmem_cache_alloc_bulk+0x168/0x320 [ 2537.293935] io_submit_sqes+0x6f76/0x85c0 [ 2537.294789] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2537.295808] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2537.296765] ? lock_downgrade+0x6d0/0x6d0 [ 2537.297614] ? find_held_lock+0x2c/0x110 [ 2537.298429] ? io_submit_sqes+0x85c0/0x85c0 [ 2537.299317] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2537.300277] ? wait_for_completion_io+0x270/0x270 [ 2537.301262] ? rcu_read_lock_any_held+0x75/0xa0 [ 2537.302193] ? vfs_write+0x354/0xa70 [ 2537.302938] ? fput_many+0x2f/0x1a0 [ 2537.303657] ? ksys_write+0x1a9/0x260 [ 2537.304411] ? __ia32_sys_read+0xb0/0xb0 [ 2537.305218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2537.306276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2537.307307] do_syscall_64+0x33/0x40 [ 2537.308053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2537.309078] RIP: 0033:0x7f2b12dadb19 [ 2537.309861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2537.313509] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2537.315078] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2537.316501] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2537.317928] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2537.319339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2537.320751] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2537.329054] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2537.331212] EXT4-fs (loop1): group descriptors corrupted! [ 2537.393484] serio: Serial port tty21 [ 2537.396911] serio: Serial port tty29 [ 2538.102158] serio: Serial port tty29 [ 2552.716318] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0008000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:33:49 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:49 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa00000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:33:49 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:33:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 10:33:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) [ 2552.814455] FAULT_INJECTION: forcing a failure. [ 2552.814455] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.816949] CPU: 0 PID: 56557 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2552.816960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.816965] Call Trace: [ 2552.816993] dump_stack+0x107/0x167 [ 2552.817021] should_fail.cold+0x5/0xa [ 2552.817043] ? create_object.isra.0+0x3a/0xa20 [ 2552.817064] should_failslab+0x5/0x20 [ 2552.817082] kmem_cache_alloc+0x5b/0x310 [ 2552.817101] ? mark_held_locks+0x9e/0xe0 10:33:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) [ 2552.817123] create_object.isra.0+0x3a/0xa20 [ 2552.817142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2552.817167] kmem_cache_alloc_bulk+0x168/0x320 [ 2552.817192] io_submit_sqes+0x6f76/0x85c0 [ 2552.817239] ? __do_sys_io_uring_enter+0x6b5/0x1920 10:33:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 2552.817256] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2552.817278] ? lock_downgrade+0x6d0/0x6d0 [ 2552.817294] ? find_held_lock+0x2c/0x110 [ 2552.817318] ? io_submit_sqes+0x85c0/0x85c0 [ 2552.817345] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2552.817367] ? wait_for_completion_io+0x270/0x270 [ 2552.817389] ? rcu_read_lock_any_held+0x75/0xa0 [ 2552.817405] ? vfs_write+0x354/0xa70 [ 2552.817427] ? fput_many+0x2f/0x1a0 [ 2552.817446] ? ksys_write+0x1a9/0x260 [ 2552.817465] ? __ia32_sys_read+0xb0/0xb0 [ 2552.817488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.817506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.817530] do_syscall_64+0x33/0x40 [ 2552.817551] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2552.817563] RIP: 0033:0x7f2b12dadb19 [ 2552.817585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.817596] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2552.817616] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2552.817627] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2552.817638] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.817648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2552.817659] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2552.829891] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2552.829904] EXT4-fs (loop1): group descriptors corrupted! [ 2552.880371] serio: Serial port tty29 [ 2552.887003] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2552.887020] EXT4-fs (loop1): group descriptors corrupted! [ 2552.895515] serio: Serial port tty21 [ 2552.969205] FAULT_INJECTION: forcing a failure. [ 2552.969205] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.010282] CPU: 0 PID: 56731 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2553.011674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.013334] Call Trace: [ 2553.013897] dump_stack+0x107/0x167 [ 2553.014634] should_fail.cold+0x5/0xa [ 2553.015404] ? create_object.isra.0+0x3a/0xa20 [ 2553.016329] should_failslab+0x5/0x20 [ 2553.017093] kmem_cache_alloc+0x5b/0x310 [ 2553.017920] ? mark_held_locks+0x9e/0xe0 [ 2553.018737] create_object.isra.0+0x3a/0xa20 [ 2553.019624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.020649] kmem_cache_alloc_bulk+0x168/0x320 [ 2553.021567] io_submit_sqes+0x6f76/0x85c0 [ 2553.022450] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2553.023451] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2553.024419] ? lock_downgrade+0x6d0/0x6d0 [ 2553.025256] ? find_held_lock+0x2c/0x110 [ 2553.026096] ? io_submit_sqes+0x85c0/0x85c0 [ 2553.026977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2553.027949] ? wait_for_completion_io+0x270/0x270 [ 2553.028076] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2553.028917] ? rcu_read_lock_any_held+0x75/0xa0 [ 2553.028933] ? vfs_write+0x354/0xa70 [ 2553.028955] ? fput_many+0x2f/0x1a0 [ 2553.028979] ? ksys_write+0x1a9/0x260 [ 2553.034022] ? __ia32_sys_read+0xb0/0xb0 [ 2553.034848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.035929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.036972] do_syscall_64+0x33/0x40 [ 2553.037726] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2553.038765] RIP: 0033:0x7f2b12dadb19 [ 2553.039518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.043211] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2553.044747] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2553.046210] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2553.047650] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.049086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.050548] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:33:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2dd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x8e43d2d221edb720) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000001e00)={0x1414, 0x29, 0x100, 0x70bd2c, 0x25dfdbfd, {0x17}, [@generic="9c8968800044c8099a0c6cdb39ea575b2c06113c84548ca79b56e257e474113bb1c8a160890ee01a237d1c9a8c22a51790d5e8c0e74da1f5d72d3ec76670037e5ec06a369ff8321ef9c773582059ea4ec208a2fe672dd63a028017ff962e9da0ebe3381188103c93f567a2", @generic="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", @typed={0x4, 0x26}, @nested={0x13a, 0x2b, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}, @generic="213b2ac141b29be90d95e89f4c7ff9ffcf8aa63eaaf2878811099fa5edf0ce8b9d09c7974ee20a54e46e6bb423d9a9bb0f5ef3dd203644a1d504e0946e3df8e36fbf367923dfd5abfa1ae3e22c213dbe03f88cf570b61864", @generic="6a630d6e7802617e42ecba7ca4af5817d1734f7a259f6b6934fcc2632d2c4200ba1340814466b0719590de5f9d9b6a5aa43055234ff183ed5b909384d9257463d2a608c745a8e2fcb31254b26c680e056ea9ece4ae44a2a8d024b1a1a616ee22bd396259d3a82cc7a704b31120d23a7964d070b750d4783995a4e1397c42165f448992958269524769b70d89e253dcbb76be8c6fa46888274f3cf56713d6cddd4a9291037e86cd9471877aec4dc4fd9a5214f02e816604898cde", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6a9a}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x3f}]}, @generic="e94a084b97afcf71ac7c0ff1d644", @generic="a95e23e1569086f25458bff500335d417fc05e905ea083d777b6d827a66de84d17e2cdf08d7df16425954ceb05cb6911ce6255b75ab082820b9861a2b14097a0229e1bfd6bd86dce74bff12e5ce5e9ef32dd0e3d2249bc2e9fd38c9137853ac2ff8217db2e7ee46cd3c5cad90e9a5aaf4b3316e6465d0b29878040a71a7530dc8a243c7e5a7610318c2f3ab719d1895353dc7cafbe490180c04ceb4f04f0ea74c5f5e7f9fd04701f3563b1f3a3fa04e77936e1b79da4684bb1c2b9e937dcff482881a16542fe874120fed5363646d46878f5bd5bc3d6979a6e7fd750466f96aa7bd0f7417958aa245beecc4ddcd01adfc6ed4c581f", @typed={0x8, 0x65, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x5a, 0x0, 0x0, @pid=r8}, @generic="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", @nested={0x40, 0x2b, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private2}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@private2}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x4944}, 0x40) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r9 = fcntl$dupfd(r6, 0x0, r6) sendmsg$inet6(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) openat(r9, &(0x7f0000000080)='./file0\x00', 0x80, 0x20) 10:33:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a000b000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2553.147142] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2553.149330] EXT4-fs (loop1): group descriptors corrupted! 10:33:50 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) socket$inet6_tcp(0xa, 0x1, 0x0) [ 2553.200731] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2553.202866] EXT4-fs (loop1): group descriptors corrupted! [ 2553.231110] serio: Serial port tty25 10:33:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 2553.270506] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:33:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0018000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2553.408299] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2553.410493] EXT4-fs (loop1): group descriptors corrupted! 10:33:50 executing program 3: openat(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', 0x200, 0x40) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8074, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6d75, &(0x7f0000000040)={0x0, 0xc167, 0x0, 0x3, 0xad}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000001700)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r5, 0xc6, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000001440)=""/139, 0x8b}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/9, 0x9}, {&(0x7f0000001600)=""/37, 0x25}], 0x9, 0xb, 0x0, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 2553.476546] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2554.060358] serio: Serial port tty25 10:34:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 10:34:10 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) ioctl$FIONCLEX(r0, 0x5450) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:10 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:10 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7, 0x0, 0x38, 0x1, 0x0, 0x101, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x4008, 0x5, 0x4495, 0x4, 0xffff, 0x4, 0x2, 0x0, 0x3, 0x0, 0x7f}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000240)=[{r0, 0x200}, {0xffffffffffffffff, 0x8004}, {r1}], 0x3, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1074, &(0x7f0000000340)={0x0, 0x82aa, 0x20, 0x0, 0x33a, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x4022010, r0, 0x10000000) r6 = epoll_create(0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r7, 0x0) shutdown(r7, 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) accept4$inet6(r0, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x80800) syz_io_uring_submit(r5, r4, &(0x7f0000000480)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index, 0x6, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/228, 0xe9}], 0x0, 0x2}, 0xf589) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xa0) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:34:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 10:34:10 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x600) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a001c000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2573.183556] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2573.243994] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2573.246171] EXT4-fs (loop1): group descriptors corrupted! [ 2573.308571] FAULT_INJECTION: forcing a failure. [ 2573.308571] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.311211] CPU: 0 PID: 57301 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2573.312560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2573.314224] Call Trace: [ 2573.314756] dump_stack+0x107/0x167 [ 2573.315495] should_fail.cold+0x5/0xa [ 2573.316262] ? create_object.isra.0+0x3a/0xa20 [ 2573.317176] ? create_object.isra.0+0x3a/0xa20 [ 2573.318115] should_failslab+0x5/0x20 [ 2573.318875] kmem_cache_alloc+0x5b/0x310 [ 2573.319701] create_object.isra.0+0x3a/0xa20 [ 2573.320587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2573.321615] kmem_cache_alloc_bulk+0x168/0x320 [ 2573.322553] io_submit_sqes+0x6f76/0x85c0 [ 2573.323418] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2573.324422] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2573.325398] ? lock_downgrade+0x6d0/0x6d0 [ 2573.326240] ? find_held_lock+0x2c/0x110 [ 2573.327063] ? io_submit_sqes+0x85c0/0x85c0 [ 2573.327939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2573.328910] ? wait_for_completion_io+0x270/0x270 [ 2573.329883] ? rcu_read_lock_any_held+0x75/0xa0 [ 2573.330825] ? vfs_write+0x354/0xa70 [ 2573.331576] ? fput_many+0x2f/0x1a0 [ 2573.332311] ? ksys_write+0x1a9/0x260 [ 2573.333077] ? __ia32_sys_read+0xb0/0xb0 [ 2573.333879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2573.334941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2573.335988] do_syscall_64+0x33/0x40 [ 2573.336740] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2573.337771] RIP: 0033:0x7f2b12dadb19 [ 2573.338544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.342244] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2573.343776] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2573.345206] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2573.346798] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.348247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.349677] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2573.357707] serio: Serial port tty29 [ 2573.402485] serio: Serial port tty25 [ 2573.993288] serio: Serial port tty25 [ 2574.174910] serio: Serial port tty29 10:34:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0065000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:24 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x700) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x9a96, 0x0, 0x3, 0xd4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0xb48, &(0x7f0000000380)={0x0, 0x6cff, 0x8, 0x3, 0x2f7, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r6, r9, &(0x7f0000001ac0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r10, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="676c55de5ca7a62a662f50ed9b15ef342f667eb010df48709a2b9e25da6d1d54", 0x20}], 0x1, &(0x7f00000006c0)=[{0xb8, 0x114, 0x1d, "7a90aabbdc58476a373bcf479fc2939ea3ca87bc81ed098590108a40797d1ba0aac34284a9689798b239a0d5e7059334ac74a09d093c0897e3b0f1de0361ee57558d017c381123636b78783ac5a97faa5686df5e2c527fef5733751b59b650ee4dc0ed16aa441777ad270e2ec9546fb19ef9cc6b89516674938cdbaee8e2be4285fee914a276937586decfbbbb3f9ce793274f9d2ca49691a790db37f3b39d21f3e6b3fa9392c610"}, {0x1010, 0x116, 0x4, "82b6f503e6687199a62dcc111522ef41e441401d007c4b2cbf8b0e4aea46829cbe4d79c26402495c0559ab833d8f9687bcbcd03d2489011720184e3f2d54d948897d7e636b06caf20b5133ef5fcb3aeb37e540ef44931bdbc38e548bba3ba6e31361eeeeb54349fa68389088af5c250ff769b0509cd977ff74310cb3e79d652d2c020b765f40ab1014db922767cdc978d2295a92df25808442fc2c46674e43f9901c90b0e6fef839fa0cdeac9507f2cb29d3d66af97f93180be50dc6dd4c9b09b65652d349ffe6a91404dd8f7796efa4bf02db7a3d24ab8d247250af79d77dd3c2e24232733bb9cecafd86c0a33cc38649295cd068c6c24d8629aa798ee24429c00bfd9652e0c4d79f5f5a6e0b7a67a599d090d077f7ef665c229b1979255c77a2cdd67080e23982596933a508df918bf71bbbee25809d0624afd36655825cf0933c83c7e9b3a2c5d42371d2f7f0f281c960a2369ac9e8290d14689f8ed928fe2bed6eeadbd0aed6623b444fe3ba138cf71bb54d405ef4fb363e2a326ecfc49165d5c558f6c640a74f61cd21a21ccccbabdc13eabfcfdad7af39b5ff45bc724ab8a7ccf135bd5b30bf26326ceee1deeeb46c75d71b1e3ac88199ce724a39d27a88aac0e0ef898f1d59846228668810de8e5fbfe96bfb39877ffb0a71c3240a9041c93ee31220d49d6b28d43e06cf657f50fbf46696deb4320990a7056bf9c3a2e4767bdcbfc0f93768dfdffa68dba331406a50140d0007d20668b4ca1faa7433112322f6440a84ca144405595cff24458b45436ae507c1093d15a8d08c9c07e12923bf517fcd10793d17627087486810ea27ce49d75ac5292f2e406422e47e7437bf64889f0c628f56da257dc27d1a0d406c0b6e6727fd6d6171862e956557d2da71de1a5089bbfa55e2c168c10556814e3512e9e1f8de60bf9da1fa767b6455482a407ef189c1e528e32814cb80a7a92ff996118451981ebe13b2eca895c5f24fa25a2b1b6418a20112227ece7048c9e338fb5db96788034f65374ac6cbb53ce099d61e2a170c4d621223713f8d9cdcb99c5c1e0993a51799986f3b8c4ac8f59ce0abda658f18ae3fe73c3c0d5ec5ec76bbe0745b53d9041c76a6bd4604e55987923e9914f3aa1cd7e4f82b600f4f3335ec9d5f1af097a93d64f47e31dad2e628ce78b6a59fd68b06c4d64c0c5022510b85f32718411a96a2e891f053cc72291be8bd21299b3264898a9d4cde8a8a1745c790dc808e72bfb1f1f39fa31ef5bdda16dd8b51a0a956d694178f0e27f14eed955f039aed8fdfa9284817ea1ef5eabdd2fdfc9d84bdb284317099ea68fc2eb6eb60da47dab2cffa9082b6edf47ed3969de472e23227fb5a026295a7bc21bc0e05f09b8a10604fe02b45914d9302ad9fa990f123f90ed8641c86d96692976119f48496ed04eebc861812682db1d75484868d91db64c3643ecc045e1c6b387d6211b8c6f89f5799480e5a8676e0d84d96379bd0feea7032897f9f0c4557e273b9467ca9954d7a2a17e155bc4f6b9f91fc74d0b080ef8d03d111a3fa4d975923e11c350e945ad2df1caeca4146cff207c78762b3e81278837681e2facbf6fdb2946bfdca22316e38cd3d55bdf753bd9b3b67bed4e604598703b64b509ec76480031e80c39312a9e76b7f64a42b15091a71ade7ded1ab67ccf70c99d05f532ee0118c1cd55762aeede1c595937e68dc33ed1b7300e6aa6909a91f0e44340802bf40a10c4b99df9f886ce030f8fbfe8efb2dec204024450ab531a2930696a31450e3b29372ea015ace760617fc54cbe8df8b59727620afea169faf2ddde9d55b064e1b9711e274838277f0b8adf3e15e8820bd3dd42b114158ab6a8c29f6beaabc869194543787eec097c0c965d8fa93c30d9064a6c1a19bdd3c3b539549ec48582d5893da432506279b414d2f44168df5048df79a9dac0912c758ead8a00bbc69c2a8fcbd06c11695f91c3f29feb1508545d20412becd4d461cc569b5cc4686f388d9c6d9c57eae97ecf8357d2a71ad8d4f7bd42663699eb0ab41cb71f44e6714a065d5ff20eb4109b588fcec9cd17c49c8ceae467189c737777e11741d098022fb7ef7f48f59691afa9dbeb16329c6ddd61e2d5deb4336761c836f3f1fec4c7c918cf0ba2eb325b4de79b97d248c8ed123e0ae30f7a8b4deffe69f026551f99fcbec33b950d37fe4a721651bd267a9f2a4328e7a43096fdd84da855f69159e6c8d1058c7e48b602283f0fcd9bcf86c49661783b84e465f53dd1e9930f86f5cacb7922752abaf5e22f64fa481472141ccdebaea6e3e068a44f3a0a06a9b7d94ef07bd53f039f546512021de61b8785952a05e78faa777f3a01498298480e0250accc27c9a6039f765287281b9216bd78368598947c8528180a98ff2831483948fa9848969813548ba5e76831241e6552f9c0218bd11996eb88b9782c8e3998410b4c698d077dfc29475cc3b08c7dba4bc89b952ddf8e8e06dd146ed5d79c8aac9fb57e1c06f952aa2f581279b542907be29786bc16595801cc0784918d0526c9f5e3fb50593a59595a395791d6b4284e7ba3eec1a64b9dc2903b5669a24d426ea94b07d285ae392dcbeb5d2805ef811cb58ad507c0dee4192c416f7937dd04950fbfa896ebaa814d559f41beefbe04fe7052908470295c6fdd1232d8d57a2278fe776cbcde2c1880235ab4d944cfa05b4ac44917f017b4df2bcac4bd51f6235e0e435b2b08296378b60ddfd017f13a3329a31693d3cfb1634a07b07cba569c404dcfb33cc6dcf791cc1f6bf3799a279981ca11f27168a471012494e231efd5017d798bf1f7f282e68d4cac08179341fcae2b9d8579dc426df59de82074e4ece2d954f92175ca780cc6506c318ce2755f944d07d442a0d45d6e3c1f21be9bc3ea723fe778bada79f35a5bd64e6ea4d9c356e0c85268f5add0d13b50a9626ec648065b1327b73cdd4d7c7c267cac3eab1fc08c10d686b905aae5f2ef4f26daa74a25848687f3032a21f0b7d941c1f0ca26d30a92b80166e8714bcf9f7803ff57f1ad339e3591a82796e1e373ffff40094ccc175f00fd7529f0ddcba0bb7a9ea6693c5050c750a629dd1e2b88607ce8cac9bf768ed01f6e2e914a9fa0ef571dbc05bc5c18414ec9a1d0d8344fd4eece635a2bec66a72d3f7146cbd61605ab42d9181557091581c5cdb6832f1aa069c7850f0755093679673c84200fd4f41619e3eeb8c5e533890952a4e51db97a37226d137861e975b6add27295c578ad89c62b6ff7ece3aff7a73c8a34c67d433023eebdaaa3bbc89251b5f2acd288548806f5d50fb07ddfd0651ee52da4ebed271cba8ed3ab88f2b64543ba61db41fe1926eb4ac53ea827dfd9532503087c9491b74699e1ac30ace14b04f63985596656f8bab00ace6afbe26ac032baa361662c3c4dd3959bf544713f6ab7d2485d163d41beb287c3e9d4af3692e5dc3af3b69afbbb5bf41168119644cf562e8da4b04d818dca79580d6a8a90ab74209c5e80ad6c0c2c684cd0886a9b397ee31b0d254f114751d198a934d335cfa49180af5ac54bae23ec6e6ef93d46a4f98147dc7ca69d1583526280015fecefe2820feffce5505d1d81cf59c8f34a6c9caca59a63c0d362aad33baeb042be3fae8201b8f237a15fbd2a09ef65089c283dbed9a8af2315256c2736a5a3bb1538434f58da9ff7c9f39400ad45e7ac22c3148305d560c2040f93d3dcdd0ebd2e421a0ade1cdee08e767f97dd12ead8b436b161222a3b2065a1c8c9d924fb776b3e6f520fc3c81b20bc11a0d320c3f1903ba17e0b4cd3d4e274443eb8c3bc715e8ce72408b4f954d8518f3ea89a709db4d188e8bb8a2a914245d0d07a995b14c066b00e07cf66b117b850d51c101ed17311f743c0045280056db9600682723082221b62670b0c75585e037930a9a6b9fd36ad70424c29f96bb4ea743d25cfaf6723c31519b849557156d4f9d142af6f8e7e3a8222ff470aa1560969aa109882951b44d0fc7a7922343d9e9739d2cbefc3f50b74a817544510c97504331f613ad652ab5cc97a0276a8143cc1306d2f1ae7996843144ce0a9ebb8bc69f5d0cee10ec7b8323c801c833f1787f5bd4283ac9f90e7df837b96950bfe7e6c8b7d1a92053e7b87de656a6f1f134c7c8591b74d3d6deb31da645bcf0105cbc21ea2f1391075695659e863f09f6157efc7ab79f1c508eeb275f6de20302326cdd6d07a59f0e9e48155402be1d7dc278d11278a9629b6a035676e165f7bc7c32f3017f28991a5cc9ab526309ecde90355554af3a1ab4a0453bf7d384e240ae5c7531558dd4cd302d86408e715a4c7a8fbec5ebc046ebd4240c9da05dad33bd03cf74bcd401b02aec6e0b39ca316cdce564a327b33bc040e5fee21b99a69860f37407ea601af68869c2402dcafe344a5d3732c5cb7efcfe3f3294610af8c3b66af5131cd0bfada2b783301323107093a8bb3bed4095dab745dcc9040eff5e9fab3947d9531ec3e22f98875b337f4b928784be085a6ba42ed45208d987f847b4a8312395ccc8570ad341c6a6c25c2a5066907f65f13fc25086f3bbaba7800234524bcc668a843df13bccf44d75ca6bfbaf3e0c1b92e80a24b06ab80708183a09600a20c9ee5d49908b0092f79471b8d789640040982b54323d7d7890b13031227bc1901cc522e826e0d18b8c2109fb3499e61d3a30dbec5cbce629e9a295b85a8239537738c7b1ecb4a10308b1d833410fc4d161d305202466edb43339200d02dc4d8cc630d55d776655aea9701e86d0f4fd0e738a3384cd8c8d84e0c4854cdb8e2f932cbb3dba2e4fdbb729b81f6512547e1f0a15b8a356c5e677a0bd3971072e49c5c416924927c60c845c2851d94712496605d5936f7a2db00ecbac3f169cd5b97bd2b6c0955afb6bf32f44093c14c7af041444465edc3b1810d1457de7f0f0c39d6e75debb45744ef484de98f882902774072f8492bae973865d9e34b151c3670fb53be6cfc3a297c15ff8fa4d01d2ba25959dc43bfdae32464fe8a4cd74f8739413d1a081e997dc04b799a845af1ef679303815b0d44e3f3e6e8f233c681107edc3d93e7a357111e8e7072058312b94b1fddad431b5422b8269ff6e5465341044f9fbee62eacfb950bd2017b0425830fdc6e1e576a2b25e28338cb0cde24626529c475864b254cd1cf53b1100dc9a541b5372a712df3bed7b15d7ecdd69e2c83af30cc5e390c4d11f42d22a15566cd1707800d7d22e26a8271d02c1b2ccbc1a34c620cc1bd93d6eded9cae08a73d3077e4650b3bed58d8fcdfd2807c0a609dbcbd5d4f2e8155f6c2c34e2b5118fac2bb0de034f9500223e5303843c37a4bbd700c825f266c15371ceb9ddeac638d6826f6a21e014a315ab71495740aff533f54ff25df4cf0f3e74d809ab12f5330578d8865393f108dd5388ab379bdc98fbeb5c04b47507eca1428db338fa1eeca61e2280ace4632aa02a18f1004129b83b4c5ea05a2364bdb6d52317dab745deca3451dc255020a067484902ed513a2c03e94cc2e8c90c56733eea4a3d87e466c96360827834b420997eb6be8bf36c8215edcb531a2493c6803ef52dee0a2dec2db32a0ef92de9497d78045963df2df2a4f898a14e5d4e3983d552983c8991a7c9ca8dbff9a59aa867c14ea35f17bc19a367343a840be20eb045b9861d8e19152428e5e18d7748aefbd70de96d53bd3fd871f0c7704d775c0ca69a7b555e844aee22dcd65b956d9472613d7bf9f3869cf25254262ab73a100f08dbb552945476a4"}, {0x58, 0x101, 0x7, "1e869202e5f7a2e74e640ed96557d1d86744301d6cbf70f38c884730f06027a02ce8e94ce253b6d45e667ba705c2618911eb4d42fc7361e1fb64962013effd240bbba72c3e51"}, {0x110, 0x10b, 0x2, "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"}, {0xb0, 0x6, 0x0, "b66eaf170c0417377e88cbfd447f81cefbdf863f9d2465e4758c6596159037d21f241c09514a7365fe089d60e4756645c98c0991ab151a82ade1213a974e4ed2761dfb7f014cd12377ab40256f6f64a743931b744082f745662d70353b2e9fdf09cc7df06d2c41437d21e108443912d5cb745d6a5bf159489ba0e725af086d151f8fba858584747dbe41754d22a9eb394eee7cff7357cc0026ceaf"}, {0x108, 0x102, 0xffff, "991f199d0ac1d8ab1eb0bcf73c0d59632492d728608638519a56cfd0cd08843df07b91d8f920026ff13716561aa23d272abb28c6c3fb209793aeed837be5a0a9da719c4b1476b9e94bad798b2fc68ce9fd76a611e7adfb578dfbc03fceadcee68d622097d2d59e794aaa90d307e8e46b5b679bf48a6d370b09152bd0e6673d504ecec26eb84ce9ef9d4ec72adf6adb5c5fb2410410c2c670cbdcea9ff98ed020d629d9207399e071cc7ab0d578eb012f7c56780463a289f53c41e1edb126ecfd64bf5624dfec626960d173f2af72d3e92027a2b9f8cf2fdf3922a54b4f6d03e6f58b0c03e4975d2e6a713649bd54bbaae591dfc7"}], 0x13e8}, 0x0, 0x800, 0x1}, 0x101) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 10:34:24 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) 10:34:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:34:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2587.038669] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2587.046232] FAULT_INJECTION: forcing a failure. [ 2587.046232] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.049091] CPU: 0 PID: 57520 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2587.050493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.052150] Call Trace: [ 2587.052683] dump_stack+0x107/0x167 [ 2587.053424] should_fail.cold+0x5/0xa [ 2587.054194] ? create_object.isra.0+0x3a/0xa20 [ 2587.055131] should_failslab+0x5/0x20 [ 2587.055895] kmem_cache_alloc+0x5b/0x310 [ 2587.056710] create_object.isra.0+0x3a/0xa20 [ 2587.057594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.058628] kmem_cache_alloc_bulk+0x168/0x320 [ 2587.059550] io_submit_sqes+0x6f76/0x85c0 [ 2587.060407] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.061398] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.062386] ? lock_downgrade+0x6d0/0x6d0 [ 2587.063210] ? find_held_lock+0x2c/0x110 [ 2587.064026] ? io_submit_sqes+0x85c0/0x85c0 [ 2587.064897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2587.065859] ? wait_for_completion_io+0x270/0x270 [ 2587.066830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2587.067770] ? vfs_write+0x354/0xa70 [ 2587.068519] ? fput_many+0x2f/0x1a0 [ 2587.069262] ? ksys_write+0x1a9/0x260 [ 2587.070026] ? __ia32_sys_read+0xb0/0xb0 [ 2587.070875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.071914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.072947] do_syscall_64+0x33/0x40 [ 2587.073690] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2587.074720] RIP: 0033:0x7f2b12dadb19 [ 2587.075465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.079126] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2587.080628] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2587.082035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2587.083466] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2587.084878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.086295] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2587.134468] serio: Serial port tty29 [ 2587.139527] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2587.141768] EXT4-fs (loop1): group descriptors corrupted! [ 2587.178343] serio: Serial port tty21 [ 2587.227475] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2587.229618] EXT4-fs (loop1): group descriptors corrupted! [ 2587.329789] serio: Serial port tty25 10:34:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000030f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 10:34:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) [ 2587.379914] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2587.390291] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2587.392676] EXT4-fs (loop1): group descriptors corrupted! [ 2587.416542] FAULT_INJECTION: forcing a failure. [ 2587.416542] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.419259] CPU: 1 PID: 57744 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2587.420659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.422356] Call Trace: [ 2587.422904] dump_stack+0x107/0x167 [ 2587.423642] should_fail.cold+0x5/0xa [ 2587.424412] ? create_object.isra.0+0x3a/0xa20 [ 2587.425337] should_failslab+0x5/0x20 [ 2587.426099] kmem_cache_alloc+0x5b/0x310 [ 2587.426929] ? find_held_lock+0x2c/0x110 [ 2587.427747] create_object.isra.0+0x3a/0xa20 [ 2587.428633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.429657] __kmalloc_node+0x1ae/0x420 [ 2587.430492] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2587.431516] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2587.432529] kmem_cache_alloc_bulk+0x182/0x320 [ 2587.433458] io_submit_sqes+0x6f76/0x85c0 [ 2587.434329] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.435328] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.436301] ? lock_downgrade+0x6d0/0x6d0 [ 2587.437129] ? find_held_lock+0x2c/0x110 [ 2587.437965] ? io_submit_sqes+0x85c0/0x85c0 [ 2587.438876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2587.439846] ? wait_for_completion_io+0x270/0x270 [ 2587.440818] ? rcu_read_lock_any_held+0x75/0xa0 [ 2587.441755] ? vfs_write+0x354/0xa70 [ 2587.442526] ? fput_many+0x2f/0x1a0 [ 2587.443263] ? ksys_write+0x1a9/0x260 [ 2587.444035] ? __ia32_sys_read+0xb0/0xb0 [ 2587.444857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.445908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.446984] do_syscall_64+0x33/0x40 [ 2587.447737] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2587.448772] RIP: 0033:0x7f2b12dadb19 [ 2587.449527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.453269] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2587.454814] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2587.456273] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2587.457731] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2587.459191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.460638] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:34:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0080040f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0)=0x6b89, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000018000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00./file0\x00']) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) r7 = epoll_create(0x7ffd) readv(r7, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f00000001c0)=r8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"c58bb2a254f2954491ef1448884d1f0e", r6, r8, {0xffffffffffff4e44, 0xdb2a}, {0x2, 0x40}, 0x80000001, [0x20, 0x120, 0x5, 0x9, 0x2, 0x1, 0x8, 0xffff, 0x9, 0x100000000, 0x8f7, 0x1, 0x9, 0x4, 0x1, 0x6]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000050f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2587.579580] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2587.581667] EXT4-fs (loop1): group descriptors corrupted! 10:34:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}) 10:34:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000060f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2587.703735] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:34:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) [ 2587.762717] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2587.765000] EXT4-fs (loop1): group descriptors corrupted! [ 2587.837688] FAULT_INJECTION: forcing a failure. [ 2587.837688] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.840085] CPU: 1 PID: 57994 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2587.841295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.842746] Call Trace: [ 2587.843206] dump_stack+0x107/0x167 [ 2587.843853] should_fail.cold+0x5/0xa [ 2587.844491] should_failslab+0x5/0x20 [ 2587.845130] kmem_cache_alloc_bulk+0x4b/0x320 [ 2587.845888] io_submit_sqes+0x6f76/0x85c0 [ 2587.846666] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.847493] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.848314] ? lock_downgrade+0x6d0/0x6d0 [ 2587.849003] ? find_held_lock+0x2c/0x110 [ 2587.849677] ? io_submit_sqes+0x85c0/0x85c0 [ 2587.850414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2587.851218] ? wait_for_completion_io+0x270/0x270 [ 2587.852046] ? rcu_read_lock_any_held+0x75/0xa0 [ 2587.852824] ? vfs_write+0x354/0xa70 [ 2587.853443] ? fput_many+0x2f/0x1a0 [ 2587.854051] ? ksys_write+0x1a9/0x260 [ 2587.854699] ? __ia32_sys_read+0xb0/0xb0 [ 2587.855412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.856289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.857188] do_syscall_64+0x33/0x40 [ 2587.857815] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2587.858715] RIP: 0033:0x7f2b12dadb19 [ 2587.859370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.862626] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2587.863878] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2587.865032] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2587.866201] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2587.867461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.868713] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:34:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) [ 2600.545409] FAULT_INJECTION: forcing a failure. [ 2600.545409] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.546844] CPU: 1 PID: 58084 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2600.547641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.548601] Call Trace: [ 2600.548921] dump_stack+0x107/0x167 [ 2600.549343] should_fail.cold+0x5/0xa [ 2600.549795] ? create_object.isra.0+0x3a/0xa20 [ 2600.550332] should_failslab+0x5/0x20 [ 2600.550785] kmem_cache_alloc+0x5b/0x310 [ 2600.551261] ? mark_held_locks+0x9e/0xe0 [ 2600.551737] create_object.isra.0+0x3a/0xa20 [ 2600.552255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.552848] kmem_cache_alloc_bulk+0x168/0x320 [ 2600.553377] io_submit_sqes+0x6f76/0x85c0 [ 2600.553880] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2600.554466] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2600.555299] ? lock_downgrade+0x6d0/0x6d0 [ 2600.555926] ? find_held_lock+0x2c/0x110 [ 2600.556425] ? io_submit_sqes+0x85c0/0x85c0 [ 2600.556948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2600.556962] ? wait_for_completion_io+0x270/0x270 10:34:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000070f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:37 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa00) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0xd33}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:37 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}) 10:34:37 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4307, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x31, 0x53, 0x3, 0x0, 0x80000001, 0x6004, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x1000}, 0x76fba676af62b261, 0x8, 0x6, 0x7, 0x40, 0x8001, 0x9, 0x0, 0x3, 0x0, 0x50b}, 0x0, 0xf, 0xffffffffffffffff, 0x8) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2600.556975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2600.556985] ? vfs_write+0x354/0xa70 [ 2600.556998] ? fput_many+0x2f/0x1a0 [ 2600.557010] ? ksys_write+0x1a9/0x260 [ 2600.557021] ? __ia32_sys_read+0xb0/0xb0 [ 2600.557034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.557045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.557060] do_syscall_64+0x33/0x40 [ 2600.557072] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2600.557079] RIP: 0033:0x7f2b12dadb19 [ 2600.557094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.557100] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2600.557112] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2600.557119] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2600.557125] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2600.557131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2600.557137] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2600.575449] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2600.579308] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! 10:34:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 2600.579321] EXT4-fs (loop1): group descriptors corrupted! [ 2600.617644] serio: Serial port tty21 [ 2600.653380] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2600.653401] EXT4-fs (loop1): group descriptors corrupted! [ 2600.660486] serio: Serial port tty25 10:34:37 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2600.734844] FAULT_INJECTION: forcing a failure. [ 2600.734844] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.737730] CPU: 0 PID: 58115 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2600.739157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.740834] Call Trace: [ 2600.741389] dump_stack+0x107/0x167 [ 2600.742149] should_fail.cold+0x5/0xa [ 2600.742170] ? create_object.isra.0+0x3a/0xa20 [ 2600.742189] ? create_object.isra.0+0x3a/0xa20 [ 2600.742214] should_failslab+0x5/0x20 [ 2600.742234] kmem_cache_alloc+0x5b/0x310 [ 2600.742255] ? mark_held_locks+0x9e/0xe0 [ 2600.742278] create_object.isra.0+0x3a/0xa20 [ 2600.742300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.742331] kmem_cache_alloc_bulk+0x168/0x320 [ 2600.742361] io_submit_sqes+0x6f76/0x85c0 [ 2600.742420] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2600.742451] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2600.742480] ? lock_downgrade+0x6d0/0x6d0 [ 2600.742497] ? find_held_lock+0x2c/0x110 [ 2600.742525] ? io_submit_sqes+0x85c0/0x85c0 [ 2600.742557] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2600.742587] ? wait_for_completion_io+0x270/0x270 [ 2600.742615] ? rcu_read_lock_any_held+0x75/0xa0 [ 2600.747773] serio: Serial port tty29 [ 2600.748186] ? vfs_write+0x354/0xa70 [ 2600.748213] ? fput_many+0x2f/0x1a0 [ 2600.748235] ? ksys_write+0x1a9/0x260 [ 2600.760777] ? __ia32_sys_read+0xb0/0xb0 [ 2600.761613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.762688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.763737] do_syscall_64+0x33/0x40 [ 2600.764494] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2600.765535] RIP: 0033:0x7f2b12dadb19 [ 2600.766295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.770026] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2600.771584] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2600.773034] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2600.774479] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2600.775922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2600.777364] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:34:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00000b0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2600.806008] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2600.807185] EXT4-fs (loop1): group descriptors corrupted! 10:34:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}) 10:34:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000180f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2600.869057] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2600.870225] EXT4-fs (loop1): group descriptors corrupted! [ 2600.926019] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000200c3d09da7002e2f66696c6530bb"]) 10:34:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00001c0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2601.037909] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2601.039078] EXT4-fs (loop1): group descriptors corrupted! [ 2601.496733] serio: Serial port tty25 10:34:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}) 10:34:51 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x80000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000200f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:34:51 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/161, 0xa1}], 0x5) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xb8, 0x0, 0xa, 0xe24, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0xb8}}, 0x40080) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:34:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:34:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}) 10:34:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) [ 2614.361201] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2614.392405] FAULT_INJECTION: forcing a failure. [ 2614.392405] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.394064] CPU: 1 PID: 58537 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2614.394867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.395807] Call Trace: [ 2614.396122] dump_stack+0x107/0x167 [ 2614.396539] should_fail.cold+0x5/0xa [ 2614.396983] ? create_object.isra.0+0x3a/0xa20 [ 2614.397511] should_failslab+0x5/0x20 [ 2614.397948] kmem_cache_alloc+0x5b/0x310 [ 2614.398413] ? mark_held_locks+0x9e/0xe0 [ 2614.398903] create_object.isra.0+0x3a/0xa20 [ 2614.399412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.399983] kmem_cache_alloc_bulk+0x168/0x320 [ 2614.400505] io_submit_sqes+0x6f76/0x85c0 [ 2614.400997] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.401573] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.402123] ? lock_downgrade+0x6d0/0x6d0 [ 2614.402523] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2614.402589] ? find_held_lock+0x2c/0x110 [ 2614.402608] ? io_submit_sqes+0x85c0/0x85c0 [ 2614.405785] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.406350] ? wait_for_completion_io+0x270/0x270 [ 2614.406930] ? rcu_read_lock_any_held+0x75/0xa0 [ 2614.407475] ? vfs_write+0x354/0xa70 [ 2614.407914] ? fput_many+0x2f/0x1a0 [ 2614.408341] ? ksys_write+0x1a9/0x260 [ 2614.408790] ? __ia32_sys_read+0xb0/0xb0 [ 2614.409269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.409890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.410478] do_syscall_64+0x33/0x40 [ 2614.410930] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2614.411532] RIP: 0033:0x7f2b12dadb19 [ 2614.411976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.414133] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2614.415040] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2614.415862] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2614.416704] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.417536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.418372] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2614.442564] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2614.443767] EXT4-fs (loop1): group descriptors corrupted! [ 2614.445875] serio: Serial port tty25 10:34:51 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4307, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x31, 0x53, 0x3, 0x0, 0x80000001, 0x6004, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x1000}, 0x76fba676af62b261, 0x8, 0x6, 0x7, 0x40, 0x8001, 0x9, 0x0, 0x3, 0x0, 0x50b}, 0x0, 0xf, 0xffffffffffffffff, 0x8) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2614.469281] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2614.470515] EXT4-fs (loop1): group descriptors corrupted! 10:34:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00003f0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2614.515306] serio: Serial port tty29 [ 2614.528436] serio: Serial port tty21 10:34:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}) [ 2614.578811] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:34:51 executing program 3: r0 = syz_io_uring_setup(0x4d52, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1) fcntl$dupfd(r3, 0x0, r0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2fe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2614.635674] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2614.638147] EXT4-fs (loop1): group descriptors corrupted! 10:34:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) [ 2614.743706] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2614.746128] EXT4-fs (loop1): group descriptors corrupted! [ 2614.756539] FAULT_INJECTION: forcing a failure. [ 2614.756539] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.758090] CPU: 1 PID: 58849 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2614.758838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.759736] Call Trace: [ 2614.760029] dump_stack+0x107/0x167 [ 2614.760417] should_fail.cold+0x5/0xa [ 2614.760825] ? create_object.isra.0+0x3a/0xa20 [ 2614.761325] should_failslab+0x5/0x20 [ 2614.761732] kmem_cache_alloc+0x5b/0x310 [ 2614.762169] ? mark_held_locks+0x9e/0xe0 [ 2614.762603] create_object.isra.0+0x3a/0xa20 [ 2614.763072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.763626] kmem_cache_alloc_bulk+0x168/0x320 [ 2614.764116] io_submit_sqes+0x6f76/0x85c0 [ 2614.764583] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.765122] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.765638] ? lock_downgrade+0x6d0/0x6d0 [ 2614.766069] ? find_held_lock+0x2c/0x110 [ 2614.766504] ? io_submit_sqes+0x85c0/0x85c0 [ 2614.766980] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.767499] ? wait_for_completion_io+0x270/0x270 [ 2614.768023] ? rcu_read_lock_any_held+0x75/0xa0 [ 2614.768531] ? vfs_write+0x354/0xa70 [ 2614.768928] ? fput_many+0x2f/0x1a0 [ 2614.769320] ? ksys_write+0x1a9/0x260 [ 2614.769729] ? __ia32_sys_read+0xb0/0xb0 [ 2614.770174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.770749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.771300] do_syscall_64+0x33/0x40 [ 2614.771699] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2614.772248] RIP: 0033:0x7f2b12dadb19 [ 2614.772643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.774593] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2614.775415] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2614.776166] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2614.776914] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.777669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.778413] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:34:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 10:34:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}) 10:34:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000650f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2614.869223] FAULT_INJECTION: forcing a failure. [ 2614.869223] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.870737] CPU: 1 PID: 58900 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2614.871459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.872343] Call Trace: [ 2614.872627] dump_stack+0x107/0x167 [ 2614.873013] should_fail.cold+0x5/0xa [ 2614.873414] ? create_object.isra.0+0x3a/0xa20 [ 2614.873892] should_failslab+0x5/0x20 [ 2614.874292] kmem_cache_alloc+0x5b/0x310 [ 2614.874730] ? mark_held_locks+0x9e/0xe0 [ 2614.875155] create_object.isra.0+0x3a/0xa20 [ 2614.875615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.876158] kmem_cache_alloc_bulk+0x168/0x320 [ 2614.876641] io_submit_sqes+0x6f76/0x85c0 [ 2614.877105] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.877638] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2614.878146] ? lock_downgrade+0x6d0/0x6d0 [ 2614.878588] ? find_held_lock+0x2c/0x110 [ 2614.879031] ? io_submit_sqes+0x85c0/0x85c0 [ 2614.879496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.880007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.880558] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2614.881133] ? trace_hardirqs_on+0x5b/0x180 [ 2614.881609] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2614.882206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.882765] do_syscall_64+0x33/0x40 [ 2614.883157] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2614.883710] RIP: 0033:0x7f2b12dadb19 [ 2614.884114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.886038] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2614.886869] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2614.887630] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2614.888395] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.889152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.889899] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2614.944351] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2614.945528] EXT4-fs (loop1): group descriptors corrupted! [ 2614.948429] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2615.003573] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2615.005873] EXT4-fs (loop1): group descriptors corrupted! 10:34:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 2615.140535] FAULT_INJECTION: forcing a failure. [ 2615.140535] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.143375] CPU: 0 PID: 59060 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2615.144795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.146520] Call Trace: [ 2615.147088] dump_stack+0x107/0x167 [ 2615.147846] should_fail.cold+0x5/0xa [ 2615.148646] should_failslab+0x5/0x20 [ 2615.149476] kmem_cache_alloc_bulk+0x4b/0x320 [ 2615.150408] io_submit_sqes+0x6f76/0x85c0 [ 2615.151319] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2615.152319] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2615.153364] ? lock_downgrade+0x6d0/0x6d0 [ 2615.154198] ? find_held_lock+0x2c/0x110 [ 2615.155064] ? io_submit_sqes+0x85c0/0x85c0 [ 2615.155948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2615.156959] ? wait_for_completion_io+0x270/0x270 [ 2615.157964] ? rcu_read_lock_any_held+0x75/0xa0 [ 2615.158941] ? vfs_write+0x354/0xa70 [ 2615.159724] ? fput_many+0x2f/0x1a0 [ 2615.160459] ? ksys_write+0x1a9/0x260 [ 2615.161211] ? __ia32_sys_read+0xb0/0xb0 [ 2615.162031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.163113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.164193] do_syscall_64+0x33/0x40 [ 2615.164945] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2615.165975] RIP: 0033:0x7f2b12dadb19 [ 2615.166795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.171004] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2615.172761] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2615.174366] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2615.176024] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.177625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2615.179274] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2615.290070] serio: Serial port tty29 10:35:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 10:35:06 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x1000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7f) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0)={r4, r5+10000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r11}}, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0004800f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:06 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/106, 0x6a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) write$binfmt_elf32(r3, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x9, 0x3f, 0x3, 0x3, 0x3, 0x6, 0x28b, 0x38, 0x29b, 0x3, 0x8, 0x20, 0x2, 0xf800, 0x7fff, 0x8}, [{0x70000000, 0x3c, 0x100, 0x358e1002, 0x5, 0x96c, 0xff}, {0x4, 0x3ff, 0x1, 0x4, 0x7, 0x400, 0xfff, 0x10001}], "94e354fd23402157ccdca02744c6fcbe5e8eead9151e2c10e11f96361c8d5dfd9fd40207938bb5461ea55d531e5d02648372ec5ab90b9c38ba87c2a44281e49209348df7434a898791c0f4b18e03a168f4bc175dd34effe60f282374eda4e2babf457e0ae47cef40e0f82e2709a83efa9070ffc016e8af1936966e0d15da266e44e47de9b300bc9afba9193d3a5519091c1f5cf7e50bde72feb6d3680b2fd3495daf47051c743e", ['\x00']}, 0x21f) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:35:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 10:35:06 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4307, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x31, 0x53, 0x3, 0x0, 0x80000001, 0x6004, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x1000}, 0x76fba676af62b261, 0x8, 0x6, 0x7, 0x40, 0x8001, 0x9, 0x0, 0x3, 0x0, 0x50b}, 0x0, 0xf, 0xffffffffffffffff, 0x8) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2629.553705] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2629.557740] FAULT_INJECTION: forcing a failure. [ 2629.557740] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.559786] CPU: 1 PID: 59095 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2629.560847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.562116] Call Trace: [ 2629.562527] dump_stack+0x107/0x167 [ 2629.563103] should_fail.cold+0x5/0xa [ 2629.563684] ? create_object.isra.0+0x3a/0xa20 [ 2629.564379] should_failslab+0x5/0x20 [ 2629.564960] kmem_cache_alloc+0x5b/0x310 [ 2629.565590] create_object.isra.0+0x3a/0xa20 [ 2629.566259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2629.567047] kmem_cache_alloc_bulk+0x168/0x320 [ 2629.567752] io_submit_sqes+0x6f76/0x85c0 [ 2629.568412] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2629.569174] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2629.569915] ? lock_downgrade+0x6d0/0x6d0 [ 2629.570557] ? find_held_lock+0x2c/0x110 [ 2629.571201] ? io_submit_sqes+0x85c0/0x85c0 [ 2629.571863] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2629.572598] ? wait_for_completion_io+0x270/0x270 [ 2629.573334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2629.574037] ? vfs_write+0x354/0xa70 [ 2629.574603] ? fput_many+0x2f/0x1a0 [ 2629.575162] ? ksys_write+0x1a9/0x260 [ 2629.575737] ? __ia32_sys_read+0xb0/0xb0 [ 2629.576355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.577150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.577946] do_syscall_64+0x33/0x40 [ 2629.578506] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2629.579283] RIP: 0033:0x7f2b12dadb19 [ 2629.579842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.582608] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2629.583769] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2629.584843] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2629.585922] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.586998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2629.588069] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2629.644443] serio: Serial port tty21 [ 2629.649128] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2629.651265] EXT4-fs (loop1): group descriptors corrupted! [ 2629.669600] serio: Serial port tty29 10:35:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00fdef0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00effd0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000020f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000030f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 2629.919248] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:35:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000040f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57f}) 10:35:07 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)="9b3a1bd05ca371e9c0fbe94d7457b88d9f48028f584dd15768120000000000000000f3ffffffffffffff00000000000000c998e54ce89769a5edb5e0ab4f64f17388eda6eb691fc9c824cc68918c05f4609a32485d8b7560f1c41a0a30afd000082e9946538f2d9b02e68794cbb31e305ae95c864d60cfc6a0e333e37d6bfdc37ff77538c64d5d0be89b0aa04d2ec1b04ccebedb433194dd4a5a1e6278b45075d6f906cc5b1806bbd2511921e5876bd6788b08613da5974be915e6d5fe370f499e8f5819e2ba3df2dec0b74ea9c768d3931f0cf5fd728402a92376bc96d4975216d8b7bc9c422144f61f6ea5463e8666d1a11a7f3a4c2ca2a7", 0x31}], 0x1, 0x0, 0x5b}, 0x8010) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_submit(0x0, 0x8, &(0x7f0000000c00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0xd, 0x5, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000380)="c22998fbee46ddab1bbc8893be102ac3891e23a86042c5ed", 0x18, 0x8001, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x5c, 0xffffffffffffffff, &(0x7f00000005c0)="be7d2fe9cafe61b133a0eb3c478c080b30d8cc8087249b178ec115f98d0b6792c8ac3d2d4dec97b7691251cbbb6f43815abbce10a84caeba56a743ee375e30a7eebc811537b548f9286529ed2b071624428aed249415fd84ac0d3d21622770a83578bb20709984503f190fac0670f3581803322d2378f9b17fe00e2106a9149ecd4aab7819f549e1d44af5def5edcf07a9acd88a82d7d7396eab238a2f392ab4fafdb1fa6f73730dce92bb6a06c57aa6604a804112720198252d3d3f4c7e420d63bcd60a3d848924b6047361e16e8f90ebb3eeccf822c4286670c766cfa1acf26a5065cf81ebfcee55a70a5edabf3402b12ceb3d33", 0xf5, 0x7, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000006c0)="c7ea643dd548df26714dba6b7ca8196b30c7a0442c43ba16a4d15055a49f017084e71bc517a11c405e2c5866b8c4726521bbd79b575383a33be9e2643176a02f80a268e77ba1aeb08b04151f29bf467eaf1823408488727e75924c77f85c3f8644808c21a357865f65", 0x69, 0x6, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x8000, r0, &(0x7f0000000780)="949f700bdc3e20e1b42c1f0807f897be3e60cc4857e2b5d52dd9f232ea0d67c96ccaa030ba6ce6ac0a5514af9b8595b4e7ed52c4b2df6453cbf709f17369b109201a85e7e036139c79a6dc9e820dbcaee8311103f7face824de02d8dcce638c266fd45b5e31b1dd55e0b283231dce37ffcade2fd7ae11173457ebeab56483f0470bb6a5ef46dcd9b6a3b27ac83f87a57f20d5e7dc73fc126db5f21e9570b48551f83e1f28ed0f3b31fc702a15ab2", 0xae, 0xd5f}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x80, r0, &(0x7f0000000880)="cc2d487d5696079a720eec17bc894285515c8d3e72d9b2d4de05d3dbc59b16a4083fff41de675e971ba37925a7830b7b6323a27d56748bf4827f16b27ea0a13bc52623ae5510f628e4f2e06dd96aace36b5e4af0451742090a655ad85b961cb057e0d0903f50ade28174f656e19bad9a4185fee93f9211323d1beb5ea3fa0487bce8762494d53ebc3bf8a8e115a9b9db61", 0x91, 0x7, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x7f, 0xffffffffffffffff, &(0x7f0000000980)="622c10c5b8ac276cf66048bd6e1a2607394fa7151408c8be4ff72397244caa1b69f1f1df85c36a1c1a418e1b9945f71f55f3de9c989d20fb6aa3d18ab611d39707bcb4422f2b63d5d37bfd7a75250cc5840c542d60916a694b35020bcda65759915ce36c34233c8cfa782d6400d4b26b96e248c8c8e2a608e258ff6c1d9fdb0cb8a96bfdfa6f4c24c4ff26b71da180d109cd5e1a943fcf5a42c49b52c47b7c2e5922ec68bde9634e649daf7c317e31334036c502c8e1a5141bfb73f1edc0f2502bdb91de6d6b5e361dd05631cb0722c7ec2669aba8996069a75c", 0xda, 0x3, 0x0, 0x3, r1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x3f, r2, &(0x7f0000000ac0)="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", 0xff, 0xffffffffffffe3f3, 0x0, 0x1, r3}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r4, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfffc, r5, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x3ffffffc}]) [ 2630.068808] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2630.142703] serio: Serial port tty25 [ 2630.857146] serio: Serial port tty25 10:35:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2000, @fd_index, 0x9, 0x3, 0x0, 0x13, 0x0, {0x100}}, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) 10:35:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000050f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 10:35:22 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x400000c0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:22 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x2000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 10:35:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:35:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2645.041181] serio: Serial port tty25 [ 2645.047697] FAULT_INJECTION: forcing a failure. [ 2645.047697] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.049601] CPU: 1 PID: 59544 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2645.049720] serio: Serial port tty29 [ 2645.050560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.050564] Call Trace: [ 2645.050584] dump_stack+0x107/0x167 [ 2645.050600] should_fail.cold+0x5/0xa [ 2645.050615] ? create_object.isra.0+0x3a/0xa20 [ 2645.050630] should_failslab+0x5/0x20 [ 2645.050644] kmem_cache_alloc+0x5b/0x310 [ 2645.050667] ? mark_held_locks+0x9e/0xe0 [ 2645.056233] create_object.isra.0+0x3a/0xa20 [ 2645.056849] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2645.057561] kmem_cache_alloc_bulk+0x168/0x320 [ 2645.058213] io_submit_sqes+0x6f76/0x85c0 [ 2645.058451] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2645.058802] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.061564] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.062234] ? lock_downgrade+0x6d0/0x6d0 [ 2645.062807] ? find_held_lock+0x2c/0x110 [ 2645.063382] ? io_submit_sqes+0x85c0/0x85c0 [ 2645.063991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2645.064664] ? wait_for_completion_io+0x270/0x270 [ 2645.065332] ? rcu_read_lock_any_held+0x75/0xa0 [ 2645.065973] ? vfs_write+0x354/0xa70 [ 2645.066488] ? fput_many+0x2f/0x1a0 [ 2645.066987] ? ksys_write+0x1a9/0x260 [ 2645.067522] ? __ia32_sys_read+0xb0/0xb0 [ 2645.068085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.068809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.069532] do_syscall_64+0x33/0x40 [ 2645.070052] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2645.070761] RIP: 0033:0x7f2b12dadb19 [ 2645.071293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.073838] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2645.074892] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2645.075893] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2645.076884] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.077877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.078864] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2645.082314] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.084910] EXT4-fs (loop1): group descriptors corrupted! [ 2645.176187] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.178521] EXT4-fs (loop1): group descriptors corrupted! 10:35:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 10:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 10:35:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000060f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2645.365182] FAULT_INJECTION: forcing a failure. [ 2645.365182] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.366563] CPU: 1 PID: 59764 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2645.367395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.368397] Call Trace: [ 2645.368725] dump_stack+0x107/0x167 [ 2645.369166] should_fail.cold+0x5/0xa [ 2645.369619] should_failslab+0x5/0x20 [ 2645.370074] kmem_cache_alloc_bulk+0x4b/0x320 [ 2645.370625] io_submit_sqes+0x6f76/0x85c0 [ 2645.371148] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.371744] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.372335] ? lock_downgrade+0x6d0/0x6d0 [ 2645.372837] ? find_held_lock+0x2c/0x110 [ 2645.373320] ? io_submit_sqes+0x85c0/0x85c0 [ 2645.373841] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2645.374420] ? wait_for_completion_io+0x270/0x270 [ 2645.375021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2645.375600] ? vfs_write+0x354/0xa70 [ 2645.376043] ? fput_many+0x2f/0x1a0 [ 2645.376424] ? ksys_write+0x1a9/0x260 [ 2645.376879] ? __ia32_sys_read+0xb0/0xb0 [ 2645.377362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.377581] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2645.377990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.378004] do_syscall_64+0x33/0x40 [ 2645.378016] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2645.378034] RIP: 0033:0x7f2b12dadb19 [ 2645.382144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.384393] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2645.385326] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2645.386192] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2645.387067] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.387939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.388809] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:35:22 executing program 0: openat(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', 0x200, 0x40) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8074, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6d75, &(0x7f0000000040)={0x0, 0xc167, 0x0, 0x3, 0xad}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000001700)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r5, 0xc6, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000001440)=""/139, 0x8b}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/9, 0x9}, {&(0x7f0000001600)=""/37, 0x25}], 0x9, 0xb, 0x0, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2645.447770] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.449032] EXT4-fs (loop1): group descriptors corrupted! 10:35:22 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x700000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 10:35:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000070f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}) [ 2645.641525] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.642808] EXT4-fs (loop1): group descriptors corrupted! [ 2645.645031] serio: Serial port tty21 [ 2645.658667] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2645.665766] FAULT_INJECTION: forcing a failure. [ 2645.665766] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.667562] CPU: 1 PID: 59906 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2645.668456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.669565] Call Trace: [ 2645.669920] dump_stack+0x107/0x167 [ 2645.670459] should_fail.cold+0x5/0xa [ 2645.670913] ? create_object.isra.0+0x3a/0xa20 [ 2645.671570] should_failslab+0x5/0x20 [ 2645.672095] kmem_cache_alloc+0x5b/0x310 [ 2645.672614] ? mark_held_locks+0x9e/0xe0 [ 2645.673132] create_object.isra.0+0x3a/0xa20 [ 2645.673646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2645.674300] kmem_cache_alloc_bulk+0x168/0x320 [ 2645.674840] io_submit_sqes+0x6f76/0x85c0 [ 2645.675430] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.676108] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2645.676734] ? lock_downgrade+0x6d0/0x6d0 [ 2645.677259] ? find_held_lock+0x2c/0x110 [ 2645.677729] ? io_submit_sqes+0x85c0/0x85c0 [ 2645.678335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2645.678935] ? wait_for_completion_io+0x270/0x270 [ 2645.679642] ? rcu_read_lock_any_held+0x75/0xa0 [ 2645.680220] ? vfs_write+0x354/0xa70 [ 2645.680686] ? fput_many+0x2f/0x1a0 [ 2645.681184] ? ksys_write+0x1a9/0x260 [ 2645.681646] ? __ia32_sys_read+0xb0/0xb0 [ 2645.682173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.682901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.683477] do_syscall_64+0x33/0x40 [ 2645.683887] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2645.684439] RIP: 0033:0x7f2b12dadb19 [ 2645.684847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.686843] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2645.687661] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2645.688440] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2645.689220] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.689973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.690752] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2645.691897] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.693095] EXT4-fs (loop1): group descriptors corrupted! 10:35:22 executing program 3: r0 = syz_io_uring_setup(0x3c46, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000200c8000000002e2f66696c653000"]) io_uring_enter(r4, 0x5a81, 0x2354, 0x1, &(0x7f0000000080)={[0x3]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r4, 0x0}, 0x80200) 10:35:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="abfff77906"]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x90, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2645.906456] serio: Serial port tty29 [ 2645.915725] serio: Serial port tty25 10:35:23 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x3000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000080f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2645.967249] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:35:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}) 10:35:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 10:35:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2645.994524] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2645.996971] EXT4-fs (loop1): group descriptors corrupted! [ 2645.998221] FAULT_INJECTION: forcing a failure. [ 2645.998221] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.999790] CPU: 1 PID: 60211 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2646.000556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.001475] Call Trace: [ 2646.001771] dump_stack+0x107/0x167 [ 2646.002171] should_fail.cold+0x5/0xa [ 2646.002588] ? create_object.isra.0+0x3a/0xa20 [ 2646.003098] should_failslab+0x5/0x20 [ 2646.003516] kmem_cache_alloc+0x5b/0x310 [ 2646.003964] ? mark_held_locks+0x9e/0xe0 [ 2646.004413] create_object.isra.0+0x3a/0xa20 [ 2646.004897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.005453] kmem_cache_alloc_bulk+0x168/0x320 [ 2646.005958] io_submit_sqes+0x6f76/0x85c0 [ 2646.006428] ? __do_sys_io_uring_enter+0x1f2/0x1920 [ 2646.006974] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2646.007541] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2646.008077] ? lock_downgrade+0x6d0/0x6d0 [ 2646.008532] ? find_held_lock+0x2c/0x110 [ 2646.008967] ? io_submit_sqes+0x85c0/0x85c0 [ 2646.009446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2646.009973] ? vfs_write+0x3c5/0xa70 [ 2646.010375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.010946] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2646.011524] ? trace_hardirqs_on+0x5b/0x180 [ 2646.011998] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2646.012591] ? __io_uring_cancel+0x20/0x20 [ 2646.013066] do_syscall_64+0x33/0x40 [ 2646.013481] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2646.014049] RIP: 0033:0x7f2b12dadb19 [ 2646.014457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.016401] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2646.017243] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2646.017993] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2646.018771] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2646.019562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2646.020341] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2646.053395] serio: Serial port tty29 10:35:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00000b0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}) [ 2646.088250] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2646.089457] EXT4-fs (loop1): group descriptors corrupted! [ 2646.097867] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:35:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1000}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)) syz_io_uring_setup(0xa4d, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x4}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x501800) lseek(r9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x200, 0x0, 0x1}, 0x8001) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) lseek(r10, 0x400, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0xff, @remote, 0x560}}}}, 0xd5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200a01, 0x0) [ 2646.150624] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2646.153066] EXT4-fs (loop1): group descriptors corrupted! 10:35:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}) [ 2646.226518] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2646.795904] serio: Serial port tty25 [ 2663.276869] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:35:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000180f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x6, 0x6, 0x9, 0x0, 0x4, 0xb8600, 0x18, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x4006c, 0x5, 0x3, 0x2, 0x24000000000000, 0x5, 0x8, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:40 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x700000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 10:35:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:35:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}) 10:35:40 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:40 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) lseek(r0, 0x8, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000000a00)={0x960, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd43}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x80, 0x1, 0x20}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x598, 0x0, 0x1c, 0x8001}, {0x40, 0xff, 0x1f, 0x5}, {0x38, 0x3, 0x5, 0x8000}, {0x0, 0x38, 0x6, 0x20}, {0x978, 0x4, 0x64, 0x100}, {0x88, 0x1, 0x1}, {0xfffc, 0x65, 0x20, 0x2}, {0x20, 0x7, 0x20, 0xc22}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdd2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x3f, 0x40, 0x3}, {0x3, 0x4, 0x6, 0x80000000}, {0xf6, 0x1, 0x1f, 0x2}, {0x400, 0x9, 0x6, 0x3}, {0x9, 0xc8, 0x2, 0xde}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x3, 0xe1, 0x3ff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x0, 0x1, 0x4}, {0x9, 0x3, 0xf0, 0x4}, {0xfff, 0x2, 0xc8, 0x4}, {0x6, 0x80, 0x81, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x0, 0x6, 0xc0}, {0x400, 0x20, 0x4, 0x9}, {0x8658, 0x4, 0xb4, 0xff}, {0x2, 0x3f, 0xfd, 0x9}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0x960}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2663.324068] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2663.326183] EXT4-fs (loop1): group descriptors corrupted! [ 2663.387207] FAULT_INJECTION: forcing a failure. [ 2663.387207] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.390139] CPU: 0 PID: 60668 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2663.391701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2663.393580] Call Trace: [ 2663.394186] dump_stack+0x107/0x167 [ 2663.394991] should_fail.cold+0x5/0xa [ 2663.395857] ? create_object.isra.0+0x3a/0xa20 [ 2663.396896] should_failslab+0x5/0x20 [ 2663.397730] kmem_cache_alloc+0x5b/0x310 [ 2663.398624] ? mark_held_locks+0x9e/0xe0 [ 2663.399540] create_object.isra.0+0x3a/0xa20 [ 2663.400504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2663.401622] kmem_cache_alloc_bulk+0x168/0x320 [ 2663.402631] io_submit_sqes+0x6f76/0x85c0 [ 2663.403587] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2663.404678] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2663.405738] ? lock_downgrade+0x6d0/0x6d0 [ 2663.406643] ? find_held_lock+0x2c/0x110 [ 2663.407557] ? io_submit_sqes+0x85c0/0x85c0 [ 2663.408504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2663.409554] ? wait_for_completion_io+0x270/0x270 [ 2663.410603] ? rcu_read_lock_any_held+0x75/0xa0 [ 2663.411615] ? vfs_write+0x354/0xa70 [ 2663.412426] ? fput_many+0x2f/0x1a0 [ 2663.413216] ? ksys_write+0x1a9/0x260 [ 2663.414042] ? __ia32_sys_read+0xb0/0xb0 [ 2663.414927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2663.416067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2663.417192] do_syscall_64+0x33/0x40 [ 2663.418003] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2663.419117] RIP: 0033:0x7f2b12dadb19 [ 2663.419949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2663.421340] serio: Serial port tty29 [ 2663.423965] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2663.423988] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2663.424000] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2663.424012] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2663.424024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2663.424042] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2663.433272] serio: Serial port tty25 [ 2663.542870] serio: Serial port tty21 [ 2664.205196] serio: Serial port tty25 [ 2664.214570] serio: Serial port tty29 10:35:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 10:35:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a00001c0f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:35:55 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x5000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:55 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x2d3043, 0x84) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r6, 0x2) fstat(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r8, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r9 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r9, 0x0, 0x0, 0x0], 0x6}, 0x58) [ 2678.476636] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2678.478749] EXT4-fs (loop1): group descriptors corrupted! [ 2678.480267] FAULT_INJECTION: forcing a failure. [ 2678.480267] name failslab, interval 1, probability 0, space 0, times 0 [ 2678.480286] CPU: 1 PID: 60880 Comm: syz-executor.6 Not tainted 5.10.197 #1 sendmsg$nl_generic(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000001e00)={0x3368, 0x2d, 0x4, 0x70bd2d, 0x25dfdbff, {0x4}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="5d3a5b0fc03568b0405269e34bd63e7ec20eef25d9491c51404c89653550caef660374605b7964a15f9dfdc323927a2b62edab3a364897af62b3685de8e221f2fabea479c36d33c0a57bf708ae9ed511ffa89023a23e4f41afdf2873a3c26bcedec41f7b48868b24ad0ebd5b6d3e3c2b797b82af4201c8df7241863894891fedacc88633dc2c8a5633924d1b21ac304a39164db67db578e80049e5e394175e92299468cbcbf0d04159623e599e813831393a9272438f149602c2fa6ab0389783f2a1bf630c9cba4def1fcb60858eb86bc10b74f0492038db1befe3d7cb44364f8f559aaeb94bcc1a44ca7e2c991994709000afbce7a933fc6defbbf6cd3eb9611f08af413e1126a5bebf61792c5fa95d5d5c467e35d7badbeec62cb956f93a7d2464f13a6bd03309fc3191db03fedf416327f84c05f6ab0a86525cf7ed98dbec437118d583b780dc913dad07ed1d2e963ef1c5bdff4a87c532a81aa9171f256d9a7d457f185227afc8172e8413a1afb6ca451e3e9901c0b34a6162d8d9c872c70f55c44fc9d666524274d6ff1231ac364825f7489c49d6ecdffd02cef2c6db1e855787b14b709da291a28ca1618ab6bf4dfc89999a3228350909f5f9ec1cd3b5b06f05f44f6c915fe29328041ec5b0224281c6d12b34bb5d70e712995f24a9dc1b68440e310d439537cb4e67262124bdb5b0dbe81c6d71d605a2c5f7127f6b5a9a6f7b564e62ac4c210ba0bf5f8cf45fa71bab018836453e9e79bb1ae8d70660f72bb9bbc5877ed138289260924b10babe61d69367af0d1a1b102e2b226fc109c56822cc5242f316a1bb626572de6dd2b2f7dd332cbb886b1498cd0e1052fc8cd1990086f267fbc8189b8b6580559de77c8aa31fc935a368fc527d64d4de9116b93fa57ab7fda320504825866b53f4d5b4ba90fb976186c806abd2bee13323a6f4ed9fbbb5cf0a7c68d605b16cc7d8dac7167b2af09bb14d82ba152f63cd5894836d77d2202656d544c665633829474c31321f48f6174b04a068cbbd8d3db25deac9b5a3feb58aeff0bd0333458f6fe2f3691ec2c4aaf644de1cafe27f84b34d521e7ca7d8ecaeca3844fb63794bb1a4942ce1bfe662f8af0f1b7650f8f70fe700667fb89d4283345d6ada40a8a043c86c6b1c03dcfe639ac01bff5ea4c99b9f0f58108fde33ca52e4993cc845b6e0510a74250a75863e61065cb130a42c408cdb62381c455360462a7511f96db9af59e91818365dad43e98e4455e25fbad3c24c6dc40ef0fc3e9f9a8d2d8162b41ff53eb18bab7063082973ad3f121e47403746cd8f13b2183d1706b3b2bfdc10ca6298b9ab9f063d953c2583801cd0923572580c96947c184a7965b13e29d1138323daa2ac10d4e0d9a137a69f3e2babf156a2f582e91e5d6a8e797667deee3a73fb83e21151edd4a26aecf28bf5fa21adf43a7b1a6932614d88e66bbd116d3543014adcb716d90022b7d32e3ee8804d0161139921312b78c2da4238209415a9195268c738aaec59a0f31c70033964517d5e31b17a4e1120949a660f83257fc986504feb402dfc4f09d0f4a9914f47b0107ac186cb736c22d3606ca61c11bd988be7a78763c0528b91ffc0e58ff9d1731aa685a2d4ddbddc7e7c1221a4e72d6f75912422002bbdfe165aafc8b950f124bee55e607ddeed647aaae4d613b2f08b19f22e2401bccf3a8352b0d3c1c312d89c9cfb993f9d070106add7b1e900726e79b1fdfb2c5fc91f8146cbe2151308632a3c627f1c640e77012ae95d2d0b922080a61132f0194ba526703a4b35491212e168e9229dc721f7510b41f1a4f7bdd2fb740bb5a50b04e3afcf42fc9b21dec6c9c76fc2aed73d30d6667e39917612c799329433e21748777c62430ef5add2c806041b1d6a3760774890b11fa449c8d43470c74f733ef9076472b615f102aa3316d86ecb931919ab1a4214ef0d0b9af854a5a6a345b1d664d1e37ce2f71409cd808b4e263f0103d5bfef699a26389a143c8612a2a5b1db21763f98128049b0c80e85ea35b2df5e8850fbf4ec90fe07d175c85a846bf2652cc580069606b7de3018f5556740470f3081aec7c2cc2f7cc13285b413cf9c4b4beb94f12c9348bb4631c61ec10a1d5c08bf1bd4f96378c8285968eeee2a8dc817a174d8286f4b52d257c773a146a33288bd2c24ec0b1159dd74792294c2a405b633768fc10e748af2455481a24922244f5c148081256d3462e9a3691bd382b817d10e0d1d77bd22031e3c28161c0175b306f5d8abede4e846c489e72c6e570c03e134833d159e6a76c96eece2b9a5a0478f4ade74275f38ee3461b426e26c1a3b62ee7152d88d589b5a683ec8d47129983f141b9c770dbd221fe85386d12b5ba3c9dc606dd48b8a17736d378cf1b7d16fbbdc4e1c38ff1237195e712b62af2e685844a5853bd8ae174b374f25f7d714398c322723a8c4506a18c07cb92892d2a12f419457bc9ea29768b82889f18d79c9c7feb69614c0b730d755e91fedc71b72626ee48e49549c870db7c96bcc18f143c1864bebda60d76cc586ec755d16ddb6db6dffe6b01deaf67970136132c9a50b640b2878c281e304a44250ae011242a59628f796952ed05e9f4b238680e2fab942ba6b3a290adda3a9306f193067a69b2340410ef5fff7c9aeaeac84f48f4e5d0e22262735d27166ead42391edbe884f17d2467995062501b6a32363fd209cf0a2e02703c9ea55f2ceee9b21e01de9a6fb8323114a49d6c3273b06bdbd32a2a3337afb04b79d5fbe883abdaacbeabe36e272f2401fe2322910882904447b5a49ab6c34b290d6d003bdf2da94d6ce3be61c09151e37b191d0f566e7bbba2b68929099dcba9056b3de1d7b5ace3acdaeef09601036e0c589c6b5c18b9bfe4c4f6b6d565b758c5026114f673b345e3244b7c3c81c51a3b991f0611bed2cbc6d465e64a330cc152cdf1d7c2e84e2fe7d1491a05638bbc17dc714cac2045acb5d1a01c16a215b0e5d562ac68d394e1349f99b2e1ae3da867bdd356a1dd1b5bc62f063c7482d4c204edd6c43d1426e29f94682d49ee4359cbfc5b6bb6c766cb4120ee56497536ce6ca680ea51fbff7e6b6376effaffe9fc0ebed742ef604b82255d0ef9cd42e10f5328f9a4d0e687515c93584d8b6b711a32113282c741d77506b314d81c1e61a9f57d1678bc4ae0c705eb7bd371dbe0d40e9722b6bfbbaaf0600677bfa37a58c2cf5d3b1b949edb9e715ce316ef007b1451a6e264c55084b850b3d6acc577c4836f3fda32426eded4b2cb5a8b012dc974d3b6872499f8d330b726bd0e9ebebc416f323a9b0ddd416bf8e0e76a0f8faec6ab8c448d5a4b776707746dc8f56ec4d7c78ad9f6ab3e1f122e6d07c70a5f86ab0aae464e28ff80666048cbb227a06be3b5ee8a2bb56922fcb9a18cbd1c72edd690b4556dd56327438ce04aa8efc17a7b67fc369f90b1a787ff6b7a40d5c2de89ab728075ac9a540d9e0707a286aea27a99e8e97a49d103420c9f1f430dde22310edfb3e48f9935c04642744a7ffdeede31588fefd50060b35d9bb481fc83a7c20c459870bae28ac2c0d4f5a9e5e2088f796db4119071d9acdefa762fe1d48f0d602b9faecbf06abeb8ab902ac6af5be4ea4d8f6610900d336444120dcbf989b2b691d0d2b4e2b3169a5756014e5c56d6e1e3f256424346302475987dafe092376a7c4191098998e4128209f107db38b431d97e1c32f73f1431e67503ca08dcd13063f6360f54fe03d72523ed3cb1a85bbd6bc34cc1dc35738aabc4f843ecba977cc4e49bea9834e9c12f87c6e0193440a4928c184613931f14d60a400c7b8d8247d948d2cfe66e5d69af7780f2fb73c46f1e1ef949418b989d37c9f940c4570a386d3f9b47653cc97102db83d5d290272ed593f0f8b67bc564be6fbe28c347aaca8cb436a73bdba1d44bf1fe07334214688d3ffa7cba50e62647b4e099dfde174e50a09381ec040f09edf43362c2e3e22669d060854341b75200e91b9647b99e061cd056a7e80503e6792c2e1c3d938f3fdd0a8d2da5b9c902163ad7ed3f20656e049ab211fd43a6469c254be7f8b361949597d62fd5180a40f5a8e90172ef8a5b143e337cb7bf8fd808833a8b9e8c3c110a9648a4ee29a0cf31a0250af6268c1244905d35951cfcaa47ba53a7003e19d9b75ff2792bf43dcab88997569edfdfcce91fd663bd7a9a93829f0fbed153451d21cfe410eef88cca617671e079a68e62a55c37f8d9b7ebe158e9e199bca80ce8b298f5047a51f66afdcfe7f6b3b930db743369542009f8b5af675f8f933ebfa6f11c54f84ec3cb0d4e8cd7c0e5bcfd96f8f2ec84d0b7feed3dea4b8f3c4a77f037cafa74852e009e1920f2018503e2b1ea5e6ff9bb1397f9c65b59197515eae685fca557089b62afab0b18a1b3ff9fd4c84dc57fa8687a9df7b010b9e5bea9c312162b33ebaa1290bcbc172076f6238d244453d69a93c0a5e1206f886d67d9d7ea7a5ec379eb13c3ea065f24055132cde1ed5b2b57f4c4082532fe8161cd0860049ad2907bd5316232b55a444937a8962b58597c021006bfd4a981729f4301b93b0542dd92d1bc71188669088bb283b90367df391ee2dfa1ee5ea33398d553fa25f21e143e4d4297a6513dde545424c1dd5e739d39542315f2c4b0012af45dc3679c898ce74f1ecebfff73db0d158688efd3dc3b56ac2d6a84df7fc334aa1c0ba5e24c2e00695526b7273b1fe64672e53fc3125fa15e9f1369acf6c4a1bc22b855db4716757078466984742c512fe077aacca3e122ba7fae91a9125bf3d8581d04b2ca7fd08e9ec252d859e097fd0cfa73b5a80737faa3f094f02eea04592c8d5d94d9a71851e5c18f0cb6b741fb6de6b8312236d88dd19ce018228cb784810fd87f0af0d51106da32fd102db1c73b1cfac6bcdfd4221bdd977ead5307aadc3e3e01883e840c510c58cdab046229ae25f77e720a9d22a9c5044301f784c7c39e4f4c0cbd62bfb201520369a95a14f7a88a8337a3312ae78a420a083e1c7e3dec21dfc7af81672edbaf9a2b4ee10ac146e34e00470771e2a16dbfbe452e5232a858c3f4bb33e3669ee0f6cff969c31cc157edeb25e5fc5abe00a8b0e7b7e33f358e34c78cb197c99cd351a3ba7de297a6fbcf2f77107e2617bdc914175b00c6d193ffb4e2a4fdb7be3b6969f818e16f411fe147ab37cf7bccacae67963b0ffd34c57e2a2d353888cd218701b3edf71b06dbcd8e94bab04bbc2ce8163bcd3ce1f3e35d883ad23b2d8c9808c9d67c4759595d9deea3595fbefe9a43b705ec5b9a4d3315faa879f6c2d889ae9f14592b37f08281d812c254a2423cc856086c3bf188a04631ebf5a0f693db63771758c795a58b9a7764b226b7d7444094cb7662750c336d13b378729d2a3fac5e5175b50459347b5bc9bf9826f385311cba91f2b3fc4c361ba318b3f2fb37c6c849f7b20b3600380d039e138544fd842a58decdbd32c3760219732883f11f4e77053becb50c83f1c1f0e0d4bdcc519352cebedbb5ff43854c16c63f4ce6172194213cd199b6b5703b1b9ed2683c9dab3c9ea224fd15335c1f58049ce622e3d7ce4ddcbde53cf7e7cdcb7bd45bf26a285bb36010bf70d222d404152306b5409104675bbda48cb0874ebae541d9bf25ba64cdbed4646e1c281dbf31e81211d6f4345f02e9560df2db2d22932de757d8b898a37d75b895856c38f064a826314ee37f9803da22a9b9d27d1a79d73de6abfde02eabe9d76e24868b5c85c900fad4647e4692a18f7fc2f03cf7d", @nested={0xe2, 0x2b, 0x0, 0x1, [@generic="25abcb9dfd610a47fb120457ed43018ab6abe30a8c5b279074e49ce5d01cb505a821cf56fc35024e758572d847dc66637b5fb193", @generic="2d60b177c937369c8d6ec4b9153680fa05d567cd243d97012993d43cc5388a8e0aaa5d566b2736f89f27aba2b6eff057149335da49661bef645031e81f5446f4af6cb94cf76311be36361bf748f6345612f440de2c99607c7ab3001a9f4724b4ab47e54b86f78229f488c7579e3b8ad0015288fb27dbf2e25745f53c3558eada4cec04e8a6f5ef02e1b7c1d08626b2bfb18deda6c769a988c945313f0e3a0b0644329551f4cc4e5ce060"]}, @typed={0x5, 0x42, 0x0, 0x0, @str='\x00'}, @nested={0x1144, 0x74, 0x0, 0x1, [@generic="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", @typed={0x72, 0x45, 0x0, 0x0, @binary="43f6a66aa88e262586b861ed690502588e073c03bc7eaf2de5c7dd948bef46e39525487b6b4f8d2f2fb75522ad7a282992cd0bffb814ccd5ce2b983c61dd6b4b7ba06c89506d633abf20a50e4b7730b59d2cc63678d8482a04f273fe3dcb90b8df4cbaed6f686985f70f68212f03"}, @generic="ea2b0c7762a2f970ff1113178d675011e4d84b4b69943d06d1460ce35a28f83faca6905296f3a4fdbb2730c2eeef517d151d612524cf2f57448be88be89a41a9c2d84bc9393cc154bfdae9727e44748aaf510df5e551eaa30ee8506dda207239096b8ef0e969e46bb072f016804ae56a2fe4450c518c63402e13e2a5f5c65e64f63d032c78eafa5db666c6ff5c1d4a543db029dacfd81502af18643b634ce6a6b4d69501700e8f33668488f2c5b76a9db2fe62281fec89c0e58fb1fd151e65bd", @typed={0xc, 0x6, 0x0, 0x0, @u64=0x81}]}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=r8}, @nested={0x7b, 0x61, 0x0, 0x1, [@generic="ce2c542857c5fa6dc8ae8ce322d2eeb348d9ca2ed88ad21f7fb6c88bdaa4ff15f822be8a3c2b522d450bc2231390f0c958ce1b7da37aaed99eb34d9852f2d7793447e5ee3078a1ec587232177a09", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r9}, @generic="3d9b115e4f5b35893bebf17f18193db9c6c339e110", @typed={0xc, 0x7b, 0x0, 0x0, @u64}]}, @generic, @generic="b2074d4085cc2af302c1759083522780f3c2ab1cee427e77694bcf25faba61fb82b4fc18673483936e36902ff39bc06919d14ad06c9a963ac8fe18bb67d08edc6baa0902c8a0e77495de1e08b2a7c04fbc213c868aa049052d4c63c2fbf8082151b5d7a571486ea0b9d24293792ef786f5ccee367a9475990246d88150b1b5a6b8d331a543b483c97969efc9", @generic="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"]}, 0x3368}, 0x1, 0x0, 0x0, 0x80}, 0x840) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:55 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) [ 2678.480296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:35:55 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:35:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}) [ 2678.480302] Call Trace: [ 2678.480328] dump_stack+0x107/0x167 [ 2678.480351] should_fail.cold+0x5/0xa [ 2678.480371] ? create_object.isra.0+0x3a/0xa20 [ 2678.480393] should_failslab+0x5/0x20 [ 2678.480411] kmem_cache_alloc+0x5b/0x310 [ 2678.480430] ? mark_held_locks+0x9e/0xe0 [ 2678.480452] create_object.isra.0+0x3a/0xa20 [ 2678.480471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2678.480495] kmem_cache_alloc_bulk+0x168/0x320 [ 2678.480519] io_submit_sqes+0x6f76/0x85c0 [ 2678.480567] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2678.480584] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2678.480607] ? lock_downgrade+0x6d0/0x6d0 [ 2678.480622] ? find_held_lock+0x2c/0x110 [ 2678.480646] ? io_submit_sqes+0x85c0/0x85c0 [ 2678.480673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2678.480698] ? wait_for_completion_io+0x270/0x270 [ 2678.480720] ? rcu_read_lock_any_held+0x75/0xa0 [ 2678.480737] ? vfs_write+0x354/0xa70 [ 2678.480759] ? fput_many+0x2f/0x1a0 [ 2678.480779] ? ksys_write+0x1a9/0x260 [ 2678.480803] ? __ia32_sys_read+0xb0/0xb0 [ 2678.480827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2678.480844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2678.480869] do_syscall_64+0x33/0x40 [ 2678.480890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 10:35:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000650f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2678.480904] RIP: 0033:0x7f2b12dadb19 [ 2678.480926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2678.480937] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2678.480958] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2678.480969] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2678.480980] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2678.480991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2678.481002] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2678.485160] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2678.534687] serio: Serial port tty29 [ 2678.559040] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2678.559057] EXT4-fs (loop1): group descriptors corrupted! [ 2678.755180] serio: Serial port tty25 [ 2679.372493] serio: Serial port tty29 10:36:11 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x6000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000001f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2694.074687] serio: Serial port tty25 10:36:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x0) write(r4, &(0x7f0000001580)="8d78b98f06b85008355f8a07d21f51d718bc914fe49dda939d2f1cdce3e43cdfa085712794d703997265c4dbc44388747632565f984001ef759b0efe09de13a0c490b0dac49ab17c00b3f2b091ba984af942fa152c10f218a53f02508cc476f9cdbc3e63fc47d9db819538c4495b1b9ddc32cd40bea9dab6915803d1d5803410740fc00c1bdbdd163a4a4d3b31755ba52eae1f04ef1e0330790923becbf36f46889dccb30dd3c27a245114270816f2b112c70ea5950f5764d519852b4170c34a70d59c256a9a8d64f33e52f48d2c3b56d72547913c399c761cb8d2b87814d55520a52adc19cb0f92598ec19726e01142b0b573e8d74f06a9", 0xf8) r6 = fsmount(0xffffffffffffffff, 0x0, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x3, 0x2, 0x3f, 0x1000}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r9, r8, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000540)={r9, r10, "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", "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000180f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}) 10:36:11 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 10:36:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xfffffffffffffd50, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x1, 0x5, "cbb1c9e4fbefedb7437a175f49e3dc70c55149a22a7e56f0e60015b8de9fb082040681631b0f325ba3eb52e10d6f1febcf3370f2a260764e3b3729e02193ba", 0x3c}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:11 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2694.102079] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2694.103343] EXT4-fs (loop1): group descriptors corrupted! [ 2694.113014] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2694.116220] FAULT_INJECTION: forcing a failure. [ 2694.116220] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.118872] CPU: 0 PID: 61118 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2694.120339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.122067] Call Trace: [ 2694.122619] dump_stack+0x107/0x167 [ 2694.123392] should_fail.cold+0x5/0xa [ 2694.124179] ? create_object.isra.0+0x3a/0xa20 [ 2694.125145] should_failslab+0x5/0x20 10:36:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a000000ffffffffffffffff0100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2694.125926] kmem_cache_alloc+0x5b/0x310 [ 2694.126913] ? mark_held_locks+0x9e/0xe0 [ 2694.127777] create_object.isra.0+0x3a/0xa20 [ 2694.128699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.129767] kmem_cache_alloc_bulk+0x168/0x320 [ 2694.130723] io_submit_sqes+0x6f76/0x85c0 [ 2694.131617] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2694.132654] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2694.133655] ? lock_downgrade+0x6d0/0x6d0 [ 2694.134510] ? find_held_lock+0x2c/0x110 [ 2694.135355] ? io_submit_sqes+0x85c0/0x85c0 [ 2694.136277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2694.137277] ? wait_for_completion_io+0x270/0x270 [ 2694.138277] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.139238] ? vfs_write+0x354/0xa70 [ 2694.140022] ? fput_many+0x2f/0x1a0 [ 2694.140776] ? ksys_write+0x1a9/0x260 [ 2694.141564] ? __ia32_sys_read+0xb0/0xb0 [ 2694.142410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.143569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.144678] do_syscall_64+0x33/0x40 [ 2694.145453] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2694.146515] RIP: 0033:0x7f2b12dadb19 [ 2694.147290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.151086] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2694.152674] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2694.154134] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2694.155596] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.157077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.158538] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2694.207728] serio: Serial port tty29 10:36:11 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x5000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2694.239104] EXT4-fs (loop1): bad geometry: first data block 4294967295 is beyond end of filesystem (128) [ 2694.273586] EXT4-fs (loop1): bad geometry: first data block 4294967295 is beyond end of filesystem (128) 10:36:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f05}) 10:36:11 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) [ 2694.309672] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:36:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000008000000000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2694.358325] FAULT_INJECTION: forcing a failure. [ 2694.358325] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.359588] CPU: 1 PID: 61246 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2694.360331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.361192] Call Trace: [ 2694.361476] dump_stack+0x107/0x167 [ 2694.361869] should_fail.cold+0x5/0xa [ 2694.362270] ? create_object.isra.0+0x3a/0xa20 [ 2694.362749] should_failslab+0x5/0x20 [ 2694.363147] kmem_cache_alloc+0x5b/0x310 [ 2694.363579] ? mark_held_locks+0x9e/0xe0 [ 2694.364019] create_object.isra.0+0x3a/0xa20 [ 2694.364482] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.365021] kmem_cache_alloc_bulk+0x168/0x320 [ 2694.365503] io_submit_sqes+0x6f76/0x85c0 [ 2694.365959] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2694.366477] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2694.366982] ? lock_downgrade+0x6d0/0x6d0 [ 2694.367424] ? find_held_lock+0x2c/0x110 [ 2694.367857] ? io_submit_sqes+0x85c0/0x85c0 [ 2694.368334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2694.368850] ? wait_for_completion_io+0x270/0x270 [ 2694.369370] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.369852] ? vfs_write+0x354/0xa70 [ 2694.370245] ? fput_many+0x2f/0x1a0 [ 2694.370633] ? ksys_write+0x1a9/0x260 [ 2694.371037] ? __ia32_sys_read+0xb0/0xb0 [ 2694.371466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.372038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.372590] do_syscall_64+0x33/0x40 [ 2694.372986] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2694.373534] RIP: 0033:0x7f2b12dadb19 [ 2694.373932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.375880] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2694.376679] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2694.377431] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2694.378181] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.378926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.379663] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2694.383508] serio: Serial port tty21 [ 2694.412609] EXT4-fs (loop1): fragment/cluster size (2048) != block size (1024) [ 2694.430164] EXT4-fs (loop1): fragment/cluster size (2048) != block size (1024) 10:36:11 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x7ff, 0x2000) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x82) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsync(r1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) 10:36:11 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x671c8c4f]}, 0x8, 0xc0800) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f020000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2694.493156] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2694.494262] EXT4-fs (loop1): group descriptors corrupted! [ 2694.525183] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2694.526351] EXT4-fs (loop1): group descriptors corrupted! 10:36:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a000000ffffffffffffffff0100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f030000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:27 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x7000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2710.276576] FAULT_INJECTION: forcing a failure. [ 2710.276576] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.278560] CPU: 1 PID: 61685 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2710.279556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.280748] Call Trace: [ 2710.281136] dump_stack+0x107/0x167 [ 2710.281641] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2710.282981] should_fail.cold+0x5/0xa [ 2710.283533] ? create_object.isra.0+0x3a/0xa20 [ 2710.284212] should_failslab+0x5/0x20 [ 2710.284760] kmem_cache_alloc+0x5b/0x310 [ 2710.285352] create_object.isra.0+0x3a/0xa20 [ 2710.286213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.286953] kmem_cache_alloc_bulk+0x168/0x320 10:36:27 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 10:36:27 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write(0xffffffffffffffff, &(0x7f0000000040)="bb44cef54ca4db58af85d0c33b027fcade5f48386b87b2ecf2f96f57fb870432f137f05bf533477f28622658d8f8c254109bc77f9c47165d01a0c4a94f8da10049a24b82b76a53cc38e0e60ef66e2b89", 0x50) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x0, 0x7}) fcntl$setstatus(r0, 0x4, 0x0) 10:36:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:36:27 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x4, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, &(0x7f0000000340)}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f0000000380)="7c6fcde08d160e2dd444a60b467b5815d419248309c1d41ffe85890c3c904b3e68b6abec01fbb47731c7911dfc7eb0ef2dc67e76c0ebb9698e3d493bafe573ee3263854cd52c40612bfef4ceea42bbfe35cc6c10dcc326", 0x57, 0x200, 0x0, 0x3}]) [ 2710.287622] io_submit_sqes+0x6f76/0x85c0 [ 2710.288344] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2710.289065] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2710.289769] ? lock_downgrade+0x6d0/0x6d0 [ 2710.290394] ? find_held_lock+0x2c/0x110 [ 2710.290991] ? io_submit_sqes+0x85c0/0x85c0 [ 2710.291614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2710.292318] ? wait_for_completion_io+0x270/0x270 [ 2710.293006] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.293672] ? vfs_write+0x354/0xa70 [ 2710.294198] ? fput_many+0x2f/0x1a0 [ 2710.294717] ? ksys_write+0x1a9/0x260 [ 2710.295264] ? __ia32_sys_read+0xb0/0xb0 [ 2710.295849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.296600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.297356] do_syscall_64+0x33/0x40 [ 2710.297889] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2710.298623] RIP: 0033:0x7f2b12dadb19 [ 2710.299156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.301791] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2710.302875] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2710.303891] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2710.304911] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.305924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.306933] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2710.311870] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2710.314193] EXT4-fs (loop1): group descriptors corrupted! 10:36:27 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:27 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) [ 2710.398658] serio: Serial port tty29 [ 2710.469630] FAULT_INJECTION: forcing a failure. [ 2710.469630] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.472260] CPU: 1 PID: 61761 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2710.473190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.474291] Call Trace: [ 2710.474654] dump_stack+0x107/0x167 [ 2710.475144] should_fail.cold+0x5/0xa [ 2710.475659] ? create_object.isra.0+0x3a/0xa20 [ 2710.476288] should_failslab+0x5/0x20 [ 2710.476802] kmem_cache_alloc+0x5b/0x310 [ 2710.477350] ? mark_held_locks+0x9e/0xe0 [ 2710.477902] create_object.isra.0+0x3a/0xa20 [ 2710.478502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.479193] kmem_cache_alloc_bulk+0x168/0x320 [ 2710.479805] io_submit_sqes+0x6f76/0x85c0 [ 2710.480386] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2710.481051] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2710.481707] ? lock_downgrade+0x6d0/0x6d0 [ 2710.482264] ? find_held_lock+0x2c/0x110 [ 2710.482821] ? io_submit_sqes+0x85c0/0x85c0 [ 2710.483407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2710.484076] ? wait_for_completion_io+0x270/0x270 [ 2710.484723] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.485349] ? vfs_write+0x354/0xa70 [ 2710.485838] ? fput_many+0x2f/0x1a0 [ 2710.486320] ? ksys_write+0x1a9/0x260 [ 2710.486823] ? __ia32_sys_read+0xb0/0xb0 [ 2710.487372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.488083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.488783] do_syscall_64+0x33/0x40 [ 2710.489288] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2710.489973] RIP: 0033:0x7f2b12dadb19 [ 2710.490469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.492927] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2710.493932] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2710.494887] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2710.495837] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.496805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.497738] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2710.514353] serio: Serial port tty21 [ 2710.517539] serio: Serial port tty25 10:36:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f040000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f050000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_generic(r2, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000000140)={0x2640, 0x3f, 0x100, 0x70bd2d, 0x25dfdbfd, {0xa}, [@nested={0x133a, 0x5c, 0x0, 0x1, [@generic="0ff1e23cd112b0d9c0fa454e8a23cf8a34751c72caf9f9d09b29fb2fb49ac3cdec72d128b8ada04bbbc41a4860efc47cecab24dc0fc69e65f14ddd8340b81b795948faee087d43c8acc9deb915f8b36b27e45722d662acac707295b343548bbf3b34ac4e01f7ed7d0ffd03f7cc0a41690e418cbfac3602f6810889777290d2d589013e3e186b9f3c863c8f4ab540bfbf98c3ca516499c16698d85ed70cd45dd1ab52fefc6f209df61b98f552e20331e6687c29b0daa69453cb7d5b6ed9c9e218b5217995225f607fad511ae17c740c3edb9ca85fb5f926d6a66ae6a19621bb4ba7449bdf460d7f9721590ca43f50472eb197ee1015ef5000580d006ea2b5490b82aca0be31fae1558cda0b65443602312dac98541c855d0cb215a2d28d52c4441164aed4bb65812eef31e6cb6185d714430dbf3400b9544cb49303e90d2ddcd7be36628bcfb11039132108579b2feb10dfd3d7d38d9e4bb91100fe4cb878c28ca159c74bb88404b3b98aff343f860b7577dc8bc7a96bac417f0e724f70be7ca8b5ea3ee3f5120c6f1a78fe9064dd31ba8bf0cdc33390397e866f29cb62465eed6853c10683e7b004fd0fe83a191bde6c6b4b7c87871aa09036d6840278139e7e465171bfd60344754f1fdd04317dd8ccf243386686aea5e0ff2d45cf69d97ab1d1e14353b73559930a60a21d9a96bbf4e3e89a3608576d29be3c974ea50ffe6f4914b151864ec041401deb77be15468a3a732f687a8e6852f1ee22db7806418903a2a5be78c187705728547dffe432d38382a470ab39ddff6314cbe586f24204d2932a883582aa76da064239b733d2f1c2d6187c58d075cda21d6b12f7a3edfb01c210a8e63e780bb3564f896f8802f601becb9245b154a0ddb4bab3ce0353f8e7480544744ab768059a56d33f343a6953dac74eaa9477fdbcf7fb3e497f578a0286ded5417758e54765283fc315b185d2c07697693094217693c32b8fa4db1aa1179a7e7e7498b08e3ace500dba7dacbfd2101df5d8fac57ed9964f94035261ce308250d225ea2b1c8f78fb0f289912749b33a8ec789bf16b6838aef2f8676746e1e40a56a64d88c1b48f7951d6f667eb73c48cf81ba18cbe9b8cc541a02dfcabb40852c8da0e16a40ccf9e5084441d25ac025bb79f982eda3dcaea9ebb2fd9181f62eb7d2bd1ff5970b80a36ce21f49bc1a4407786830383da75e5ef013f549d639449763a2601a7ae82b049f9d51aa79a162d2e444a2b215629dddb34cc135aaf9287f7c6df43d1c47f1b39a6179605a77d06fec9966bfc098363011b0cf99fb66696ffbacd8a1ec44f976d3590365eda5a6b748c306ae646b1e1b886a152df9a0c2e1b6ee44dab76c803b19b1952f72ddf44e92bb618be018a3f0e8a623296feb606300248143d7c6afb2cc6bede519cf4b6e10ca4719b465bda416e16026535a2b78f9d7d990153a351cad065d3b3c3686b24f736845f45b7078df0553db85c329a8f3d91f1ac9b9fbd421a6d2040e41b8f006dbb0e43eadb3878ca3516ff69ffba901132a38e7d5b64815aaf12c2b3556a43eb548f3bf0be5e1a353d6b084d132a8e38c8c3216f5233fa368b79c8cdcc0fd8df8d18efca89fbb68a83d8bd4d588fefb5b4a15375d329c10d085096ff203ec1d5c643579caa060e7cabea2a302fb388a93f70723e433b96d40ccfcfb733bf67748870a88ad7473a5b3092f86f8341aaed98e3c135cf2169bb7ca311aa2c51e06f0ec101652a97060593019afc71538ea193bbb215d4c97449f3b50d5e4c609aa700040c39bab47a8450c1643072362d3af2ecd6c4861ef0f2f3e9c2dbcd0ce824bef32cc57f33f5a5eb06ea4d41e7e0bda7c5be2e96c4c10a9c150fc97a287389020fcb43eb34c1947b3b50c234edb5ea99d89ebbe5ea6111dcaab23311ec332c029e0bc72b4d5de8c2f6f3a6bdab1091731544ca6a1035109c28deccda0c462fc5865fad3493d42833372ed11f94eae7f63124bf68da80fba7a884c0a8102f87e38fdf1e6072e4f0e62170f9eb9e6992d41fb310a7e0d5307047abce70a7390badc34ae724333cd528aa336401a9f98d762f1e2b3a20410f76d82c0f9db185f418ba39eb13ab5536cfd753a3312417c0b3e0858181633d1e9c99a81802701c250d8fc43678d6e58143936b73f54b1b68311ec95cd028e90abaaf9bbe9ce6c35da4d93387a53ea49145d284ce0ae87acc716969f4c831cf0ff8e333c9912b1296d566c6486da54f233d3313c6d0aa2abb9e3f8b353e18fa7f73cdd7457916fa595b341ff9962659781342e054eaa189b0c604f1af18f61ec2bb75b95c12e2a34715d35bfbd1f8008a4d558510676949d7217222ff6a76ad4148741b49601f01a6f5391bfff7e1a4b611a712847a3921622a720c3a83e1cd9403a9d4c5632e89bd211010726ec115129b7894bff8fee002cfce329c1b1f69c74ff177ff74d98986a666f9a826f1abc4e83425859f8c663a966c300d14d4b85e8765d773e2f2fadd030a7d2f888fdfe808c6cad8cb8b1a5c957fce07710faaf150134a9e325cc0a3d8d9a9a0a30b841a9cb31f1eff46d35c40660f02a90ff92135567db01feb58898d73cf938ccf36631092e0a51d20cda651877b9b12e2ef42d84a9160276b522ac0ab7846e9b99c4b40d7fd497ba650ed4632f8a51886194c62d61ead60d2c547a3f3c971e30e9b09c8a6c2fb43f29f4a0cd401f1c093039ca05d1f0039dbf34be6ecb50d332b0b297c99374f3715099b7e94f500ea59f38160c3da2370ae66240036393887e0ca8f8bf74f927174c0fdd365db7a82a3d2b13b79456ecb3e2ea6882f7c6630ef489dfe7ec296935ec17fb7ca256282a6ec536d6df4ce95ce144aca768a907ff9c49f7ff75ec3124b85cefdb61a24105dbf4f2fb4943a800597c71fe067f33aaee5d39c83774b482cea37d3f705e3c1e51afaf2c9c3bcd0853bec167a5122aefe46c8f988faafd537ab0b6913f450f7c9edd3fcb9abe3153a45da3616bdf471f76432d544be86ab43d383498907496fd2c457fadc9599303f03f5c679ba9ee3bd185e1fe6a52996db9e37b10de891a2b21d93edfb705427568874b1d31d6f960fb640d0b423efab6396928b7221f3252daa7ef753dfb066326f65cf9e8e8b2643d107c44118c4c5f95e2c28f2e6512ea5a286044453627414bcd6d02e61ad72832e2007c18aadd814165018ab2ee6ddde30911119c722b59504b6b9d3ca1d44265cfdfa80f16f07b7313fbcd7b10d724c8ec74853bdc2f29b09a6df0d2989e625705bc8c4738d3961076796517d8212a47634c41383ec25d2b2919dcd9f2bd46caa032e174e624937bfd258478866f6665ccd2ed1fcdda2cf15ae15e6437de0d6b1f69ac792766e3096db5a041e2f031ce9b54520e3f1e36ce6ac5df22aab54f3ed600a1afb95df049b445bd57b63addddf4db59d97c514ee642caa80a17460d9152e26cda18d74f5fddafc2d6e305285528f8b61144a5bfd8e573d04b90bacc178eb56f49d5b56b61fb597c843a612409033dde2ee79978b40021ff263c960caaf6b2cc7409754145fc9abd22021407520ce7d26c1c388cc60fd3ccdb96111e907ac2a4869ff38bf30834baed3b57637a8bdc1d4a4611d6ddb3175f60f38ee3cdb19be98e62e37b299dc0cba87ac2cb8d7acd50e333fcc6807909612b8ae725a4274b287a9164ae6526a5cc33021d1c1bf187023e6e4315d818a48e2d70860bb05dbc58c940e28279e1265300b53dba026e1ab2e01127b06f8b5bbc1f859dde8f08539bd6c2c1dcea3baa462d6ec906feedf2aced6cb1a1bf0b1bfacf72961f4a5d9d6b04c6cfcbff9cd3f9fd1983d4eac12e7d1b0b7c7bacf33f1ba21e027b6b827d449e8bf8d2f81d8e1444e29de701873c7eb8ecd9a5aabe52e516627642a9fb01a830c845436c2f1100783067b7d5e9c679c1b68eedd89119cc841b730f6b6f082a1166d271f5eec6f5ec1de8ebc68fe000af8cf31a8250021d93afaf9483e6cfed999695b7b9a04235b483ede90c2e05e12fa5a43f3896a0b6e67fa2f5ad9df6d60bb0b54e3b81f3bc4f8968ca2eb538e7aa95fab4f9d0b3d26e074482ebeba986292ee9b639c3e61f9f04a54ee834e2f824f87aa32ce7d1f8eb9f1794bfbeea51fbc3b73836d8e0739440afe531db599bca992ffcf5f4087438eab593b731df778312002d9ed48f84813ee90bec2d3aad28def3b116d0fb4831cb26fef4547d979481fe75e9529380fea24fd116bfd48b83acc2c74dbdfca0cefa21dcbd1238dc2806ed1359e07bbaab514044378544db1482072b8626d72b17be4e091ab856a082a905debb8853e0bf8943c8386425296ec716bb6779bf0296a6da006a8bef39d654e86505dbdc864804c3a8a7c1c4fed5231f49b7db9f68725a8098efbefa79fa94f6fa3bd343c2b8fa7704f2857052f2444d8b4e0f5edf4250a7f944f169bf87ae21fdcd2e8ba11dc57acf1ec7f8e3cc4b05c769412347132de86300841e616b18639440fdb37a63ae6aa50f7d1fdd85e89a37b1303a1bfe7b66540c8d03c43d2f479513abb04b865606c1853e440dd5c637d8464352ad05073a9969a87603fe1b617d923d340bfd6f75295d0f075db8cc425df1450eb3069c70ded96a4bbb4e4589acf2f7f42a1f880120babfcf2648e9a89c1e65eb4b2d41608a91d4e049a1d45e06c85a20c434ab8338da393571abff24a2d1eaa405feb204af5aa5a8c3b567aa0ec8e58e03e5248deb97a6faa816bffa932368c0f2f8be477d93a96a05c71a667b78d8dc07a8ea126682a638cc308972df8b459fc7ee2c09e2640abf81c9c4b6436a04f54aed3b4c7e8924f2094c8ab8a44dcf3c2f50bd59feb5dea5928a51f2cf67bb86e7db0116f48116754e171f57ac2ae1a499fa16940832f6431b9e4b26c5c9a4fc79a5673595193574ae6a27e43165d78e2e52cad8e2bd2eb46d3ccf8c61ac2c52f1b1aa4622ce4ca0aafc68ce8e5574361f9b14f434e84750f32160047926e1b8a2f3b671b2aa32f606546e428f910b7c3d04c51bb8529a27423849174760adfa6c7a165d5cb7dc721928a59574e7b3a2529f5baa778d47d0d9f39a650df5756b92a84e831b5f3f312c60782ef7ccc5964d0e16f13b0dd07322bf03d34483af136c4449028ef2e8847e97ce45eca24ff3f3b5f6e32d1ed946bb6536683e67ef264f5121f4324689341e58e0702dbd29179be1c74ba6fa686ed86e34ffce801a458424246601b08add7ab599abbaaaf72409325b99f6b37b806fe30e09838f6ea45d94711b969db359455fdbc674c518844eda5d508a8682f50c4c9c15a15ff1789be3cd99e7bab61270b84286f5b2df73762f9a1d56a6ecbe0bc3600d0f7c18ee99be05ba03b1f824e6ebcba7b5a950fdb71e6a0a7e4fae0723259bf3562b5146f2831b96a0f696a80d1860215d9ac35b0f63b4afb6f53dd070248a1327b21bbf9fc21485077694a589a635f866430428723f191d6c85aaea7f71fa2511efc0efa5c50f37bbfaccf6bc0c679ff1ba6eea30bda4c39453e3322642e5d50e46d31428af393fbd66545af2aa89e93a190be5250165d14ee7ff4ce98602ef49033b2cfcb07fb2e35df510858868c81327410d4e326b9209ab1a8094952c15248376fecce354c22cacec47b0e965ed84d92f368279ae638fa14d45230a062f3079ca63617a16cbd9bf789c3187053053608c10c9594dcc4fc650489cd2bb01eea149b75e77468e9e6d1c3ac51b1b1c27e110a2e8a0520dfd0a0503b32", @generic="16aa5da931e53ff23b3b45c615b09cd692da97f99bd6c0", @generic="b03e4dc94d1dd89edc50ca9b9d77df3a5d8dcd8e308789be82b5aa4b6496d5ed797c6f9aabf1f480ba72c28a0dbb79f8ba13eedb479b62d5bfdf47ae0c79a46221f3f0523bf009fb4db54570b018b70d5fc5adbd86abcc1e935a38449b0bcf5372e4e9d1f97eebf84ae8d639471207e192bbd61a4fabc1e99882b13b1aab0b3c117cf896bbd4bb23abd418744fa94e23f991862eb08c774877aa4c3d681d0f5f397acf7519445740f7e87b46dd0aa08e56b9e038a33dc5991565528c5cdc6421e50fa6676c3c07db60044edcf4f8ccaa3db0e368e65acd5c542f9ba114d3219fd8c1dd324ae9b96957e4769cbf89ba0534a539ef8776699eee4b", @generic="e75a6b8b0a8fd70ab1d6a964553674753b909e22bbc27539a84ad0d63f496b7108e6aa1b1ac4cd5f284818a81e9506ec9fb5573be7392a160687045b2c586332f1b55a6bed6dae11aa507644e81000181ce30fe3f379f267149d3eab43f0906b206b9414610d4ef001cc8718907b8095127519ac0c4848585eae2d7f6dda670f106cb68989db786c6ea8cfe3f4d3a5b6da58dba8d2427295d67baac7b7af65ad94e882465dc0e47e95f9a88b029edf383e83550f64236d08bad4159247ffd85bcc8a955cee1a0f2d33717769e16c4dba91bbb5293e9533e99eb017af442a08fc8faa74b48702a4ba2f923d4923", @generic="dea1e51be7573b0b977bacd27e7e5cd4ba9e8e5865469be28f120fd506ecbbc588dfe32ea47ae3dc41ba98b6f9ea123972a09428efe6729323bde545bdb3b25558daa9576ccc7690de3a53473323b6e5bc3f06926e0862412cb0e5ad8d1198556e2dfb20819e0984a385e870e0bed0e55516934d30bdc70f40b37a8f75df8e074b5ac922e1f03ed57ac04f3dc3dbe0166a00ee961ca7f3394cde69a042f8e823890927ca77652214ce4467af2ba2df1e5b3c79ce98247d639ed2c8600c275f7d65a147", @typed={0x8, 0x70, 0x0, 0x0, @u32=0x81}, @generic="ecf4b31ffe698046eb63ae1c5133096abaee1d09f91a1c87f9c6cecc32", @generic="07a5c25cebc7b87ab24bb2a3063bb5b330317709e89660cc05d33edb60ea5c708062d772954dc55c677548f448389ee9d9a82928742792499729aac5f3d50ce71fe31c1b9c05d5df0a051cde450b58cd"]}, @nested={0x1a2, 0x1c, 0x0, 0x1, [@generic="9e166049479137bdcfe340a0c274abcb5e90d8aacb9e30fc95ff80afd9b905b058a8bb5b4de93da755340b76f4394f0fa5f66f59", @generic="d8e15096edf675e3e7af50671d93686dd2c9c77fccc13bd5cf46bdf9c1503a95f9a52ad9d9e37414372676cc65458950c02cbbfb026b1f6c488a8c9200dd7d0c509c937fe8f9b6a955410c485cd3cc1d7d44db4d60223f0282408d7b9b21338cd8d19057581a37a62cac75d862be01feccbfd36151a2769f74946927825089139a2d660f9acdf801c61f34482ad9030b8675990b88284e3f8458652b55776aba95262129f10aa5e36247cb1d4a1f920ae0754ddb52dfd40389", @generic="d0fbcc5fc60dd26eb47ad06547b012fd5f9eca3579c722a7275d1399c270aaaedcf6190fb519a39dde2e1ad9f267411febb9a0a51db75a885f93075d7f9434ea75f304e328b98ea6ac0b1c293582381a2c3f56466d8b37a970974de2af5d3f2ea171da9c9189af84bfd254aadd3287eaaaa6fec8a791fa9807d404f5b241ab1a514db66a0f", @generic="1295b84f2a109acd457a6cf3ebdea4df", @generic="979a94178608ab108ff95d5b464d4eb85ba9767ada5a04c27584c0f4"]}, @nested={0x1141, 0x7, 0x0, 0x1, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x2}, @generic="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", @generic="2d585ca8e09abc37ba995084f8e577570032ce7a93c5668a6b2d29", @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x77}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x5, 0x71, 0x0, 0x0, @str='\x00'}]}, 0x2640}, 0x1, 0x0, 0x0, 0x4044000}, 0x894) [ 2710.618791] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:36:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f060000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2710.732483] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2710.734876] EXT4-fs (loop1): group descriptors corrupted! 10:36:28 executing program 7: setgid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip6_mr_cache\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffdab, r0}, './file1\x00'}) [ 2710.820866] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2710.822094] EXT4-fs (loop1): group descriptors corrupted! 10:36:28 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x37bc, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x3}) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000080)) 10:36:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f070000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2710.869922] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2710.960259] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2710.961419] EXT4-fs (loop1): group descriptors corrupted! [ 2710.978980] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2710.980244] EXT4-fs (loop1): group descriptors corrupted! [ 2711.164357] serio: Serial port tty29 10:36:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000240)="f4b372", 0x3, 0x7}, {&(0x7f0000000300)="45a811343b2ee171b79c803548baa9b754617c8853dfc46a7918418737b3c099952481b284735f98483f53adf14d", 0x2e, 0x8}, {&(0x7f0000000380)="7bb53224565b9ee10f151247cf2311c5a6008df14e3e6fcd4a3307b8bbb7de57a5e3faf4f9139c72ccd13c55a1bf01011541e47e1a337e69f46fd5ce3ae93ccdc14ac66408c5a8ff7425d53d7fa55c4bf76de9448cb78ca6a22f5ebd53169ac1db192d541491f341c0385c1f5e742a4c4d716575d7d1356c4fa33ccba3168b94bd5fea9065", 0x85, 0xfff}], 0x4, &(0x7f0000000640)={[{@uid={'uid', 0x3d, 0xee00}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@huge_always}], [{@dont_appraise}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x80111, r2, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x8, 0x80000000, 0x0, 0x19c212e9, 0x4}, 0x5) 10:36:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000140)="93c364fe5c622b43c02da7d5c04fd980d8a8db8b6d40978dcc769dbac9e6c0566dd71a5ec99e8c597c81679fc918ab0450d74978c259119fdc2b2a4e37189f4d0945c5f83e5c545134ecb3d0f5a81b0f3846a90ce5fedb95bcd103aebe6b863e4a698ac3e181482fe38fca511d8e689da5ca709216b9ae5df484a8ff454e8e3dfa518c6a153acf4b8538b4b702d0b95c96b9ad6136a1", 0x96, 0x1, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_macvtap\x00'}}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) [ 2723.840915] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:36:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 10:36:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:36:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x40842, 0x0, 0x11}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r7, r8, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r9, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x10, 0x500980, 0x23456}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f080000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2723.896453] FAULT_INJECTION: forcing a failure. [ 2723.896453] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.899158] CPU: 1 PID: 62237 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2723.900681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2723.902517] Call Trace: [ 2723.903089] dump_stack+0x107/0x167 [ 2723.903888] should_fail.cold+0x5/0xa [ 2723.904706] ? create_object.isra.0+0x3a/0xa20 [ 2723.905693] should_failslab+0x5/0x20 10:36:41 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:41 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x7000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2723.906494] kmem_cache_alloc+0x5b/0x310 [ 2723.907552] ? mark_held_locks+0x9e/0xe0 [ 2723.908413] create_object.isra.0+0x3a/0xa20 [ 2723.909331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2723.910380] kmem_cache_alloc_bulk+0x168/0x320 [ 2723.911317] io_submit_sqes+0x6f76/0x85c0 [ 2723.912201] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2723.913246] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2723.914240] ? lock_downgrade+0x6d0/0x6d0 [ 2723.915092] ? find_held_lock+0x2c/0x110 [ 2723.915934] ? io_submit_sqes+0x85c0/0x85c0 [ 2723.916838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2723.917837] ? wait_for_completion_io+0x270/0x270 [ 2723.918839] ? rcu_read_lock_any_held+0x75/0xa0 [ 2723.919799] ? vfs_write+0x354/0xa70 [ 2723.920587] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2723.921527] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2723.922630] ? ksys_write+0x1a9/0x260 [ 2723.923415] ? __ia32_sys_read+0xb0/0xb0 [ 2723.924253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2723.925333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2723.926392] do_syscall_64+0x33/0x40 [ 2723.927187] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2723.928271] RIP: 0033:0x7f2b12dadb19 [ 2723.929045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.929056] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2723.929077] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2723.929088] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2723.929098] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.929109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2723.929120] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:36:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x4) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0xe2, &(0x7f0000000140)="a43934196215490993d7bb225e56bdbb99d212201a2914afb5c0eba1c9e35ebaad9e67b08c7cbc640cee05e8f664752e7fd4ed76a12b9257a41d6b70021537c9a97a7115f9e7da2c4f5391fe543809b6ad97ce43e8494449ee93dd359863ce038f20060a0e805e452738b2d1f1b4b2bb8cca270349ca68156527c05b059871c5890014a72e9e217e196f26a02b8874a92c5f9ffb5cebb0e856d7f05206b357d550d7bab03d2fae7b47f5a4e5362de4abde2a22fc18a7073a9c09b9bc8dbd8296b5b9a4689634a3a79289974e379d4a7a4b5c1ada8ea1661c8b430d011b5392d0c2dd", 0xed, 0x0, &(0x7f0000000240)="66bda1dac05d351064aa23ae086f579b344922d4db2f1896a4328fa4726f5cca4df6fa4a0e7751b9165256fbaf15f4539b65b57509904afa06a39666331a28c09a386324e49d550a9cb8cdc7482ee94ea49627beb1b59eb1ec8ee3ea9c548e75f9f1a0a3b33ba4e739ab7ba44d04390e1d22ce05590e19e97f74fd84b602a5d91c07041846b645d836ef2e8534cd364519229b1e7bf344a4e62f405ede0a5c66dae516ffa8298bbfb868c3b586b7a8e9687d77a156c14ab10e6b220276a3fd59c443ab06552ef24f1ba540b051d13e5a7a56dab3cb1f3f1ca88f3f84880954703430465443e211d3cba26c755d"}) [ 2723.972589] tmpfs: Unsupported parameter 'huge' [ 2723.976451] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2723.976466] EXT4-fs (loop1): group descriptors corrupted! 10:36:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 2724.015197] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! 10:36:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0b0000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2724.015210] EXT4-fs (loop1): group descriptors corrupted! [ 2724.130321] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2724.143664] serio: Serial port tty25 [ 2724.160491] tmpfs: Unsupported parameter 'huge' 10:36:41 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_io_uring_setup(0x4fd0, &(0x7f0000000080)={0x0, 0xc8c1, 0x8, 0x2, 0x228, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2724.220469] FAULT_INJECTION: forcing a failure. [ 2724.220469] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.222991] CPU: 1 PID: 62453 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2724.224416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.226096] Call Trace: [ 2724.226638] dump_stack+0x107/0x167 [ 2724.227384] should_fail.cold+0x5/0xa [ 2724.228165] ? create_object.isra.0+0x3a/0xa20 [ 2724.229104] should_failslab+0x5/0x20 [ 2724.229904] kmem_cache_alloc+0x5b/0x310 [ 2724.230739] ? mark_held_locks+0x9e/0xe0 10:36:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat(0xffffffffffffffff, 0x0, 0x2d3043, 0x84) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r4, 0x2) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r6, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff, 0x100) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2724.231560] create_object.isra.0+0x3a/0xa20 [ 2724.232615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.233663] kmem_cache_alloc_bulk+0x168/0x320 [ 2724.234595] io_submit_sqes+0x6f76/0x85c0 [ 2724.235466] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.236495] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.237478] ? lock_downgrade+0x6d0/0x6d0 [ 2724.238337] ? find_held_lock+0x2c/0x110 [ 2724.239196] ? io_submit_sqes+0x85c0/0x85c0 [ 2724.240131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.241111] ? wait_for_completion_io+0x270/0x270 [ 2724.242095] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.243035] ? vfs_write+0x354/0xa70 [ 2724.243792] ? fput_many+0x2f/0x1a0 [ 2724.244552] ? ksys_write+0x1a9/0x260 [ 2724.245331] ? __ia32_sys_read+0xb0/0xb0 [ 2724.246155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.247208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.248263] do_syscall_64+0x33/0x40 [ 2724.249020] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2724.250054] RIP: 0033:0x7f2b12dadb19 [ 2724.250814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.254532] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2724.256068] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2724.257517] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2724.258947] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.260398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.261833] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:36:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) pidfd_getfd(r2, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2724.287474] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.289641] EXT4-fs (loop1): group descriptors corrupted! [ 2724.326471] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.328686] EXT4-fs (loop1): group descriptors corrupted! 10:36:41 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x40000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) write$binfmt_aout(r1, &(0x7f00000005c0)={{0x108, 0x6, 0x36, 0x30c, 0x2bb, 0x6, 0xda, 0x8}, "ada91378ae5ce266a4ed8057250a7cb98cd6f446132369ced655636675e919f7f79e5e22c550da5df9f725873ac35bfd9071ab552f9a17e804d53c4785e1128bae038fbca1893f9f94ef8df45be65541c9b9beeaa5b9bce0eae4c8914aaaf60bad340254c1c79f8b960b9bec7d0fee991338a1529b04551257141a24920427137ec48bd66f459e7981bad30afae001ab5e938a3379e99ded79544659c26adf3d79b82b2c794739320eb1b5a96b3fc2ba61da1a51f44804202c9a859b27f48f2676bff77b19d38e6578d922cf8ed32627156cc71c2373d8a3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f8) pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2724.430205] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:36:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f180000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) [ 2724.569251] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.571473] EXT4-fs (loop1): group descriptors corrupted! [ 2724.595473] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.597678] EXT4-fs (loop1): group descriptors corrupted! [ 2724.641313] serio: Serial port tty29 [ 2724.642252] FAULT_INJECTION: forcing a failure. [ 2724.642252] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.644725] CPU: 0 PID: 62653 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2724.646122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.647284] serio: Serial port tty25 [ 2724.647790] Call Trace: [ 2724.647819] dump_stack+0x107/0x167 [ 2724.647843] should_fail.cold+0x5/0xa [ 2724.647864] ? create_object.isra.0+0x3a/0xa20 [ 2724.647886] should_failslab+0x5/0x20 [ 2724.647916] kmem_cache_alloc+0x5b/0x310 [ 2724.653111] ? mark_held_locks+0x9e/0xe0 [ 2724.653931] create_object.isra.0+0x3a/0xa20 [ 2724.654823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.655861] kmem_cache_alloc_bulk+0x168/0x320 [ 2724.656795] io_submit_sqes+0x6f76/0x85c0 [ 2724.657663] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.658665] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.659647] ? lock_downgrade+0x6d0/0x6d0 [ 2724.660505] ? find_held_lock+0x2c/0x110 [ 2724.661329] ? io_submit_sqes+0x85c0/0x85c0 [ 2724.662214] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.663190] ? wait_for_completion_io+0x270/0x270 [ 2724.664174] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.665114] ? vfs_write+0x354/0xa70 [ 2724.665871] ? fput_many+0x2f/0x1a0 [ 2724.666605] ? ksys_write+0x1a9/0x260 [ 2724.667375] ? __ia32_sys_read+0xb0/0xb0 [ 2724.668207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.669268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.670319] do_syscall_64+0x33/0x40 [ 2724.671078] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2724.672107] RIP: 0033:0x7f2b12dadb19 [ 2724.672881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.676596] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2724.678133] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2724.679581] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2724.681050] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.682492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.683938] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:36:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f1c0000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2724.753073] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.755330] EXT4-fs (loop1): group descriptors corrupted! [ 2724.773675] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2724.775913] EXT4-fs (loop1): group descriptors corrupted! [ 2725.359429] serio: Serial port tty25 [ 2725.371272] serio: Serial port tty29 10:36:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:36:56 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f0000000380)=""/112, 0x70, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:56 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x8000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:36:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f180000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:56 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) io_uring_enter(r5, 0x8, 0x4e7f, 0x3, &(0x7f0000000040)={[0x4]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 10:36:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f650000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2739.428033] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.429496] EXT4-fs (loop1): group descriptors corrupted! 10:36:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd=r0, 0x100, 0x380000000, 0x8, 0x10, 0x0, {0x1}}, 0xffffffff) [ 2739.467181] serio: Serial port tty25 10:36:56 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) write$binfmt_aout(r1, &(0x7f00000005c0)={{0x108, 0x6, 0x36, 0x30c, 0x2bb, 0x6, 0xda, 0x8}, "ada91378ae5ce266a4ed8057250a7cb98cd6f446132369ced655636675e919f7f79e5e22c550da5df9f725873ac35bfd9071ab552f9a17e804d53c4785e1128bae038fbca1893f9f94ef8df45be65541c9b9beeaa5b9bce0eae4c8914aaaf60bad340254c1c79f8b960b9bec7d0fee991338a1529b04551257141a24920427137ec48bd66f459e7981bad30afae001ab5e938a3379e99ded79544659c26adf3d79b82b2c794739320eb1b5a96b3fc2ba61da1a51f44804202c9a859b27f48f2676bff77b19d38e6578d922cf8ed32627156cc71c2373d8a3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f8) pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2739.472435] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2739.475635] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.476776] EXT4-fs (loop1): group descriptors corrupted! [ 2739.496625] serio: Serial port tty29 10:36:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000300000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2739.518498] FAULT_INJECTION: forcing a failure. [ 2739.518498] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.521214] CPU: 0 PID: 62824 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2739.522599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2739.524243] Call Trace: [ 2739.524805] dump_stack+0x107/0x167 [ 2739.525539] should_fail.cold+0x5/0xa [ 2739.526300] ? create_object.isra.0+0x3a/0xa20 [ 2739.527212] should_failslab+0x5/0x20 [ 2739.527978] kmem_cache_alloc+0x5b/0x310 [ 2739.528807] ? mark_held_locks+0x9e/0xe0 [ 2739.529620] create_object.isra.0+0x3a/0xa20 [ 2739.530487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.531505] kmem_cache_alloc_bulk+0x168/0x320 [ 2739.532446] io_submit_sqes+0x6f76/0x85c0 [ 2739.533315] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2739.534307] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2739.535285] ? lock_downgrade+0x6d0/0x6d0 [ 2739.536168] ? find_held_lock+0x2c/0x110 [ 2739.536994] ? io_submit_sqes+0x85c0/0x85c0 [ 2739.537874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2739.538849] ? wait_for_completion_io+0x270/0x270 [ 2739.539816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2739.540750] ? vfs_write+0x354/0xa70 [ 2739.541497] ? fput_many+0x2f/0x1a0 [ 2739.542223] ? ksys_write+0x1a9/0x260 [ 2739.542979] ? __ia32_sys_read+0xb0/0xb0 [ 2739.543793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2739.544863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2739.545913] do_syscall_64+0x33/0x40 [ 2739.546653] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2739.547670] RIP: 0033:0x7f2b12dadb19 [ 2739.548456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2739.552133] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2739.553648] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2739.555074] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2739.556505] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.557930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2739.559350] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2739.595912] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.598096] EXT4-fs (loop1): group descriptors corrupted! 10:36:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x140) close(0xffffffffffffffff) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 2739.726181] serio: Serial port tty21 10:36:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f800400000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:36:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 10:36:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2739.787262] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.788411] EXT4-fs (loop1): group descriptors corrupted! [ 2739.808246] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.809440] EXT4-fs (loop1): group descriptors corrupted! 10:36:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000500000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2739.855701] FAULT_INJECTION: forcing a failure. [ 2739.855701] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.857038] CPU: 1 PID: 63120 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2739.857785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2739.858679] Call Trace: [ 2739.858972] dump_stack+0x107/0x167 [ 2739.859369] should_fail.cold+0x5/0xa [ 2739.859783] ? create_object.isra.0+0x3a/0xa20 [ 2739.860264] should_failslab+0x5/0x20 [ 2739.860676] kmem_cache_alloc+0x5b/0x310 [ 2739.861123] ? mark_held_locks+0x9e/0xe0 [ 2739.861550] create_object.isra.0+0x3a/0xa20 [ 2739.862021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2739.862570] kmem_cache_alloc_bulk+0x168/0x320 [ 2739.863059] io_submit_sqes+0x6f76/0x85c0 [ 2739.863514] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2739.864044] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2739.864567] ? lock_downgrade+0x6d0/0x6d0 [ 2739.865009] ? find_held_lock+0x2c/0x110 [ 2739.865455] ? io_submit_sqes+0x85c0/0x85c0 [ 2739.865924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2739.866439] ? wait_for_completion_io+0x270/0x270 [ 2739.866952] ? rcu_read_lock_any_held+0x75/0xa0 [ 2739.867444] ? vfs_write+0x354/0xa70 [ 2739.867838] ? fput_many+0x2f/0x1a0 [ 2739.868225] ? ksys_write+0x1a9/0x260 [ 2739.868662] ? __ia32_sys_read+0xb0/0xb0 [ 2739.869092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2739.869658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2739.870210] do_syscall_64+0x33/0x40 [ 2739.870612] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2739.871158] RIP: 0033:0x7f2b12dadb19 [ 2739.871555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2739.873543] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2739.874357] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2739.875125] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2739.875883] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.876659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2739.877415] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2739.900910] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2739.903026] EXT4-fs (loop1): group descriptors corrupted! [ 2753.698551] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:37:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file1\x00', 0x164) 10:37:10 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x40000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:10 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x100000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 10:37:10 executing program 3: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20006040) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc5c4, 0x2d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:37:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000600000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:37:10 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x185c, &(0x7f0000000380)={0x0, 0x45ae, 0x10, 0x2, 0x8b, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2753.760969] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2753.763478] EXT4-fs (loop1): group descriptors corrupted! [ 2753.800853] serio: Serial port tty29 [ 2753.812344] serio: Serial port tty21 [ 2753.829571] FAULT_INJECTION: forcing a failure. [ 2753.829571] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.832303] CPU: 0 PID: 63281 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2753.833774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.835519] Call Trace: [ 2753.836092] dump_stack+0x107/0x167 [ 2753.836875] should_fail.cold+0x5/0xa [ 2753.837682] ? create_object.isra.0+0x3a/0xa20 [ 2753.838648] should_failslab+0x5/0x20 [ 2753.839456] kmem_cache_alloc+0x5b/0x310 [ 2753.840323] ? mark_held_locks+0x9e/0xe0 [ 2753.841247] create_object.isra.0+0x3a/0xa20 [ 2753.842268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.843456] kmem_cache_alloc_bulk+0x168/0x320 [ 2753.844536] io_submit_sqes+0x6f76/0x85c0 [ 2753.845549] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2753.846712] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2753.847834] ? lock_downgrade+0x6d0/0x6d0 [ 2753.848807] ? find_held_lock+0x2c/0x110 [ 2753.849761] ? io_submit_sqes+0x85c0/0x85c0 [ 2753.850780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2753.851923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.853155] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2753.854400] ? trace_hardirqs_on+0x5b/0x180 [ 2753.855397] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2753.856674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.857887] do_syscall_64+0x33/0x40 [ 2753.858757] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2753.859949] RIP: 0033:0x7f2b12dadb19 [ 2753.860838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.865101] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2753.866872] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2753.868536] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2753.870181] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.871827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2753.873499] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:37:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xce042, 0x140) clone3(&(0x7f0000000080)={0x1119800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2753.908434] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2753.910732] EXT4-fs (loop1): group descriptors corrupted! [ 2753.974190] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:37:11 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2754.056709] serio: Serial port tty25 10:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000700000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:11 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) [ 2754.128198] FAULT_INJECTION: forcing a failure. [ 2754.128198] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.131129] CPU: 1 PID: 63536 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2754.132811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.134804] Call Trace: [ 2754.135443] dump_stack+0x107/0x167 [ 2754.136194] should_fail.cold+0x5/0xa [ 2754.137114] should_failslab+0x5/0x20 [ 2754.137887] kmem_cache_alloc_bulk+0x4b/0x320 [ 2754.138800] io_submit_sqes+0x6f76/0x85c0 [ 2754.139676] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2754.140717] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2754.141704] ? lock_downgrade+0x6d0/0x6d0 [ 2754.142540] ? find_held_lock+0x2c/0x110 [ 2754.143379] ? io_submit_sqes+0x85c0/0x85c0 [ 2754.144247] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2754.145234] ? wait_for_completion_io+0x270/0x270 [ 2754.146205] ? rcu_read_lock_any_held+0x75/0xa0 [ 2754.147131] ? vfs_write+0x354/0xa70 [ 2754.147890] ? fput_many+0x2f/0x1a0 [ 2754.148647] ? ksys_write+0x1a9/0x260 [ 2754.149408] ? __ia32_sys_read+0xb0/0xb0 [ 2754.150236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2754.151279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.152340] do_syscall_64+0x33/0x40 [ 2754.153109] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2754.154131] RIP: 0033:0x7f2b12dadb19 [ 2754.154891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.158553] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2754.160091] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2754.161527] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2754.162945] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.164361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2754.165798] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2754.190791] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2754.193085] EXT4-fs (loop1): group descriptors corrupted! 10:37:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x90000, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x40000, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) signalfd4(r1, &(0x7f0000000180)={[0x7]}, 0x8, 0x80000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2, 0x10) unlinkat(r2, &(0x7f0000000200)='./file1\x00', 0x0) [ 2754.247172] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2754.249557] EXT4-fs (loop1): group descriptors corrupted! 10:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000b00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2754.404470] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2754.406661] EXT4-fs (loop1): group descriptors corrupted! [ 2754.445316] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2754.447541] EXT4-fs (loop1): group descriptors corrupted! 10:37:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 10:37:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/135, 0x87}], 0x2, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7f, 0x4, 0xf9, 0xe, 0x0, 0x74, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffe00000, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}, 0x40, 0x0, 0x10001, 0x8, 0xffffffffffffffe0, 0xdf7, 0x9c, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x4, 0x63, 0x4, 0x0, 0x8, 0xb10, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x82, 0x5, 0xffff0003, 0x9, 0xffffffffffffffff, 0x10000, 0xd, 0x0, 0x42d2fb88, 0x0, 0xff}, r1, 0x2, r3, 0x1) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x1, 0xa8, 0x0, 0x5, 0x0, 0x3, 0x1800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x85, 0x4, 0x6, 0x3, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x77f105ff}, r4, 0xe, 0xffffffffffffffff, 0x9) clone3(&(0x7f0000000080)={0x41848980, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_io_uring_setup(0x7880, &(0x7f0000000580)={0x0, 0x85df, 0x1, 0x3, 0x1a7, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000680)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:37:24 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x200000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:24 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x24008010) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x4de4, &(0x7f0000000380)={0x0, 0x76ee, 0x0, 0x1, 0x2e2, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x26042, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f0000000300)="28af8a95213f6edfe778c02a237b", 0xe, 0x8004045, 0x1}, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x2000}, 0xfffffffd) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r9, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f001800000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:37:24 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x400000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x18, 0x40010, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2767.305260] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.307369] EXT4-fs (loop1): group descriptors corrupted! [ 2767.317261] FAULT_INJECTION: forcing a failure. [ 2767.317261] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.319691] CPU: 0 PID: 63715 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2767.319702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.319709] Call Trace: [ 2767.319736] dump_stack+0x107/0x167 [ 2767.319759] should_fail.cold+0x5/0xa [ 2767.319779] ? create_object.isra.0+0x3a/0xa20 [ 2767.319801] should_failslab+0x5/0x20 [ 2767.319820] kmem_cache_alloc+0x5b/0x310 [ 2767.319843] create_object.isra.0+0x3a/0xa20 [ 2767.319862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2767.319887] kmem_cache_alloc_bulk+0x168/0x320 [ 2767.319912] io_submit_sqes+0x6f76/0x85c0 [ 2767.319948] ? percpu_ref_tryget_many+0x1f/0x2d0 [ 2767.319976] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2767.319994] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2767.320025] ? io_submit_sqes+0x85c0/0x85c0 [ 2767.320045] ? recalibrate_cpu_khz+0x10/0x10 [ 2767.320062] ? ktime_get+0x158/0x1f0 [ 2767.320086] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2767.320104] ? clockevents_program_event+0x131/0x360 [ 2767.320127] ? tick_program_event+0xa8/0x140 [ 2767.320147] ? hrtimer_interrupt+0x771/0x9b0 [ 2767.320181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.320200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.320227] do_syscall_64+0x33/0x40 [ 2767.340596] serio: Serial port tty21 [ 2767.341610] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2767.341623] RIP: 0033:0x7f2b12dadb19 [ 2767.341646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.341665] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2767.349763] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2767.349774] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2767.349786] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.349797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2767.349809] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2767.374642] serio: Serial port tty29 [ 2767.376267] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.376280] EXT4-fs (loop1): group descriptors corrupted! 10:37:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f001c00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2767.442187] serio: Serial port tty25 [ 2767.522374] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.524511] EXT4-fs (loop1): group descriptors corrupted! 10:37:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f002000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:24 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4bfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x19}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = open_tree(r2, &(0x7f0000000000)='./file1\x00', 0x8101) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r5) r6 = fcntl$dupfd(r5, 0x0, r4) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x298, 0x14, 0x100, 0x70bd2d, 0x25dfdbfe, {0x8}, [@generic="87ec8223ff81aa2e36da93ede5eaa7d75d23e991906dfb00079c5064e2cace7177b820833ca6c648b510ebe497f026d237f81259393350376ec3c98f730a3d8d1675b9670d34207422963131750d3a1302", @generic="e12953d7b54522be0f75e83226d14c3098f17eca52419d4e13d0d2f6131e9e567f987c393aabdf1a1e8d8c3ca463a1cc7f2f537a949802f3a346dbcc346d412c339954506d8c40d2082a0b4b17bf224036df21519cdd56550faab5639b09d81a03a7f166de3d10f315d55d2a02b5bf7a94de45d8a2f5183b97de572b3e9f080bcefc51bd379ca9516ac2", @generic="a2bdcf09ceb803f6962d86e728ad06d7a34e5b1d14695516aebc7ebc627ecb99371c3c04205ebfabce09fe999b38bef2a0359ad2c848", @nested={0x16d, 0x83, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @u32=0x9}, @typed={0x8d, 0x4e, 0x0, 0x0, @binary="a93b40e2387891e8d4d681c504e465689e109b0149a2f04275bc0ba5f0dcebd55a4d2a7d023ea56910a10c1a8450917606a2e8e07356145c3513348ea3aa6e3b65ac6246898c87eb1ddd9f00597947a1e0db4d4b242e99c4a623dfa3413a5cf8a022a96f5faf8b8bd8ad7166c31fa59fdc48f10500a7bba7f788909ba59bc4de5bf5eae1e0aba53bda"}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0x6}, @generic="98370ed5a2edde97e4615493f64844fa4623c6a654b87276b297fc5299309c6165e99d68f2f45789dcad71eba4349b6bc9e1adcd15553645d6461f63cf991e9fe465bd87391f774b1cf1def73b3c9b74645047aa896d98a8f9fa1f1ed5801cb442dc52342fffdabe37876c47983ee62c8035ffe5b580b015d4a2e60786282240986123eecbc6efc41feb417f83c9d0bf022487a1ebd036d60ba214b6d4b47441d5145f9994d95103fc5ce99f8f8e052c8b7e9a3f9ce5c01f", @generic="c42308baab1d6963c0de95a7f8"]}]}, 0x298}}, 0x80) statfs(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)=""/179) [ 2767.647369] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:37:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) [ 2767.708533] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.710656] EXT4-fs (loop1): group descriptors corrupted! 10:37:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x6, 0x2, 0x1, 0x0, 0x0, [{{r0}, 0x6}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2767.726380] FAULT_INJECTION: forcing a failure. [ 2767.726380] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.729105] CPU: 1 PID: 63950 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2767.730513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.732199] Call Trace: [ 2767.732750] dump_stack+0x107/0x167 [ 2767.733498] should_fail.cold+0x5/0xa [ 2767.734275] ? create_object.isra.0+0x3a/0xa20 [ 2767.735199] ? create_object.isra.0+0x3a/0xa20 [ 2767.736137] should_failslab+0x5/0x20 [ 2767.736929] kmem_cache_alloc+0x5b/0x310 [ 2767.737764] ? mark_held_locks+0x9e/0xe0 [ 2767.738601] create_object.isra.0+0x3a/0xa20 [ 2767.739499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2767.740539] kmem_cache_alloc_bulk+0x168/0x320 [ 2767.741490] io_submit_sqes+0x6f76/0x85c0 [ 2767.742366] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2767.743389] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2767.744372] ? lock_downgrade+0x6d0/0x6d0 [ 2767.745221] ? find_held_lock+0x2c/0x110 [ 2767.746058] ? io_submit_sqes+0x85c0/0x85c0 [ 2767.746952] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2767.747951] ? wait_for_completion_io+0x270/0x270 [ 2767.748956] ? rcu_read_lock_any_held+0x75/0xa0 [ 2767.749904] ? vfs_write+0x354/0xa70 [ 2767.750670] ? fput_many+0x2f/0x1a0 [ 2767.751412] ? ksys_write+0x1a9/0x260 [ 2767.752189] ? __ia32_sys_read+0xb0/0xb0 [ 2767.753033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.754104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.755163] do_syscall_64+0x33/0x40 [ 2767.755932] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2767.756995] RIP: 0033:0x7f2b12dadb19 [ 2767.757765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.761521] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2767.763084] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2767.764556] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2767.766060] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.767534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2767.769017] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2767.801042] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.803157] EXT4-fs (loop1): group descriptors corrupted! 10:37:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f003f00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x10c0900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x1, 0x2) 10:37:25 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) [ 2767.940391] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2767.996394] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2767.998570] EXT4-fs (loop1): group descriptors corrupted! [ 2768.033197] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2768.035371] EXT4-fs (loop1): group descriptors corrupted! 10:37:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder-control\x00', 0x800, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sctp\x00') syz_io_uring_setup(0x7569, &(0x7f0000000380)={0x0, 0x83dc, 0x1, 0x0, 0x60, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x101b00, 0x12345, {0x0, r10}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2768.065347] FAULT_INJECTION: forcing a failure. [ 2768.065347] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.067616] CPU: 0 PID: 64166 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2768.068861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2768.070290] Call Trace: [ 2768.070760] dump_stack+0x107/0x167 [ 2768.071392] should_fail.cold+0x5/0xa [ 2768.072067] ? create_object.isra.0+0x3a/0xa20 [ 2768.072875] ? create_object.isra.0+0x3a/0xa20 [ 2768.073722] should_failslab+0x5/0x20 [ 2768.074380] kmem_cache_alloc+0x5b/0x310 [ 2768.075097] ? mark_held_locks+0x9e/0xe0 [ 2768.075811] create_object.isra.0+0x3a/0xa20 [ 2768.076603] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2768.077551] kmem_cache_alloc_bulk+0x168/0x320 [ 2768.078378] io_submit_sqes+0x6f76/0x85c0 [ 2768.079183] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2768.080079] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2768.080972] ? lock_downgrade+0x6d0/0x6d0 [ 2768.081709] ? find_held_lock+0x2c/0x110 [ 2768.082467] ? io_submit_sqes+0x85c0/0x85c0 [ 2768.083242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2768.084128] ? wait_for_completion_io+0x270/0x270 [ 2768.084996] ? rcu_read_lock_any_held+0x75/0xa0 [ 2768.085827] ? vfs_write+0x354/0xa70 [ 2768.086498] ? fput_many+0x2f/0x1a0 [ 2768.087134] ? ksys_write+0x1a9/0x260 [ 2768.087807] ? __ia32_sys_read+0xb0/0xb0 [ 2768.088523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2768.089448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2768.090361] do_syscall_64+0x33/0x40 [ 2768.091018] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2768.091928] RIP: 0033:0x7f2b12dadb19 [ 2768.092581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2768.095829] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2768.097198] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2768.098443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2768.099687] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.100969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2768.102221] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:37:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 10:37:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f006500000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1000}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, 0x0}, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:37:41 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)) 10:37:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:37:41 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:41 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x300000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:41 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/115, 0x73}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000140)=""/29, 0x1d}], 0x5}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000880)=""/168, 0xa8}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/27, 0x1b}], 0x7, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000000500)=[{&(0x7f0000001cc0)=""/106, 0x6a}], 0x1, &(0x7f0000002600)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000400001c000000000000000100bb3af4000001", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000ece30a220cf20c2b5124fed793eaf9284782e4e88c0e5c500fe79d8bffe853998cf0691c8be9000000000000000000000000006f1c597e77188bb8c48220dd971ebfcc763cb8ead488967ccbd5d50c2b4bb9e2e7ac00e8391f3d25c7561cd523ff1e9d075c96c9370613f2dc4aed9c11b5f1ba70cdb3674a334e5f9523d7af3c05c02e8256c91feddfbb30806321a55efb37c1da75f43b2d3f2bead08f2c549d33f7fbc456d1151e045aba7c4dafe7"], 0xa8}}, {{&(0x7f0000001e00), 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001e80)=""/189, 0xbd}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/197, 0xc5}], 0x3}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000002340)=[{&(0x7f0000002180)=""/4, 0x4}, {&(0x7f00000021c0)=""/164, 0xa4}, {&(0x7f0000002280)=""/158, 0x9e}], 0x3, &(0x7f0000002380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x5, 0x2105, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x38d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x9, 0x8, 0x8, 0x5, 0x0, 0x2cc8800000, 0x6, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000002540)}, 0x230, 0xffffffff, 0x583, 0x3, 0x6, 0x9, 0x0, 0x0, 0x57a, 0x0, 0x71}, 0x0, 0x7, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r7, r6, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000003540)={0x0, r6, "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", "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"}) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r8, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2783.957471] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2783.967639] FAULT_INJECTION: forcing a failure. [ 2783.967639] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.970417] CPU: 0 PID: 64372 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2783.971891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.973579] Call Trace: [ 2783.974119] dump_stack+0x107/0x167 [ 2783.974852] should_fail.cold+0x5/0xa [ 2783.975602] ? create_object.isra.0+0x3a/0xa20 [ 2783.976524] should_failslab+0x5/0x20 [ 2783.977334] kmem_cache_alloc+0x5b/0x310 [ 2783.978199] ? mark_held_locks+0x9e/0xe0 [ 2783.979014] create_object.isra.0+0x3a/0xa20 [ 2783.979891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.980926] kmem_cache_alloc_bulk+0x168/0x320 [ 2783.981873] io_submit_sqes+0x6f76/0x85c0 [ 2783.982750] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2783.983743] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2783.984732] ? lock_downgrade+0x6d0/0x6d0 [ 2783.985583] ? find_held_lock+0x2c/0x110 [ 2783.986436] ? io_submit_sqes+0x85c0/0x85c0 [ 2783.987329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2783.988319] ? wait_for_completion_io+0x270/0x270 [ 2783.989313] ? rcu_read_lock_any_held+0x75/0xa0 [ 2783.990257] ? vfs_write+0x354/0xa70 [ 2783.991015] ? fput_many+0x2f/0x1a0 [ 2783.991758] ? ksys_write+0x1a9/0x260 [ 2783.992530] ? __ia32_sys_read+0xb0/0xb0 [ 2783.993385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.994449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.995501] do_syscall_64+0x33/0x40 [ 2783.996262] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2783.997312] RIP: 0033:0x7f2b12dadb19 [ 2783.998071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.001810] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2784.003364] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2784.004811] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2784.006282] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.007733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.009203] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2784.053340] serio: Serial port tty25 [ 2784.061867] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.064075] EXT4-fs (loop1): group descriptors corrupted! [ 2784.100376] serio: Serial port tty29 [ 2784.103287] serio: Serial port tty21 10:37:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x655006746696b844}, 0x0, {0x0, r6}}, 0x6) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x80, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="afadebdfec0f54a7614668a56ade7aa9472467e142ee49f9129f83b740542b457e42ecf618cdace1d46619f937d31b2288854c657dbdb5df6059cb61e8585df6a2191271d4fb175715bb62f03ce0ebc430349d4de2f766af0b346d09f3698f808fa7fbd0", 0x64, 0x3}, {&(0x7f00000000c0)="79790f07a37e868aed7e9c5d9fdc71657135bfae406274a8a5a68eecd473af018326c6baabbd12ca600a3b7a0ea201cb17dfa5c53123f42a8ab58ec520927741", 0x40, 0x66}], 0x2200010, &(0x7f0000000440)={[{@oldalloc}, {@sysvgroups}, {@minixdf}, {@noacl}, {@noauto_da_alloc}, {@nouser_xattr}, {@grpquota}], [{@smackfshat={'smackfshat', 0x3d, '^+$*:'}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2784.126338] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.128498] EXT4-fs (loop1): group descriptors corrupted! 10:37:41 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file1\x00'}) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000380)={'dummy0\x00', @ifru_names}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@srh={0x84, 0x10, 0x4, 0x8, 0x0, 0x0, 0x7, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast2, @empty]}, 0x88) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x419c0900, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0xa2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) r3 = fcntl$dupfd(r2, 0x406, r2) accept4$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c, 0x80000) [ 2784.166308] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2784.214603] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:37:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f048000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) [ 2784.334751] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.336940] EXT4-fs (loop1): group descriptors corrupted! [ 2784.384565] FAULT_INJECTION: forcing a failure. [ 2784.384565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2784.387349] CPU: 0 PID: 64702 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2784.388766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.390465] Call Trace: [ 2784.391006] dump_stack+0x107/0x167 [ 2784.391750] should_fail.cold+0x5/0xa [ 2784.392528] __alloc_pages_nodemask+0x182/0x600 [ 2784.393489] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2784.394736] alloc_pages_current+0x187/0x280 [ 2784.395636] allocate_slab+0x26f/0x380 [ 2784.396436] ___slab_alloc+0x470/0x700 [ 2784.397262] ? io_submit_sqes+0x6f76/0x85c0 [ 2784.398160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.399233] ? trace_hardirqs_on+0x5b/0x180 [ 2784.400124] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2784.401093] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2784.402030] io_submit_sqes+0x6f76/0x85c0 [ 2784.402900] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2784.403919] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2784.404901] ? lock_downgrade+0x6d0/0x6d0 [ 2784.405754] ? find_held_lock+0x2c/0x110 [ 2784.406586] ? io_submit_sqes+0x85c0/0x85c0 [ 2784.407474] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2784.408450] ? wait_for_completion_io+0x270/0x270 [ 2784.409453] ? rcu_read_lock_any_held+0x75/0xa0 [ 2784.410401] ? vfs_write+0x354/0xa70 [ 2784.411158] ? fput_many+0x2f/0x1a0 [ 2784.411890] ? ksys_write+0x1a9/0x260 [ 2784.412658] ? __ia32_sys_read+0xb0/0xb0 [ 2784.413501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.414559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.415612] do_syscall_64+0x33/0x40 [ 2784.416371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2784.417418] RIP: 0033:0x7f2b12dadb19 [ 2784.418196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.421905] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2784.423461] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2784.424902] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2784.426357] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.427798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.429269] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2784.441998] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.444140] EXT4-fs (loop1): group descriptors corrupted! 10:37:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffdef00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, &(0x7f00000001c0)={0x11, 0x2, 0x20}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = dup2(r0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r4 = openat(0xffffffffffffffff, 0x0, 0x2d3043, 0x84) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r4, 0x2) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r6, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2f8, 0x26, 0x10, 0x70bd2c, 0x25dfdbff, {0xb}, [@nested={0x1ce, 0x42, 0x0, 0x1, [@typed={0x101, 0x20, 0x0, 0x0, @binary="8ef2e090ff18ebabc0dea9b404fc212fd340b17571c7e1cf0319c361cf1567e368bacdf5bc2c4db9dcc9413af51c0a6af67c29b5fe3f4157201d2f326f7a8349433bece0a1a3ebbab9f0a280b97cb294ccb74f61c58375d1e911af10b26402a1c889d1aef2f2b20aa191dbce072cd995c67ceb03345a9d50cb61705e00366074036633676d611a6f5f03ba997942bacf1f9c7b469586ce0acef93da936eabe61f2369b851dc6843cd71561e4233c0837d139c2576ca4760de1d392e6fc784b6f9098a569aa33cfbe1c0ced8c38c360c1b99a385fe1c406add9e11596335be5ef8ec614728b1d84a21a315965c6275c8fca9947fa2853d3b3dd39b31787"}, @generic="f0ecd7cefffe9bcd79fb77c05bd1a2a5d9f903cf640d5389056699a7ea7f117bdf1ba0f2fb950ae1ed71429d8b7d181469875e9f6719fe4bff5bb9028049badf32dcfe99d46481ec4f08dfc2d287a05edb7948cebb1dc4e9f5746f9dfa262c85646fffcc9137552ded376383a275ad508f80e21e240d1f662cefb2570be74e4ab7bb01644f16a24846f40397195e89cd293a9ccc6ba0a157bbc326832aa330f53d654690325e0d6d95edf2118ec135e7632530c2723de63376b629e0d211", @typed={0x8, 0x93, 0x0, 0x0, @uid=r6}]}, @nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="91361135fc60529a4291025fc7d697ff24916917397d41c8866689c919bb28f86fd10bdf73d66b1f169277ef7d9a99728b6d14942683488b888060fdff5b78526d8d5e95f72444585050a6fce1eee97b8517a0708eef03208c1a2fc387be50feb746a91dc43574e00853aee1b318e46d9bacf2c608a7b87f596cd4e7c59c9fb5e124439e67c7d6e8a51e1eca81233492194bb14b44cf2d1b7b1eb97de44bc07787feca99caff6880a1479020c6b5da1bf232fdae96ea9b82f2cc0bdc47d512d25370932ff70dc350c8b640bdbbf22fcdeb", @generic="56bd91f5b56e8b0f75b93e830c66eab8ca38a2668e1c8434bc48aac8463b8f88eaefef9fc5d184207e73af637d11ef0ce9a817971d1c"]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4048085}, 0x4010) [ 2784.562654] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2784.626162] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.628353] EXT4-fs (loop1): group descriptors corrupted! [ 2784.659657] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2784.661859] EXT4-fs (loop1): group descriptors corrupted! 10:37:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100), 0x8008001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:37:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) [ 2784.811597] FAULT_INJECTION: forcing a failure. [ 2784.811597] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.815571] CPU: 1 PID: 64954 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2784.817031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.818751] Call Trace: [ 2784.819298] dump_stack+0x107/0x167 [ 2784.820037] should_fail.cold+0x5/0xa [ 2784.820824] ? create_object.isra.0+0x3a/0xa20 [ 2784.821752] should_failslab+0x5/0x20 [ 2784.822550] kmem_cache_alloc+0x5b/0x310 [ 2784.823394] ? mark_held_locks+0x9e/0xe0 [ 2784.824282] create_object.isra.0+0x3a/0xa20 [ 2784.825217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2784.826272] kmem_cache_alloc_bulk+0x168/0x320 [ 2784.827212] io_submit_sqes+0x6f76/0x85c0 [ 2784.828093] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2784.829137] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2784.830145] ? lock_downgrade+0x6d0/0x6d0 [ 2784.830992] ? find_held_lock+0x2c/0x110 [ 2784.831825] ? io_submit_sqes+0x85c0/0x85c0 [ 2784.832734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2784.833754] ? wait_for_completion_io+0x270/0x270 [ 2784.834764] ? rcu_read_lock_any_held+0x75/0xa0 [ 2784.835713] ? vfs_write+0x354/0xa70 [ 2784.836488] ? fput_many+0x2f/0x1a0 [ 2784.837236] ? ksys_write+0x1a9/0x260 [ 2784.838029] ? __ia32_sys_read+0xb0/0xb0 [ 2784.838855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.839945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.841006] do_syscall_64+0x33/0x40 [ 2784.841761] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2784.842792] RIP: 0033:0x7f2b12dadb19 [ 2784.843552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.847262] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2784.848813] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2784.850249] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2784.851671] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.853107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.854536] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:37:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000feffd00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 10:37:54 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:37:54 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x82104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x4200, 0x0, 0x0, 0x9, 0x2, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x3c81a5f5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000240)=@v1={0x1000000, [{0x7, 0x81}]}, 0xc, 0x1) pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0xec, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x1, 0x1, 0x1, {0x0, r6}}, 0x80000001) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8, 0xb17, {0x0, r5}, 0x3ff, 0xf, 0x0, {0x0, r6, r3}}, 0x7) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x6, 0x0, r2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, &(0x7f0000000040)="d1dc2e95cc9c57426c28ce788b25229886db8b43c737cc74ad9f4088e1cc1aec1172853d892327bb84179e3228a0e500", 0x30}]) 10:37:54 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x9546, 0x20, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:37:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, &(0x7f00000001c0)={0x11, 0x2, 0x20}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = dup2(r0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r4 = openat(0xffffffffffffffff, 0x0, 0x2d3043, 0x84) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r4, 0x2) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r6, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2f8, 0x26, 0x10, 0x70bd2c, 0x25dfdbff, {0xb}, [@nested={0x1ce, 0x42, 0x0, 0x1, [@typed={0x101, 0x20, 0x0, 0x0, @binary="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"}, @generic="f0ecd7cefffe9bcd79fb77c05bd1a2a5d9f903cf640d5389056699a7ea7f117bdf1ba0f2fb950ae1ed71429d8b7d181469875e9f6719fe4bff5bb9028049badf32dcfe99d46481ec4f08dfc2d287a05edb7948cebb1dc4e9f5746f9dfa262c85646fffcc9137552ded376383a275ad508f80e21e240d1f662cefb2570be74e4ab7bb01644f16a24846f40397195e89cd293a9ccc6ba0a157bbc326832aa330f53d654690325e0d6d95edf2118ec135e7632530c2723de63376b629e0d211", @typed={0x8, 0x93, 0x0, 0x0, @uid=r6}]}, @nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="91361135fc60529a4291025fc7d697ff24916917397d41c8866689c919bb28f86fd10bdf73d66b1f169277ef7d9a99728b6d14942683488b888060fdff5b78526d8d5e95f72444585050a6fce1eee97b8517a0708eef03208c1a2fc387be50feb746a91dc43574e00853aee1b318e46d9bacf2c608a7b87f596cd4e7c59c9fb5e124439e67c7d6e8a51e1eca81233492194bb14b44cf2d1b7b1eb97de44bc07787feca99caff6880a1479020c6b5da1bf232fdae96ea9b82f2cc0bdc47d512d25370932ff70dc350c8b640bdbbf22fcdeb", @generic="56bd91f5b56e8b0f75b93e830c66eab8ca38a2668e1c8434bc48aac8463b8f88eaefef9fc5d184207e73af637d11ef0ce9a817971d1c"]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4048085}, 0x4010) 10:37:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB='huge=advise,huge=advise,mode=00000000000000000000000,mpol=local=static:2,huge=advise,huge=advise,mode=00000000000000000000007,huge=never,mpol=default=static:72,smackfstransmute=\x00,uid<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=user_u,tcontext=user_u,funcGFIRMWARE_CHECK,fsmagic=0x0000000000000005,\x00']) openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = inotify_init() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) openat(r5, &(0x7f0000000140)='./file1\x00', 0x301000, 0x185) 10:37:54 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x400000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2797.580545] tmpfs: Unsupported parameter 'huge' [ 2797.582487] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2797.598380] serio: Serial port tty29 [ 2797.599637] FAULT_INJECTION: forcing a failure. [ 2797.599637] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.602456] CPU: 1 PID: 65037 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2797.603962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.605836] Call Trace: [ 2797.606385] dump_stack+0x107/0x167 [ 2797.607243] should_fail.cold+0x5/0xa [ 2797.608142] ? create_object.isra.0+0x3a/0xa20 [ 2797.609137] should_failslab+0x5/0x20 [ 2797.610023] kmem_cache_alloc+0x5b/0x310 [ 2797.610954] ? mark_held_locks+0x9e/0xe0 [ 2797.611841] create_object.isra.0+0x3a/0xa20 [ 2797.612789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2797.613883] kmem_cache_alloc_bulk+0x168/0x320 [ 2797.614874] io_submit_sqes+0x6f76/0x85c0 [ 2797.615757] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2797.616832] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2797.617894] ? lock_downgrade+0x6d0/0x6d0 [ 2797.618829] ? find_held_lock+0x2c/0x110 [ 2797.619728] ? io_submit_sqes+0x85c0/0x85c0 [ 2797.620736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2797.621719] ? wait_for_completion_io+0x270/0x270 [ 2797.622693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2797.623624] ? vfs_write+0x354/0xa70 [ 2797.624374] ? fput_many+0x2f/0x1a0 [ 2797.625128] ? ksys_write+0x1a9/0x260 [ 2797.625898] ? __ia32_sys_read+0xb0/0xb0 [ 2797.626726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.627780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.628825] do_syscall_64+0x33/0x40 [ 2797.629265] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2797.629594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2797.632506] RIP: 0033:0x7f2b12dadb19 [ 2797.633266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.636952] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2797.638495] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2797.639931] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2797.641369] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.642798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2797.644233] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2797.650506] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2797.652608] EXT4-fs (loop1): group descriptors corrupted! [ 2797.704619] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2797.706926] EXT4-fs (loop1): group descriptors corrupted! 10:37:54 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x200000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:37:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000008000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x28) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000140)={{r0}, "500e3e4fe7c7d0a9e7367312d0d4b3a3ead4981fbed41f8d4706375c9b78257ca51dc42018de19fec94e2ed1295694f2a6d6a9a8e177697a0847b3bef691ee095607bb133fcc83f031e69b1bccd6bbaf6e13bec6a1940e7d5b7e44fbb113f6cc30b8a666cbac4a06fdae3aaa3ee09cb91adf7dc0151f73530610b2997f8bc8039eb5afa4d02f3cfc00e126cb85e798fb37221055a6668194d123a82f8dcc01253e5468a391675dbc1ea2812b89fe76e9a4ed9aff120b545d82dbc8a60e35ae4dd7ed8a9c7ed9615e9d95e1dc3753532f8426a22fe00953b064dc758cdc0ce26149bf75366639ec68c0f8bd935d3253f18b7a7975d54c8f030b52093763adc8bbef65241929b103daf7a58fea9a8fa7b402ab236f66b8d8ef677cff1b984f14ff34015d9da442c7ae4d901727d20300f3435603d5fb0f073f33a918f3b6239e866f57408be3730fdfc4584e65799f911933804b6cf972fd7db3bd505c4a8f3e3537d059988954c28828c1f7a08fd167c57946f40a7e42353fd0d5cd84be8c4aa64cfd278b06e4b4d1a9a3cb803b1b725c23b5324fb85f5a4c18902591df629edf4acefc678302c3fbbc98f38e8f71640838678fc93e04bad6d1ff910ab9b8c74911825ba9dfdd7e25df1bfbd3e2c3aa99c6df1690ec72f43c004c5685765d952b33802d5ff87076d99eee9f08d8b9828c8861697ffffb44073c48746c3a17aa8af4fa20492e2ce2542e1fa6e687fecc57ec6f12c67d5b4c2b8f74ee28bb00bfb09d31a92e9ba7188876974778562dc7f68f1d82d8afe7573bdfc010c7447cc6543fe0e7c56b1e07ce1b5604d0aba7c41b1fb542fb2a0220718359e2ee73920ae12871d03234ca1be5b426cf2131fd332809d0ef186ca9e20a8e5f1d9318b44d0ce23d670ce99741ff8dffa6f6db527ef07cf5a508036f5ebd195c62c2122925c863dfc8721b3c508c33b4abf2689a120df309959efc92801e790194a4a2863e94c1dfcd5b75890ab7850caacfeb5672e2288e4370c95330853692b47b5eaac6484f7684e6bf286ff41d2718db6d0f59cd4d43d6d3c67a0447fd461d2cd4d9dfc1e0f104fae65db862aabd74fd6bb1014e788efa33558389652ff6c6b51c364ca445760c90a0dfb9eac07050257b0e3043d63f608a38ee587c65ec242385388f11b60554e8119b4f18349c536df9976e51cfb855bc11fb211321248e687d7362b38043ce6cad2edd171713437d7d1a470c8d4be136eb0cb98362b341677046fd6729666d945b33582f9aa587f09719a79062e613621cf0d775a8a5f35d1a7ad9ee47bd81897b134f221568c1db61a3435848af4bc2e519ba03498311f581a6cf4add4da11ef2be1aa8df71a12376094bb7dbb5ea4c9dabc8db8d5291685c35fcbee04f1a4a557d25d9280113f097d006e9fd81c53d461975878543b9f73e0beea39c4aaa59d68975c1dff0d4ad9e39e1172970ba43ffa13389623bc82eb633fa12d1d338da10d4a869802bc9a878c6d012845b06f803941bba3616f6c783113a63c4049f58faaec8f66b04f4fcdd07c517721f8454e456a38c60a8088e85a422624cf00283e8f44f5032c80b15664aca4e23930a4cc7f9596c8c053bff7e3ccbe53d37797cdd04942f1aa92c9895383d8d84ab3f1c7bb36f37efaa6dcb6d5e6ee7704aab7f8023bef2cbac769e04de95f9a38ab8ac8b9c84d27bf856356e6b856bca18e27f8c01ff6e2a19a542f3b4ced81acd650dc8d5c8a908fd05bad7c3162ef543c1d3e3dfaa55db33496cbbdb2579b385581db9b33a3f368ac3251abc996ac9c6f4e17996a6a83c303521915118e2ad31e8a6ec57a7efc273957633dccea3f6f6cb30cc0a59b8950c0bb385281523a11544022d4159defc35a727523f0e1f880842c621728938e24ff263d6dddf87a69ad865d3fff5c53d8830c9d5bcc9a508771a6bb19cb84d49d5a6744086f39af147235707725a7f47f97d274bb2ef10c52f23ab2b81e41adddc2bb70eae80a1259ec1b16b3581f91c3fccb1d02449f392d89451b8cbcba3d343186763dbb03da0c606bd7aa237df175915f4116791163d72f666da68b39be6bf76d450b57813b6ab4fcd8c468461216c811589f01cf83f8861c0412104624e8fee9cd37f54791508a5dec3bb5452fbce9063e795c96d36350fd33109d650a7f86624c95d14e2191488d9fb349aef2c4d26b7c8619bf62f4e50db6506ff876164970b807f94aa58e04269db95e6e60b267568e882e6f672bb5f997f521b82df0f263ef859290ba04e4588e097fa0e7b9b46316fc5817bd251f4afef48c0d5b61136ce03b7d3f216c3bb190ce5261a8911035da73b99c56e2a21342cafdcdbab10a2f6ed1cc5746bcc282740463b1a30d3a3aec9481244a5c4f7bc60342cecfd103baab9963bbc12172c78a75b582b4cdcd29d0b853efc2ea34aefb1caf26aa7226f7b3fdcb5b5a947bebd5f33d53fa121bff4101b9ab64a30282dd220769f0b4d04164ec67ea0a47fa5dd73b158f40cbc5b5bfa4167c4c3c087250282ae1fff726c95427d8e6df7efe19a6fb5db5249fe2dd5904fc8dffafb9414dafaa2c409d1901a6c963ab5c4945c19b02daf0884671e6ece97ae89ed1ab3264885eac11a549330430efb9a7bcad9194dba92510da33440fa91c3f2d19530bf1e863f363fb0bdd88288a72eacbaf8e106973883494b886aaad15acae9e1f39824669dbc2795c58985bd5e3adbb22c4e75858dd8105238f535fc3b4e7cad934999ca7e1e6923377a8ba8d0b9df7e2acabb55f969752dda1066823c44332c82de1560a8a101f3511323ff202f4352fb51620b493963254abb2e2eec7be4cdf3e93f444eb21cccd9cda290bcbf550ce19462531a92ded8ffd53a97ba107938d05da93f542c382424be37aa7e078ac97d02c73962c57915667dfcd493cbdfed55bb032351c112bfd27d8b09627f8b4ac9215a5e5cc3318ae7190b888f793e26559e3ab48ffe977303f1ee2210c39292f877e29cd8e68fabb77bc50c7c31cf8a9e0a22240b394973c8fd9e0f73dd075a6e2cf3b8766c84666785391e7ed77dfd955de7061e99e7e05609e93f7bb3ab2c4bcf1d0a4ca8e39cfdae0b6cb3d1f63b4baca190076de73790314e5e08dc9dc23674e094d8f9b9b055a6400d23a20ad42d19137c2aaf7babfcddc839755208ee468fc33b7a32b30550f84ebcc58e5a648627003ee6f54a061b37d7f3a258480cf5332f7b5e7f86c07aa216b5d562844cc941c88f3f18a31982b86b7654cc27a6b178b8016aa1080ac2304475a7adaad4b82fccbaa309e7e990a55ab2893d139eabb5efd863f2e3d1b3e29926bfadafb3779b41d1fe681135a135e0892934f9e303c94f92a99cbbf3cefe3255e7d3841ab8faf990bcd858fb40f9f8547a7420b1250dc0fe7654387749584d67ef6ed89b6e4827967d7f3e1480d31c73d4436cd916458a970ea301054e25a097c968cd5e53935508cb67fd76cd40bc06072f9bd055996733e215101c788bc31250da71cd8254fa20ca18aa7688d72ee83bd05d03b533b04cff73fb0415a7ae23045e34fc776af661f7a2c7788ed6b6adf7a04086b3fbac8e17f74783fb513412421f06db568efdae99c8a2bd3b064ae76eb5e0ae178497c1f8b4467d2ae83ba7bb87f9aa85c6d861a36c945a1ee52f64a5ebffa5261a3a15f4072f32a4bfd3462d6d0b0687eaf93d8a7fbebc9e567356e514b99147daee5c63dd40110bdbcd9a99a26dca40ad08a4bfe1c1dfb105a9b15c729d011c80335b5635edbe793cce8b1f5a62756d283111c088130af5d461afe67ab9a1bcc9a7835aae0a252d8b5cabed1269c17750fa1a96a61604f63c48b15b5bfac5d635302eee5a12b4f2934d3938d7ba39db78bd726d2b88d91a169b37f05834dffa760d718d4e7e12fbc1f5adbfb8cdf2619d3acfe6e653510dfee62ad6af8b7fcb9474430ada3fc52799426a7eeddb8c32558cb4fbfe2ed8b44aaf3cefdfe23c4f3723d6a85278f7637b146e8a788a0ec82b01c271735f425bf322b0fac376403a480253945771e4536da2f4f3ff4f85cd2659210b3e0d4b697cb3769f767a0039b76557bc1140395eb50b49b96a6182d20f692e7406f6c3c976522166c1491e42f9ae7345c8ec830ff57b505e07475631e83ad7653e1f7e64d3ee57c933f80d2b5c019404a459c7ed8efa215d952d303dfe9aa5ec6be4ab5b0e1485dfe6f56c8ac7e3a3b75199e50329923084df75b3c0cfc6ec07465552aeeae7c8ad5888df479b7633c6a5a2d231677e8aa6c8f3a327210c8af1cb63ffe61834caf02b92e437ec354872e7eca277ae96af92a30ede13219c3faa07510c05e39f49991abd30259a886ec90c1aa764775d001660ad65904a58edee53c901cf9263503ee77c3f42797701356c7775e90a16260f2fbfedab30aaf9f55bd0ffbb091a9994348503817ab4701852c1099c9e8ff596a552d18f3766ff205fce7b40a99c79fe9a1878076ad161e2ba8421ab041e0da9606ccee51a5b52dfda220a693f5a203c5ead6d716bfe2fdf9470c33d381a1cc5d43980f8249a8b13c360f81d61e4e0351726750b2c5bfe822c7cef8729a8ae284cb0361a936ba28478314bebaddaefa322e19133f42b1c22f505cf8f7c7606220fcef50878ad37bcdab097a6931764045f6ab06dcea56638fbf0918b42c322dc59ed0a343106cbef89ece2dfc05ff10b8d69e414434f8b9abdbc439f521dd821545498a8e30cf69952e534bdffaf4d584b40a7db9dbce53c6d65c5c2c53f23090cd9dddd7c485de789be8574d034ecd69aae8b821f74b5d43420f799fd74998770c1b8580d2eb06f472b76534cda7ed478e1a208b20d0e51995732f6541726f288a8e1a3092c42d542fde015ceb519d020a1a717e76defa950bf75770b334e1f8be47a94ca8c096decdfda3ff1aeb9923fd573385e7c579d54fcbfad29aa9d4a969af985745acf0579f04666d94b0f70716bf230c806b16a70fc404166fe39f6ea7812796dcb905a417469a27dd43f3a1b1df952090cb1db16a19d26a0b574fa3290a7af087491d21ca74c9fa0c7a308d1c678d118d5bd1d886eef0b71f0e4d1804029b4da2f57d1f00f6b2e871aca30a9349b341f16d39c3c24179c3b8a55154cee67c8e828adb09f6d4bddf78f2f4e9bf011c912c4bb44d32c35340a80c68fe479c2ac1f5f1ebd264126db38470eb345a0e752e17cf8bc8aee8feeb04cf1de82dd72ec61a0fc611b9a26c45aa5550d6ec8ea5a1a0a62ae4db7e6ea2bf5c448900e4cd7c2e0624b79507a7f91a5c882a58e65f4483ba55c2ff57c78cee6445ee41165aa9e5d9cb66ccf3d6849a2a937630fa16356d63d8a899b9c4b84e7f46fdc40500c8b1be68c8c7a657f9b863a98a458e97e779daa25ca04b1a1bc999914739b161eec9520743c0ebffe0b80ea8b20a89bd30a06f6be4f0b2f75474eeff0b908e00b3dbb59364fd3599de6619306b212731ddff7524cd7bf9ee8a48e3ddaff9f3c14e156d3ad4dd4cbabb3a08fb480fd5b366e4f60a9a131f88da11a6b893ca52543d0deb44430b60cf593fc8b54f8c98d05fcaafadb796ae179f810686207de49ca5fd7164ba1beac8f9dfea53c1e29b910a946dd6ac7e15dec047dae62e74ca566a278f2ec6dd32bb71e17cc5ef71b906c4b77b5976c70e978f32b2c38435ee77323f8aaec87a649c8524dbabd40861a18b8adaf350d9ec69280709532e044b2ab9099ac7f8769b06a009eb715118358377a7ac4374b"}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) readv(r2, &(0x7f0000001680)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000001140)=""/26, 0x1a}, {&(0x7f0000001180)=""/225, 0xe1}, {&(0x7f0000001280)=""/228, 0xe4}, {&(0x7f0000001380)=""/193, 0xc1}, {&(0x7f0000001480)=""/38, 0x26}, {&(0x7f00000014c0)=""/45, 0x2d}, {&(0x7f0000001500)=""/177, 0xb1}, {&(0x7f00000015c0)=""/133, 0x85}], 0x9) 10:37:55 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="0c00de608561455ee7ae2b5ddf0adcaf6375060003000062c5708e17890d2ce30000000000", @ANYRES64=r0], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x4010) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x820, 0x800, 0x0, 0x1, 0x3, 0x10000000}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2797.868753] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2797.870898] EXT4-fs (loop1): group descriptors corrupted! [ 2797.877410] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2797.880278] serio: Serial port tty21 10:37:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000007f000000002e2f66696c653000"]) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xc42, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r5) recvmmsg(r5, &(0x7f00000014c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000240)=""/70, 0x46}], 0x3, &(0x7f0000000480)=""/13, 0xd}, 0x7f}, {{&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/127, 0x7f}], 0x1, &(0x7f0000000600)=""/44, 0x2c}, 0x4b19}, {{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/63, 0x3f}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/76, 0x4c}, {&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f0000000a80)=""/121, 0x79}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/93, 0x5d}], 0x9, &(0x7f0000000d00)=""/170, 0xaa}, 0x20}, {{&(0x7f0000000dc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/222, 0xde}], 0x2, &(0x7f0000001000)=""/102, 0x66}, 0x2}, {{&(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/140, 0x8c}, {&(0x7f00000011c0)=""/116, 0x74}], 0x2}, 0x4b}, {{&(0x7f0000001280)=@can, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=""/67, 0x43}, 0x7ff}], 0x6, 0xa2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001640)=0x1, 0x4) [ 2797.927939] serio: Serial port tty25 10:37:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) 10:37:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000020000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2798.049344] FAULT_INJECTION: forcing a failure. [ 2798.049344] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.051916] CPU: 1 PID: 65341 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2798.053309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2798.054983] Call Trace: [ 2798.055518] dump_stack+0x107/0x167 [ 2798.056255] should_fail.cold+0x5/0xa [ 2798.057034] ? create_object.isra.0+0x3a/0xa20 [ 2798.057985] should_failslab+0x5/0x20 [ 2798.058763] kmem_cache_alloc+0x5b/0x310 [ 2798.059584] ? mark_held_locks+0x9e/0xe0 [ 2798.060405] create_object.isra.0+0x3a/0xa20 [ 2798.061301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2798.062327] kmem_cache_alloc_bulk+0x168/0x320 [ 2798.063250] io_submit_sqes+0x6f76/0x85c0 [ 2798.064122] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2798.065127] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2798.066103] ? lock_downgrade+0x6d0/0x6d0 [ 2798.066935] ? find_held_lock+0x2c/0x110 [ 2798.067755] ? io_submit_sqes+0x85c0/0x85c0 [ 2798.068637] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2798.069637] ? wait_for_completion_io+0x270/0x270 [ 2798.070601] ? rcu_read_lock_any_held+0x75/0xa0 [ 2798.071538] ? vfs_write+0x354/0xa70 [ 2798.072287] ? fput_many+0x2f/0x1a0 [ 2798.073027] ? ksys_write+0x1a9/0x260 [ 2798.073792] ? __ia32_sys_read+0xb0/0xb0 [ 2798.074615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2798.075661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2798.076698] do_syscall_64+0x33/0x40 [ 2798.077476] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2798.078499] RIP: 0033:0x7f2b12dadb19 [ 2798.079244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2798.082889] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2798.084426] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2798.085860] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2798.087274] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2798.088688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2798.090104] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 10:37:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ff0ffff000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:37:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x10000, &(0x7f0000000000)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x1, 0x14, @mcast2, @mcast1, 0x1a69a701e48bea, 0x700, 0x2, 0x10000}}) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r4 = dup(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$inet6(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r8 = timerfd_create(0x8, 0x800) io_submit(r1, 0x6, &(0x7f0000000700)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000140)="661f2743135a8c005fe24f5ebf8d2ff3229e365e47e1f199c9e86d78f74be3c0af14fc61b73e8ceea7a33cc53baaca92267bc1c75ccdde5f650b9bf4d8362d5ee6e29025ba7d4bfb29382d06129c0b5d89d4aaddee54dbbc4be67a494f86e38349e0781798f2020b4893e9d6d79ce18e6476568359721b44eb8533b68d6ee2feb7e796daa252666b698ba732dd0d664cce94f43fc1ab70d173d106cc23aa0169df4206024b3d4c011884179c040ac09347bc88f616", 0xb5, 0x6, 0x0, 0x1, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x100, r0, &(0x7f0000000240)="117cfabbb5f101449fff19b1d5c0a82aac654815fc94b4e93b3b1aed788b399ebc922a204ff849df37250cc4b1fd5d68e66fb58dff52e8caae14fdc0161b", 0x3e, 0x115ca9a1, 0x0, 0x0, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x400, r5, &(0x7f00000002c0)="d09ccc2e624a054b8faba22c375391bccf53ece04d6dacf0992238b72ca135902e9c8b02209e4cb1e4945a63a93b6db7305ca67a016b06eb5f761deafcca5f268f1a394887f7f07b67493e3bac31729b60eb04e355a81f4c5620a5ff4080d5129efab5fc8199190a0d5d8d986d65f767fb51ef505bb036fec288132d95ba3dc35530cc366e561ff0cd0a5dd1af3f432e1e6f7466dfcf8cefef0fe99bec6cb40b2876977a0ad184ede67f0a5da470fa044ff41604ab34485adc27dbb270efc43a5986d274c4d63269cebbed66098414b2efe04dc8a5", 0xd5, 0x28000000000, 0x0, 0x3, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x200, r0, &(0x7f0000000400)="bd15e44f2f220d1ae07bb7ec11bd57eccf85bb2e8106733f575ea4c32fe8a67d6c67bb2738de6c1481238886aae36fe1dd2b63b85d92ca4da87cbcfd7118e2047baa52be73beb6a2abe91a83ff8065506906ae467fe40c451a10b6d4674999d3bd88fb06d82e4d355d02ac1189f710ecb828012293b5b85f415f2ec65c06ae0d933eb384046d92c0f8ad3d50e80f70a40c719172610f03cc8fa600719c6d16569d5daa80b8173cd806089fa7d7bf16004d0a13454d177bfe87f01c01c42d3d4c0b1185dfe6ad700b099676c8c8788a822d01bfff926f48fc9d1f1a", 0xdb, 0x401, 0x0, 0x0, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x1, r8, &(0x7f0000000540)="b8f86c90303e506800575eae0565cee843dd5fbac2958acc8074fc9f21e13c37cb017816a24cb65ca6353691d57c683d1e6c48970d85607fb9645379fd74e49b532c765056d81b4589d4192ae452cf28a5a452a8b2ff098f865a6ea7a00543c14f91fa783391305e30c896cb1dc1a1aaa79fb445d59ac70d63adace6f3396eb39c39355dbbf32d04905ce7d474bd1fedf762e7bbe8d7327964f00a3aa0a6062e0f2aa1c5544005efbf21f06ba5665b6d8f36e934b755091902351576648a07d1f8d5c03dc289fa7748202c1e8619eeb8d1485ab56fe8e27bf706bd516939eb5385bb6ac1eab8070d19d5912f388174feb4870d241111e939ff", 0xf9, 0x3ff, 0x0, 0x3, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000680)="21e75a4defe4a5f30efd8f5e9f0f9eec0aabd19d825442a225c0f1", 0x1b, 0xc8, 0x0, 0x2, r0}]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:37:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) [ 2798.273927] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2798.275619] EXT4-fs (loop1): group descriptors corrupted! [ 2798.359486] FAULT_INJECTION: forcing a failure. [ 2798.359486] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.362088] CPU: 1 PID: 65514 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2798.363421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2798.365011] Call Trace: [ 2798.365540] dump_stack+0x107/0x167 [ 2798.366248] should_fail.cold+0x5/0xa [ 2798.366997] should_failslab+0x5/0x20 [ 2798.367730] kmem_cache_alloc_bulk+0x4b/0x320 [ 2798.368604] io_submit_sqes+0x6f76/0x85c0 [ 2798.369440] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2798.370392] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2798.371334] ? lock_downgrade+0x6d0/0x6d0 [ 2798.372130] ? find_held_lock+0x2c/0x110 [ 2798.372921] ? io_submit_sqes+0x85c0/0x85c0 [ 2798.373809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2798.374753] ? wait_for_completion_io+0x270/0x270 [ 2798.375720] ? rcu_read_lock_any_held+0x75/0xa0 [ 2798.376607] ? vfs_write+0x354/0xa70 [ 2798.377356] ? fput_many+0x2f/0x1a0 [ 2798.378072] ? ksys_write+0x1a9/0x260 [ 2798.378813] ? __ia32_sys_read+0xb0/0xb0 [ 2798.379609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2798.380627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2798.381654] do_syscall_64+0x33/0x40 [ 2798.382384] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2798.383383] RIP: 0033:0x7f2b12dadb19 [ 2798.384116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2798.387710] RSP: 002b:00007f2b10323188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2798.389200] RAX: ffffffffffffffda RBX: 00007f2b12ec0f60 RCX: 00007f2b12dadb19 [ 2798.390583] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2798.391969] RBP: 00007f2b103231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2798.393366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2798.394753] R13: 00007ffed5e091cf R14: 00007f2b10323300 R15: 0000000000022000 [ 2798.704636] serio: Serial port tty25 10:38:10 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x8b2, 0x80, 0x4}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x190, 0x0, 0x23, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x726}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "04917aaac13f595e6d42f09ab7efd76f6488b8d585c73e110b63929362"}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:10 executing program 3: r0 = syz_io_uring_setup(0x3bb3, &(0x7f00000002c0)={0x0, 0xa2ce, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109200) r6 = dup2(r5, r4) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x1a, 0x1, 0xa3, "cf78c52471729dc3768f4e21ad5a7c3c", "386ef33f92"}, 0x1a, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001a40)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a00)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="599ede6d497c3a0791e5cee8bfbac76c0895d5bbe3494abf84cb31e5a92a3856c7a88899f5cc4a0d7ede5db5d29be94e479355279f6c71f16d5c596aa0a8df1cd8ff0d97bdcd9704130e2efacd", 0x4d}, {&(0x7f0000000580)="bbb4b6658fbc40d74108a3ee9c886fcff3321ed91853389755e1374a65b40c15a5cc789f183baa82a53c9ec17e8498c662c246cf5e6b1300461a604ba9ea9aa32ef9d045834238662087336cc70bb6b8efbb14a196d626015fe1ed327cadb25fa7722006ef66d24ed7cf62f6a82719a402ffb983c1b7bccb330c3e2e10f9431a", 0x80}, {&(0x7f0000000600)="c46796a5adede9ea45ee399ddadac2d4bb1dde939d29d47b332748dd85b811676580504aa4f4c7b92565ea17f50cde1fb78cdcd4058e694ab5f43456897427232fae8cd86240b997445bf4ba0fad3cca079af11bb11eddc674ed0d92d770f811fa3192004036746dcf3bed367a70e5f55a826dff52c59406", 0x78}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="06e67a43aa56fae6acffe8edafd65cb5e844481b893eed1c4c6f373be023f338b3d95ca7116176ec9fedeb2d0ced929ba792882270005cac40994d6c62a780e3281f73f5b64d85b0e37fb8a19acaad20e97c5a8ff7d95ceb16219fc80e132c71ef3270c9380e8758b0c98ed3c5190e990cfffb7b", 0x74}], 0x5, &(0x7f0000000880)=[{0x70, 0x10f, 0x4, "b454674b7fe3f09999d6a59bf5117bf5d75b92b03e278cd3face8364670111d974eedfc023e85627097f6b9b3f00bb98758a1aef50441d384def57739c2ade7269a5a36467d6c394e669a67afb98b4f06759fe920f3d372416f89bf453114f"}, {0x78, 0x1a6, 0x0, "7179908ca0ce9e5f1edc8622c90e86c381057656fa8b51ea3fcdbd42ac6e9ba925d177f477674e2d6ee90ae3dc6811deba9e090ad2627fa83a6af81a82fb8e3e40d984e1cf77bbd15f9ae4dbaba7081de3d17e36a1cfcd1bab67bb0fc9aa911bc0"}, {0x1010, 0x3a, 0x10001, "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"}, {0x68, 0xff, 0xfffffc00, "9babdce7ddee978cfabbc54292f5e8903c3197bdbb870f4d164683e1309a002ae91f32310c57f9a9463bbdd86f85268c24f404f5d4e790e181fdd64831b2bb0e4dc4322b4e65f333a23f198290e530d8766ef3f3df"}], 0x1160}, 0x0, 0x4000, 0x1, {0x0, r7}}, 0xfffffffa) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10010, r0, 0x8000000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x4040, 0xa4, 0x3}, 0x18) r10 = open_tree(r9, &(0x7f0000000400)='./file0\x00', 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) faccessat(r10, &(0x7f0000000440)='./file0\x00', 0x1c8) syz_io_uring_submit(r8, r11, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="dad149ba3145e2da64ee632f41f45d5eee2d9f24b458706e486317f153f28458d62b6a192aa8f930d93a6d6f978d3207832bd880a83a26a307a04f54f2f4f8d49b4e6253e29177ed7625b81be7e8750c7db3501f02ea0313b39fe3e04a7fd1f0d178ea8288127beda52c85726527ce845140425c283927b1757235004741343431de0ed1665e58fb430764689e19306971989c33f629f58e72861b9a91229e62045bcd93e0d427a9abb55a190b43a6d3c39e72", 0xb3, 0x10100}, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffea) 10:38:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000010000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2812.967024] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:38:10 executing program 7: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "731cc97b68e76fcfa57e5897a03fa624f0ff3b1750b7646c920707525aff9e39d3974a7bc35b09c0af333d70945fb0d42f4e310f256e0dd07ee8b2be202b05d9", 0x3c}, 0x48, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:38:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:38:10 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2812.984250] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2812.986832] EXT4-fs (loop1): group descriptors corrupted! [ 2812.998554] serio: Serial port tty25 [ 2813.019784] serio: Serial port tty29 [ 2813.020988] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2813.023370] EXT4-fs (loop1): group descriptors corrupted! 10:38:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000020000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:10 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000040)={0x1, 0x6, 0x7}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2813.142066] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2813.144189] EXT4-fs (loop1): group descriptors corrupted! 10:38:10 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000040)=0x7fffffff, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(0xffffffffffffffff, 0x19, 0x800, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) dup2(r1, r2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x34042, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000180)={0x78, @local, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0xe393, 0x6}, 0x2c) close(r3) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="64010102ac1414aa0100000009000000ac14140f7f000001ac1e0101ac1414bb64100102ac1414bb0a010102ac1414387f00000186f947b5dc777cada572f491baa1b43382a54d3341729885ddb5a535411e6e8fb87a4b28e5b9d023f565e8d34cb33a9b53771ad7965a287d71d61813f81ea5a7381de0628c686846acc9fd6044b62e5c2382b0e722bf0f5ac6aff1cc64288e4f28ea4daa77aded68926c28126645485bcfb56a9a7ebc7263b37c3ae4b5e924"], 0x34) 10:38:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffea) 10:38:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000030000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2813.349954] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2813.352183] EXT4-fs (loop1): group descriptors corrupted! 10:38:26 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x600000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xa00, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r3) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000040)=""/33, &(0x7f0000000140)=0x21) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r6}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="2e6c1792ea944f9f6a6faf912fb4302f62d8622786ab380526cd8c03e974fa2919e854f8478d33a5124acf4ebe65d5584f64d7a6141af6cfbe0dc6e638cbcb4483c8a21128ffc208cb598cb3c9ba102bf51077e8600f048fd15921d1ebc2b5f3bc1ec610accce61dfe795ea74ddb372f3ed0763611ec72b07d49bb8be489216ed17d4c1754fb09dc67e2140cb728741ed24216e411e42dc82f009783c15b35a9c6c8197669c967000000004cf0035e722c64d9bb376047dd750d77894d3f161d842b649bcfd77e600f", 0xc9}]) 10:38:26 executing program 0: r0 = syz_io_uring_setup(0x3bb3, &(0x7f00000002c0)={0x0, 0xa2ce, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109200) r6 = dup2(r5, r4) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x1a, 0x1, 0xa3, "cf78c52471729dc3768f4e21ad5a7c3c", "386ef33f92"}, 0x1a, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001a40)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a00)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="599ede6d497c3a0791e5cee8bfbac76c0895d5bbe3494abf84cb31e5a92a3856c7a88899f5cc4a0d7ede5db5d29be94e479355279f6c71f16d5c596aa0a8df1cd8ff0d97bdcd9704130e2efacd", 0x4d}, {&(0x7f0000000580)="bbb4b6658fbc40d74108a3ee9c886fcff3321ed91853389755e1374a65b40c15a5cc789f183baa82a53c9ec17e8498c662c246cf5e6b1300461a604ba9ea9aa32ef9d045834238662087336cc70bb6b8efbb14a196d626015fe1ed327cadb25fa7722006ef66d24ed7cf62f6a82719a402ffb983c1b7bccb330c3e2e10f9431a", 0x80}, {&(0x7f0000000600)="c46796a5adede9ea45ee399ddadac2d4bb1dde939d29d47b332748dd85b811676580504aa4f4c7b92565ea17f50cde1fb78cdcd4058e694ab5f43456897427232fae8cd86240b997445bf4ba0fad3cca079af11bb11eddc674ed0d92d770f811fa3192004036746dcf3bed367a70e5f55a826dff52c59406", 0x78}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="06e67a43aa56fae6acffe8edafd65cb5e844481b893eed1c4c6f373be023f338b3d95ca7116176ec9fedeb2d0ced929ba792882270005cac40994d6c62a780e3281f73f5b64d85b0e37fb8a19acaad20e97c5a8ff7d95ceb16219fc80e132c71ef3270c9380e8758b0c98ed3c5190e990cfffb7b", 0x74}], 0x5, &(0x7f0000000880)=[{0x70, 0x10f, 0x4, "b454674b7fe3f09999d6a59bf5117bf5d75b92b03e278cd3face8364670111d974eedfc023e85627097f6b9b3f00bb98758a1aef50441d384def57739c2ade7269a5a36467d6c394e669a67afb98b4f06759fe920f3d372416f89bf453114f"}, {0x78, 0x1a6, 0x0, "7179908ca0ce9e5f1edc8622c90e86c381057656fa8b51ea3fcdbd42ac6e9ba925d177f477674e2d6ee90ae3dc6811deba9e090ad2627fa83a6af81a82fb8e3e40d984e1cf77bbd15f9ae4dbaba7081de3d17e36a1cfcd1bab67bb0fc9aa911bc0"}, {0x1010, 0x3a, 0x10001, "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"}, {0x68, 0xff, 0xfffffc00, "9babdce7ddee978cfabbc54292f5e8903c3197bdbb870f4d164683e1309a002ae91f32310c57f9a9463bbdd86f85268c24f404f5d4e790e181fdd64831b2bb0e4dc4322b4e65f333a23f198290e530d8766ef3f3df"}], 0x1160}, 0x0, 0x4000, 0x1, {0x0, r7}}, 0xfffffffa) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10010, r0, 0x8000000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x4040, 0xa4, 0x3}, 0x18) r10 = open_tree(r9, &(0x7f0000000400)='./file0\x00', 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) faccessat(r10, &(0x7f0000000440)='./file0\x00', 0x1c8) syz_io_uring_submit(r8, r11, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="dad149ba3145e2da64ee632f41f45d5eee2d9f24b458706e486317f153f28458d62b6a192aa8f930d93a6d6f978d3207832bd880a83a26a307a04f54f2f4f8d49b4e6253e29177ed7625b81be7e8750c7db3501f02ea0313b39fe3e04a7fd1f0d178ea8288127beda52c85726527ce845140425c283927b1757235004741343431de0ed1665e58fb430764689e19306971989c33f629f58e72861b9a91229e62045bcd93e0d427a9abb55a190b43a6d3c39e72", 0xb3, 0x10100}, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000040000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:26 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xffffffffffff6fa7, 0xffffffffffff0000}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0xd4b, 0x1f, 0x1, {0x0, 0x0, r0}}, 0x11e) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xea, 0x0, 0x0, 0x0) 10:38:26 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:38:26 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x103a02, 0x18) r2 = syz_io_uring_complete(0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x20080, 0xd) r3 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) r5 = getpgrp(r3) r6 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0], 0x6}, 0x58) clone3(&(0x7f0000000400)={0x101000000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), {0x15}, &(0x7f0000000240)=""/235, 0xeb, &(0x7f0000000340)=""/101, &(0x7f00000003c0)=[r3, r4, r5, r3, 0x0, r3, r3, r6], 0x8, {r1}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) [ 2829.005189] serio: Serial port tty29 [ 2829.005679] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2829.007122] EXT4-fs (loop1): group descriptors corrupted! [ 2829.054279] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2829.055611] EXT4-fs (loop1): group descriptors corrupted! 10:38:26 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x500000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:26 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) syz_io_uring_setup(0x76eb, &(0x7f0000000380)={0x0, 0xfaee, 0x1, 0x2, 0x18e, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000240), &(0x7f0000000300)) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'gre0\x00'}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0x810) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x30300, 0x0) io_uring_enter(r6, 0x45dd, 0x5533, 0x3, &(0x7f0000000140), 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000400)={0x3, 'wg2\x00', {0xb7}, 0x6}) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000050000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2829.164255] serio: Serial port tty25 [ 2829.193338] serio: Serial port tty21 10:38:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) [ 2829.226223] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:38:26 executing program 3: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0xc, 0x1a, 0x0, 0x1a, 0x6, 0x4, 0x6, 0x118}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1000}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, 0x0}, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000060000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:38:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000070000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2829.416596] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2829.417865] EXT4-fs (loop1): group descriptors corrupted! [ 2829.465221] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2829.466415] EXT4-fs (loop1): group descriptors corrupted! [ 2829.830441] serio: Serial port tty29 10:38:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0xffffffff}) 10:38:42 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:38:42 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x600000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000080000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:42 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeaff, 0x0, 0x0, 0x0) 10:38:42 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x700000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:42 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYRES64], 0x54}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0xc4, r0, 0x214, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7243d251}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ffc000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x5) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)=0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2845.003488] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:38:42 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r9) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x22, 0x0, {0x3}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r10) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, &(0x7f0000000040)={0x100000000}) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8000, 0xfffffffffffffff8}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2845.053302] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.054616] EXT4-fs (loop1): group descriptors corrupted! [ 2845.062630] serio: Serial port tty29 [ 2845.072369] serio: Serial port tty21 [ 2845.087508] serio: Serial port tty25 10:38:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0000000b0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4044) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xffffffffffff0ffa, 0x5, 0x7fffffff, 0x9}) [ 2845.190675] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2845.235890] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.238128] EXT4-fs (loop1): group descriptors corrupted! 10:38:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x3ff}}, './file1\x00'}) r1 = fspick(r0, &(0x7f0000000180)='./file1\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='syz1\x00', 0x0, r0) r2 = fsmount(r0, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x91050900, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/255, 0xff}], 0x6) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) [ 2845.296390] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.298588] EXT4-fs (loop1): group descriptors corrupted! 10:38:42 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffea, 0x0, 0x0, 0x0) 10:38:42 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:38:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000180000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2845.411317] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.413607] EXT4-fs (loop1): group descriptors corrupted! 10:38:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0000001c0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2845.517255] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.519445] EXT4-fs (loop1): group descriptors corrupted! 10:38:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) 10:38:42 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2845.593551] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2845.595793] EXT4-fs (loop1): group descriptors corrupted! [ 2845.604715] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2860.011519] serio: Serial port tty29 [ 2860.018870] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:38:57 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xa9, 0x5, 0x6, 0x9, 0x0, 0x6, 0x448a, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0x5}, 0x80080, 0xfffffffffffffffb, 0x7fffffff, 0x4, 0x3, 0xffffffff, 0x9, 0x0, 0xada, 0x0, 0x3}, 0x0, 0x8, r5, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000005c0)={{0x6, 0x7}, 0x100, './file0\x00'}) 10:38:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:38:57 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0xa00000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:38:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 10:38:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0000003f0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000003c0)=""/227, &(0x7f00000004c0)=0xe3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) r5 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0], 0x6}, 0x58) r6 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0], 0x6}, 0x58) r7 = fcntl$getown(r1, 0x9) clone3(&(0x7f0000000340)={0x10000000, &(0x7f0000000500), &(0x7f0000000180), &(0x7f00000001c0), {0x2f}, &(0x7f0000000540)=""/123, 0x7b, &(0x7f0000000280)=""/93, &(0x7f0000000240)=[r4, r7, r6, r4], 0x4, {r3}}, 0x58) 10:38:57 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x600000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2860.070325] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2860.072541] EXT4-fs (loop1): group descriptors corrupted! [ 2860.088891] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2860.090823] serio: Serial port tty21 [ 2860.091050] EXT4-fs (loop1): group descriptors corrupted! [ 2860.110141] serio: Serial port tty25 10:38:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000650000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 10:38:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000004800000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r6 = socket(0x11, 0xa, 0x637) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x100, &(0x7f0000000040)=[r0, r6, r7, r0, r0, r0], 0x6}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000fffffff8c0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46040520fe07000000000000000300000009000000d502000038000000ad000000d3ffffff0200200002000300020000000000000005000000050000003105000000000000010000800900000080000000000000000000000000000000080000000010000000000100ff01000000010000e00000005a10109b9207e7be831ad3db0380ab289e4f9af0dd5f7fb5e82e8fb85276ad12deb4ed138821bf9c11d456301196441f0558872d64f9926a19b9466461643f838dd865ea42d1d7d40e2717fc51dfdf33b611825169ceec170ffdcfa63a2f805bd312c561ad367633486c438a7edd57c6eae600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/2282], 0x8ea) [ 2860.333435] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2860.367422] EXT4-fs (loop1): bad geometry: first data block 140 is beyond end of filesystem (128) [ 2860.418492] EXT4-fs (loop1): bad geometry: first data block 140 is beyond end of filesystem (128) 10:38:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffffffdef0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:38:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2860.514406] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2860.545070] EXT4-fs (loop1): bad geometry: first data block 239 is beyond end of filesystem (128) [ 2860.861060] serio: Serial port tty25 10:39:12 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:39:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:39:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeaffffff, 0x0, 0x0, 0x0) 10:39:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f00fffff00000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:12 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x40010, r5, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:12 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xa9, 0x5, 0x6, 0x9, 0x0, 0x6, 0x448a, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0x5}, 0x80080, 0xfffffffffffffffb, 0x7fffffff, 0x4, 0x3, 0xffffffff, 0x9, 0x0, 0xada, 0x0, 0x3}, 0x0, 0x8, r5, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000005c0)={{0x6, 0x7}, 0x100, './file0\x00'}) 10:39:12 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1000000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0], 0x6}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000180)='cpuset\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) syz_io_uring_setup(0x31, &(0x7f0000000780)={0x0, 0x45ae, 0x0, 0x0, 0x39c, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) [ 2875.251647] serio: Serial port tty29 [ 2875.261413] EXT4-fs (loop1): bad geometry: first data block 240 is beyond end of filesystem (128) [ 2875.263780] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)={0x8200, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xb}, @val={0x8}, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x8}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x41f0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2a04, 0x4, 0x0, 0x1, [{0x4}, {0x1248, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0xc9, 0x1, "9038b163f03baceb1cbee0a53ef3ae2bd4b2a90f3ab4fd7883c18acb265d78e0b08f4654c28a6b61393d21d1334e40eaa80c5b400766cc6c0d8ea6b918412a9da31993fa17fe1e0ef307f4bc91ff5a0d665f195c5fa4ef318cb4cf555f0a7ee3d6909bde2d96bc854586211320b56be019da636c91ca653f21a0041b0bdd36e553773ac1c60269325e6dd154a9cf513365c00af217a07392267f971b960147dcac69ee1400df071c7065fa55a653708354f05e617f75200de27a2730689354d340760a80cc"}, @NL80211_PKTPAT_PATTERN={0xd1, 0x2, "edaa61931692aa7f10076e9bf4edc22f63b39fd018151aacd90a554f755715a1980e7307bf0005c045ee0c609a246d5ae7d0aeaddaf95a08dc5deb87e6f2382e82708424db5a3b207cf8da0ece63fa463ca369fa83a2f70ac30140848d4fec108d973360a0687494e7c4d7383131dd92ad39cccee77a8146865dac2111c7284e469aadf484a0caef508c6394ef16bb44991125cc21c965de012e08b75743e71756cfe14606f87a77c497ee3cf8d1510738616be3917dcec0928d35f8a02e704f8913a2dd9448d383a086e03cba"}, @NL80211_PKTPAT_MASK={0x56, 0x1, "fc59ada597ce53b3c4fd4d906100bb855ec319ad6797f9cad1d93bc2a7155220ff199e3695ddf32264e87cea9db1369657ed8b9d351b0cc76c168a01c3b9b044aeb9c1f0d2794dea5e4d4bea2297ffc54331"}, @NL80211_PKTPAT_MASK={0x43, 0x1, "1f362de688d546637c105c40e48e3e0cb59d777c8c80993657ba0c468232d8c77a0f51b48b02181d9597bbb88a4e2190e5d5a283294ad59e92de89bb2ccbc8"}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0xce, 0x2, "8d39bbd19cd12b356395a07382114180493eaabad3831e7285bc512ee08b384fb0adf660838dbf50a0d3727519b52c813a19ceb33db348c1f7953ece394e03507535f3233b87a1568c9ed90ec8f85aa2062ed42967ca3d4081aedbce9a9fa5ef2fc18288a6771f5f63b9c701f67343e550b11de6c10a3a683454b58c952db64f175f5dd6c7cbbd0019f401a226a7586286888105a88f6d7caa65c65efc1e76f9ca835b566c880178147acce2e91ac07c84cce206b99847a1ef9bdb36c9441b5b8f9c283b2e29b6e7d000"}, @NL80211_PKTPAT_PATTERN={0x1e, 0x2, "97189eadf514ed0a973117c74eac646848ab1ea23564ac332741"}, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "d398d1e6dce9a6b7a7f9369537201898b0bd49e9f2fa4ac1120765e47d129462effb93a2a24b7e062ebe9e7cd16e982773826d2d2a57a8facdc0ddce27ba9a06b2abf43303ec8743f398dd3576593abad027295c4a7113e82a6b2a25921187348152c8a15c075589d00de5606c751a6b6a2e7c1bc415bec1e04c9d2b5bfe349405ea061c99"}, @NL80211_PKTPAT_MASK={0x9c, 0x1, "c930ff2a9a2938c873b6a2504160aecc79238469af216967953733ae4f7ee7b494305ca0f990f7d70a184a6c02c47ee867e5dd5a30889698d31bbf855b26ba119b359ddebeca152ee3c23ef60abb9d0373309416f49652433d8e4e29d085069697968668479681b550e38c6bda96356733d416187bf2496fd7527a1366f51813b3157c1b0ad1beba69e6a12dd8a4cac39aa976404ec59646"}, @NL80211_PKTPAT_MASK={0x4}]}, {0x1088, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}, @NL80211_PKTPAT_MASK={0x60, 0x1, "40a2ea2a4ce8a70e03690ea4c9dc63d961ca9476bb57b0c0eb2abea998565233944903ce982910212d7e1e0f37e335831b88094570036b1fffc7d61cbe745eea4515f03bdbab8fa5d384ed2ce99813e1265a444078209f075c4d68c3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}, {0x2fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf8, 0x2, "08ec93250c1559267d2218e6c87dafd85d28018bef6de611745a8117eff8eb3e08c217d24d095c63d4003609ce811f98f793f4fd30ed0e79fad228b4171acdff1c437c00de10d687d23dc7ad4fe77fbae5144744b4d0b29041d653541331a1827242e21d573880159655cf7c68575d9f014eb890d42786dcdf8de8abef9f9b2a2ab0ccb3b0118f5fc398f81565f4560abc78f598cad0b59216a6dde536564c7324f9c123f1df838fb466f67c2af2eaacb7682194638f4fb506c18456757d2aa321f19d6706825788c7c6f706c3e6ea631c618b89e93363747b1dcff551478c7051f71b890fc38e7798d88c0f04f1d44d8b71292c"}, @NL80211_PKTPAT_MASK={0x5b, 0x1, "dc16cc6f74fba4cf1bc1ae576ee8c3026b4a1b816e9a83ee7e5cbe6f86684688f52f8b196b65837384ea8ecd45cf491570168636159b8747ac64498bf1450e6cad4f702dd0dc0b8601e90ddfaa5a313dd49c725986bad7"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xae, 0x2, "b4f283a75a2e2f54cdd597e56a82ff436fac038d538b77262798dd7edf748bef52a5b031687ad2efb8da2dde48e8fb39dac2cd2a8b534b1066feaee25aaafd37e487f876f6e63e97d2482fab2e65b12f3bef60198fbbd84bbe328747f174229299ed482af3062479969025a37dcb291be6b0724826e1266b26aabec235a514dc6f2e115101f659d1bcc0b91f9d30347e5460292ed9a0f150faa22086bf49850d769ce8d63d1e70fba4a1"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x8f, 0x2, "74908c84d9ba83b555797de3e5528c9ee66a67c4fa0a57f77117786659b0706fb457fe56b5a2e4951528204f607fe770d36d886db23f603cda6819f689e5225baf4f154e8ea66bb957d5c8f224184babf76baf596216ac3fe1f08d6ba289d6e5c48fd1a98ac25a41fa0ce9b660785d31665e9d776c1fe44fd69e3fe175a4186cf247ac47043eb6daa0de00"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0x40, 0x2, "c929862715ea275b604db1d7f31259479999a4522e1b3a9adea49076704b29c26fb1cfe6b162417fc43fa7f6d9e89a6183d785a4bf633c10b3183f61"}, @NL80211_PKTPAT_MASK={0xb, 0x1, "940c00afa1f610"}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x6d, 0x1, "54574776cd13706c01ee2f0a007725f225327ffb165d0e08ba76ba3954bb286e026a63e54e5b7aefa13b450d9e89ddf15f032281f02ef7d816f226e10735a5effe313d7f73a62b4ce227cb113add46e860b75cfd3d42e28312825a22eb31d602b98c516d7730bdb0d2"}, @NL80211_PKTPAT_PATTERN={0x60, 0x2, "3039ad0e7a3711d714ddd59a96ceae365cb5b8faec6bfaa56c30d26fbf8b85fe2fc4cc25aca2932f7a82f221cd5cb5499913b279b4df4cce671f988876496d84f646ecb8c613cf9a4fc0440402d096f758dbf5ea820cc5e24df446a0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x782}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7a9e7e44}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "e0d09cb6c4edd723960bbe111f6b5d15764514ca7eefc9462bdf48de4d24761d40901ca191e0c489b4138acebdbe8892ff9adb7735f37e4a6cbb"}, @NL80211_PKTPAT_MASK={0x3c, 0x1, "24a0272c827b9d4fd9291521a884018fcb106a575ea07f36c21bc3dca18d5e2b566b534f0fe0d59740f8d45d0533efb05a59c3b3e777fcb6"}, @NL80211_PKTPAT_MASK={0xa6, 0x1, "db67a0e4d094f3d06d7a6e9917c6fd03b5976a55327b41f5aa4182c54bf5e59ed6d21f35cc0cae4614900c2527ae436a515a0e156885e7abd55faeab3df9192a01e1b9e32ffb3676abd27f350d2904f49a5c0d8b51e04b115fa90e9197b032c329fd656c84e5f35d029ae2b2dbae11dd6e6d104f889a22d050848927ab2c5757f0bf4f6417ec9a9a0c5f28d80b7ed7cd0fb17896ab3c95c500fdac6d1f0ca78081ee"}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xdc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8000, 0x9, 0x8}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x8c, 0xb, "af5901410e3c6525d4c0c3621c9c18633a66358c3671bdb9ec0d9fb35897e3a457c0492aee876fa17175a0f19f8963c32b0d6a21e863006f9af1aa95de5a1d24501c3f70e4d17f662278f256d3b062d0041ee60944a5473b23dc76edc44516d442533613c249a49b546fb73482d926a3622d9435160ba97a3bfbad136314061a2d0c78655ed0a384"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x28, 0x8, {0x3, 0x7, "0ccfc20ad707d2000352932ab9b752dc9f47a9b7499f3f7f0e131f20"}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x400}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x16f4, 0x4, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x69, 0x2, "3433dc41d041322bf73fe88a0052e64598136921e8ca94b068cffe5f3b4f917dc8079f0092cec619461fc7d16b8203885e1d0a16191cf0aec4ff75877d974dcd4e859132d539a83067965303ac606b7f500bde622adf44753874851b4afe3d79562c60f908"}, @NL80211_PKTPAT_MASK={0xbb, 0x1, "aa57d6dcab08a003c429cf3605879fa0ed6b1899f9f327ea2307be673d08c1718355a9250781e8c98208cd58179525b417ea770c96a7aacf4420118d458d0d1a5fe4783a6f488b1d16624df834a8faeb9a86e7fe7597a0880f590fc30bae94bf51e9c55ea111f16e99dcf73c9f0cb199a8bac6dc7a8be3b2fb1257b4a704f5bff47fadc08fa8ed77c1688b57e16c69ea4db5b2541fcb91df650242ba9be2590609c3cbd8821667f6053f35aeb710eb9cea24e305c2f4aa"}, @NL80211_PKTPAT_PATTERN={0x21, 0x2, "4b8a9f4fe4c5773ca9205e90c0e233de06e0b9d330935b0f0636eb1ac7"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9, 0x1, "6dd9f50512"}]}, {0x11f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xc, 0x1, "7772238fa7b4b03b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "f80be95018e8807a0e53a5d9ed717f3ee43bdc718e36f9a12f7a55ff1fc8e7ad86235b80a04227a6108c1be2c16df6683661653cbcece6fe42d9ff7b38191f6f35bf9bf009b91b8580cddb3bdfe37cc7ac40a81559f9162a0a6bb97ddcb9197b662cc025dcb3b3a55b2e6aa5dd35cee586a03d52734e04d0bb7c108115e052692f9431db4a6723542996b96909e3e825d5cc9f5dfc9a7562b21483f8a4245384d3dc750d65890148a219e7e451d9"}, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "0aa41556a276c0a4099e613a78ce7828316aaa9e6336744a896aa7300472536652a8c4edf34235e8f9d1dc1f491194bf90947381bd6f903aa0b637d654532926576a843e1cdb4e0f858db18f7f45ec9afdd8d3da5ac37f96933e05217dbf25306fdfbaecfd11db03f7f887995ad5e9a07104bd77387c47a384b1fbbde72f54c217f446d4077c0b6bee9fd021487ad79eb1420830fc805355a79813280fc03a9d8ac163735c5d78e3dbe2a7a597e3462fb5"}, @NL80211_PKTPAT_PATTERN={0x69, 0x2, "aca4c6dd2039ce6ac8e74d37084f8036eb8ea7b7d6b3dfb7d2772866ef47c713b82ce524737bbcdabfe965c708cc630601f426fa4b72cd004857e735fc49b18a1b982c34ad9496e724a224dbeb0d01bbf9d6c0724dc649b14262a34ccf1d7ff04b87bb9973"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa5, 0x1, "204009d04229ab294b8b29e08cc9a01f502b3e470461adb42b94d9bdc1c1f329b2ddf2e177cecabc670d3e191f0ebc30de403efdb729757f18e091177b8358e1c31af834f09ac3021502f222abe05afc68beee8a3c67671490964c6451451beb083c79486e924777980992b786ec9a9ed61abea826990e93eecd176922aac371016a4c3530d8df10d6bcd90b6bb6c287c5c024daa6a7484b9f859d5be02615464d"}]}, {0x2f0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xed, 0x1, "f7d9df5b8c1dfd51f7e40921f3bef45f000e22efb87c59062664d9c4ad38f57f2e3da223b6f953c3976e4ac2bd5972718f2b674dbc0c3607f7523c863d29004f45e84a147c311cbe32238011495f4f4f55a99737b2e6e5ae65ff8f9ffc94f744f509d4ff4acd8defdc9ffa0172dd2299cf77ad65b0fbfe54ae338aefb2110458593fa59be81eae9ff9353dc70a29552dfdb600c6c024b2b1dfc0303d865b0c068e88165b58c495cfca6057e1114cd405bebdb0b2aee1892e02ec55fcb7c8a5c323f4921fb6b6b8e51a35c556fe91ac67ee10a988721ec668310ca3048284db751eafa19f7a1e7272b7"}, @NL80211_PKTPAT_MASK={0x2e, 0x1, "81cdae1ea11d7f8cf3663e0fbcb0394bc04858a7a0724c612bdd57ff9840cb81f94f02236c2c878615df"}, @NL80211_PKTPAT_PATTERN={0x77, 0x2, "96858fe794a958b98801064bba3cab61d68410ab608f1fc51d8e2ed10d825cf0f3e07557715a76e5d249cc842fa3e5a2d4b3dca1be075e23b9c753d0f1357d3e5aa613b55906f49118920c4bce6afc90384614f55f48ebc37935b312d0cf0cd3ea2314b905e4f5d316511f7858593effbebd25"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}, @NL80211_PKTPAT_MASK={0x7c, 0x1, "6ac0b2795e5e20da64e6a952d44e3f7be0b87c98ce6612f30b812d9d76b592875dcf02da20d132639a0a274ba26385e5e8bcd294a89a5de8ff81bd0bcfc587fccdd967b35dc4205a81221d6316f2f1a20782639416a662511b3bfe5fd04c2dae091b09dc6d1730cda6234c4785af128d7393a8afc5aa996f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff30f0}, @NL80211_PKTPAT_PATTERN={0xc0, 0x2, "dce3dcb82f53599514a5efb9dae65c91f8856c423bd232254f449fc436771dad07fa4bd4068b9dbe9e93409b937f2ba722ce9aad93372ddc05af1a9ed074c3b029dd3f69c8036ed660fab77c6cd1f807607bbe75e837ab589caf5ae88076cf29417d63168b6176111afdca698da6b6815a8d45a7073aeaf528d4d5465104b2a378f2c25726af1ca79827c45db079607aa196ca58137b2a850987aa050cf57e5e5036462d3fed0dcb012ece04bd534d1c2ba4fba22a81d0da8033a2d0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7b}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11a4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1188, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xde, 0x6, "807f8846fd6dc2e970b636dbdcc38fe0f448115b259238c88d70c2fa06577c35d5cd24cfe8191df2e6d3d4c8e535e7bad515a54831e7d0eb0f9d9315bbebce0cb241fd6723f18a59c23845e68cad316af5ed8800c7603abd04eed6d9c1d6af1a3c1c8ecf9220ac9bc13899ace9d6f8dc62794f50b07f3499073479e18cd42858370aa6c96cb52e397b3e392a5864df8b4c569333dcf0149363a51479633ea6285740238a9cf9505e333248806d05bacaa04c60746f28614602698476cd77831ea6f1f75ab910f0fd53e485c87b947a08cb21f72e5958d06bf56c"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x98, 0xb, "23fdac4e32220529808ec82490482de2963e4955f3ad8194c6b1e75a7ef7a2ef14a6ea397d8d8709f573cda06f8fe4ab6b5dee542566a5b700809cc7de42c2f8033438c1adf9142605d4be6b94ac36c97608b710fc68b3e176c0cdf7f695f84c5af56d2870bbaf1f086e7dc96e3445da93ce693b13dc9882c62dac48242db7c12b6c2fd996fdd074e90aeb0cf4a32f11d85e715a"}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1020, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1010, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x80}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xf8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xe4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1d, 0x0, @random="01ddedfdeae263eec219f7943a4a94935a2b97eeb35df7723d"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10001}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4136e6b5ec18"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x92}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xbc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x14}, {0x8, 0x0, 0x9b4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x8}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010101}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x6c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xa4}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x1d, 0x0, @random="167c6ce0031bfd98fae76017c02854cb53670b4defe76a745c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1ab4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1aac, 0x4, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x49, 0x2, "c4e5ffae281d4f6a2a820d3b4a30787ca87c46e947cfb1035456b823eb2d8595c82ffb3bbe083aaf26247fcccc2422252f55be8230e461c4d481d7391843aa74c88ce4686f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x41c5}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xc7, 0x2, "5f2ad6868f639158343bff57808fc8812a295c73a63debd2d7f711d0890d345255584885f2b2ad013939ba35e2da9309202a93447afbcfadef8ecb6ce6d2ba71ecb3a3d92309140657146c7c4afebfb2f7cc3eccbe52861a87577d43513db1ac6010003b2fb3eb4c58dfd354eacbdcb7c14a9134e9b1d823df6ad4582de5eedff6a75cd10d27d4484f84b39e6800068f5a1019b742a42a8de4005abc0db4622373342a3268413ab7a2ffaeac89db476f4485315e76ff342f1a4a054d2cccbec4442200"}, @NL80211_PKTPAT_PATTERN={0x53, 0x2, "d03782cee7f16a9d9745cd027f02de0e82a8bf7241d564066e4a6bdbcc2587f5d72616a31248700743aab3901107e412a9fadff5e16806efb52b76e0d615d069b24a42f07a965803a914fc82b2e0d6"}, @NL80211_PKTPAT_PATTERN={0x68, 0x2, "5b8ee505f8489704691fcdb2af2b86f703eeaec54182cd32d69cfdbce39b3295611b40b64b77cb4fab578c12bdc28661544f46c417f2b85bfb363a7e279bf221434f7db3cd92a5b182140165d84829e1a036b7cffd704c8a732ba1733fac83897c66b58a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffff}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x47, 0x1, "8aa8dee03b52eeed8ae0cd25f17e40724a1d1b6538a0d97fcade905437462f013c2118b9c0d700552eaf7a917519c9eb5bb7b3a82165d128da48eef257fee3b8a5ef48"}, @NL80211_PKTPAT_PATTERN={0xf2, 0x2, "09716bc43bfe877022ed44784aae3e5bb4bc9b191ec6d737a995581056970251748641ceef777610b60d2ff8650978efa450202da81f5c1dff1739644e974732b943312faac4b2ad1c95135d0f1776e3285a0a281d77edc3eb4fb21473ff08ce3c07f16fb64b5a163e0c47a5efdb0b9a3588ddca002be0b057fe8f131a1c8e25b4791c4aa65549b42f723ad6a72abaa36d79da2673cf9183590c123662555e34f58eff55f022fa8bad655ba9218617939c9049cff2ea9347509e88387432aaf723c7b2bd9a407749e1bd4b5c8551ad9f82ac0cf2b0d1c68cd17498a889dd8a2b2bef908f66f91b4d9400eb0eaaa3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc068}, @NL80211_PKTPAT_MASK={0xa8, 0x1, "020cdf0a49198a2206df28145422470186ff1062cfe9e6ce8160018fdaa944059a32df7196fab8a044eeaca62b00127d2531c83c33c7503dbef96d556ccf4fbb323588b1d05188fe3229c790bb9e3dd3d050ecdbea97a57603e99d75b8c276c8b8864778d680b1a400c7523e29e706269bd143128aeab353aad641b01a0a49d20395b2e6285d8e19cc593620bf52d12b280c864889737123be7838b0510cbb3dbc59584c"}, @NL80211_PKTPAT_MASK={0x26, 0x1, "f896896948f7dcb6e832d453dcc09b4196ebd4625b4bbfd687f93ee7dfa476f63bae"}, @NL80211_PKTPAT_PATTERN={0xab, 0x2, "94fd1d35799e976153db8d364ce0d26a7ec1e2fbec01dbf06d47ee083f9792341f42c17a70fb8af82ab0cc06afe8f1d582d316b3658126a7af60e0d5af4f92ef97bfd86f0b08627829462fba5ae8da05caeff223202dfe839c22a794691b05ef618fec2870d169304a6359d321784e4d0b102a251e4e20769f5d9e71685c94ae2391223b16c4fdb99ae97d001687810eaca09785b0c43cdb21470a11d3cd60bad7bcff184ea11c"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x129}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x83, 0x2, "0752b5d2b0e0429fefafa3939b8e9aab3c23ff03212f3dc5289553d42986cd7d3937a2d00f38d3e8501dbab11ddceb7bf2edea637575674dfb3c735a3286fac0aa6b20be368c12094b0276f85ced6e28e5ace79f6cae36309e7350e251dd23d57c1aac4ab1601ea9c7bcd30a4962e51e407b4e553f241b9bcda69bc87100c1"}, @NL80211_PKTPAT_PATTERN={0x35, 0x2, "35a0408f196ce461bbd92905fbbac762e3c66531f5de83b287261ad0302293a213bfe2fc5089f9eecf9c0a3f8485e1d570"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "e98274d87894d19a166a6974b86dabad5d1da326cdee0cc5019c8792717b897e5432243d6afbf04e176eff3f2c6eb7b7b89390c81c03095fd6069df84ff4aeb3e8d655e05d600f180ea1ccf2fc98bdb359bf62a50fc3f1f3a580312e7ad94649099f783820f5e675cbd9b5853eff160578294e1fbc"}]}, {0x1260, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0x16, 0x2, "c9d02b594821e3726fee1a5477ff5b188a57"}, @NL80211_PKTPAT_MASK={0x8c, 0x1, "54f3d90f23dce66e63efab09004546678955069a7d9bb53100b71c65c857c868590bf1f924dbcb6866ea7c2aef34a67842a5de88f9cb0ea3a0732dc80c857378e51f59e1fbe4f940ba56c24dfae31e23a003d85fadf84f9ffa6e15ce699d6466e6e79fbf3aac254ad1bb86139b686d5c996ff6fc7704abb1b0b5478f95e22aa057ef7d5375fec345"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400}, @NL80211_PKTPAT_PATTERN={0x4d, 0x2, "0e311320a2dac3d360a017c5de8c1ba1cbff8810f6873bb9341f0f9c9ca81c74d950db5ce2174d0a6210a3007fc22de81340a407cee2caa087944ef86b81604cacc9f464ae0d623553"}, @NL80211_PKTPAT_MASK={0xfc, 0x1, "c9c7e4a3c4a4c7c87ca075e8ddb08f9ed4876401b0ac450e2732c9de94ce27c20ac9ddfc3d09040f3c77fc469d69ca13389592be3f4dc0bbb75a4098cb13bd1873222fb42e749543333d162944a2c1363a3c5030fc9d6a2299afdac431bacf5f06324e0f2f38b729c9eb5fd8d61edfef55235360c7c3b284ad069546d148a95f3c9cb4d235fb6b36e0309b688b1cd796052a4a40d71451b5db714df5d35f3b2797fe72830783a1b5366214febd94d407e37c498f26073a65f358b97054a70df3bb226bc2b0aefed85de1c2c7ce371f6fdfab311cab048de8164dbe3b1d8c86561556283e460d3ae3cd1d402eb3f69e310c28632d00288413"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x58, 0x2, "9e49009253558d2d1bf2ba6fe03164d037dfe8642fe250c20e86490e861c742352ed6b33b886a8d39c233373a3eaddb9f57bfcee70588bdf85d57327e8ffba9406b31c645130ec9b049cc786efe21f6e5e299a06"}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0x32, 0x1, "3b3116e8ea5e0dc6a520b0407ebcc56ffbb2044e5245cf5d610c091a0d020c2fc46dfddb60f4b8199b8dc4d38fec"}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x78, 0x2, "2f0bbac9f78050d6ef9f6ddfc80b2b3a8f8cf6199b55bcf6faa18e15c13a3f978a0a265e06f631181e4df7aced2a38392c4e1365bf458182027b5d6a409a3244b71371e9828543bab221383807cb9eb8d32937da3bbc9b94a4b1bae3bfb3f6ce9ce9340320049817c5a053cc36d146b600c61772"}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbe, 0x1, "f7f028eb0cf0140773cc7ff9df82609ae9e2ff8b705c4f7cd7b9056b0185367318abb9c0849503903d69c30d40d1823c1b4cadc7f73c0673c385954d93cd63ac2ab387e636dac910ee02af8e59755b640c1856be2da90f5b665dfc62f321b2c75b4ad0a930edb87b0363d9c6c53de4e5030faa21c7c0754d9bd842828670fd8fa9e78d31d0f711a51566374f9d227c4d20a3129a2d5479d1448191bffe7411161a5b7247b6c005fa2e9215d990e339159a065a3d8ed4649b3c02"}, @NL80211_PKTPAT_MASK={0xa5, 0x1, "fc6d349784f3965bae0c9fda1262948bda095808c94c5bcf7b1619ee49d0367a4ea63b75de6e3d50bb582878b99e5f09421cd6d74e275cd975ecbfd2930fefa294f765fe9f74536c68785054882768f0d6a2f5b6d4223dd2439058054ff4d989d82ff0396f3e7a90ab8ab0a39c0dad99a118d33dd3d0c49ccb87b14735df04189a08a14c11f7ce5ac850b2b0404e3c44de8f84bec61e3ff9f33ec4bd14a383e281"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb10}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x178, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x158, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xc5, 0x6, "9477bfdd42007fb2a8a7e9d21fddbf7b2388347dca6a2a451a28e3290873fc1264589bd771ca01705ea30d2801bb98faf86b13dfb8f03c73871b0f523b000a1413d2c0cdaba66ab687cd11db61b4de33328e79c3f947b5fab68d7ad89ea0cd26fd35541d8df2933ab67f813927dbc04578645ebad5ef6af4adbec9c19b348db667a056a7808cf6b2903e57c07841ab592814aafa16244f3c6a875cc1a4683e010740f4d45db3912805146cb14bcf9aceb8beba987972fd6afb6dff083435077a91"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x76, 0xb, "37a340743d6dc4800bad05fb15b482e77b321fbb9aad016bf9885b27bd1991979c82301d76811892859beddb57e94c13d6081483f922a0f9af8cc6237bec3954a37c4e7f0138fe4e59ee3d861b449ffde2a5c95ab12d69ad69ac1040af802d43f00a570cc92d171d1dda25cde9724a0d83f7"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x8200}}, 0x40080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x80}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r1, &(0x7f00000009c0), &(0x7f00000000c0)='./file0\x00', 0x3bd, 0x0, 0x1}, 0x7ff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:39:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x3, 0x2, 0x3f, 0x1000}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r3, r2, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000552c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000554c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000564c0)={{0x0, 0x20acd4a8, 0x7, 0x9, 0x0, 0x6, 0x8, 0x7ff, 0x240, 0x6, 0x7, 0x8, 0x6, 0x3, 0xfffffffffffffff7}, 0x8, [0x0]}) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x3, 0x2, 0x3f, 0x1000}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r11, r10, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r13, r12, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000056540)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057540)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4, r5}, {r6, r11}, {r12}, {r14}], 0x0, "9be42c6c091e2d"}) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2875.301330] serio: Serial port tty21 [ 2875.306028] EXT4-fs (loop1): bad geometry: first data block 240 is beyond end of filesystem (128) 10:39:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffffffff60000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2875.381117] serio: Serial port tty25 10:39:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x28, 0x2, 0xffffffffffff886c}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r3 = gettid() r4 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000800), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) r5 = gettid() r6 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x2017}, &(0x7f0000000600)=""/177, 0xfffffffffffffd08, &(0x7f0000000780)=""/117, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r5], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0], 0x6}, 0x58) r7 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r9 = fork() clone3(&(0x7f00000006c0)={0x129900000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x34}, &(0x7f0000000400)=""/227, 0xe3, &(0x7f0000000500)=""/207, &(0x7f0000000680)=[r3, r4, r6, r7, 0xffffffffffffffff, r1, r8, r1, r9, r1], 0xa, {r2}}, 0x58) [ 2875.421655] EXT4-fs (loop1): bad geometry: first data block 246 is beyond end of filesystem (128) [ 2875.439276] EXT4-fs (loop1): bad geometry: first data block 246 is beyond end of filesystem (128) [ 2875.451905] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:39:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffffffdfc0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:12 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3b7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x2000004, 0x40010, r0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x2}}, 0x0, 0x0, 0x1}, 0x1ff) [ 2875.616787] EXT4-fs (loop1): bad geometry: first data block 252 is beyond end of filesystem (128) 10:39:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:39:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffea, 0x0, 0x0, 0x0) 10:39:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffffffdfd0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2875.717846] EXT4-fs (loop1): bad geometry: first data block 253 is beyond end of filesystem (128) [ 2875.733445] EXT4-fs (loop1): bad geometry: first data block 253 is beyond end of filesystem (128) 10:39:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffffffffe0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2875.782641] EXT4-fs (loop1): bad geometry: first data block 254 is beyond end of filesystem (128) [ 2876.127490] serio: Serial port tty29 10:39:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000feffdffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 0x6}) 10:39:25 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:39:25 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 10:39:25 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:39:25 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r5) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:39:25 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70006d46df250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000120240001006d636173745f72656a6f696e5f636f756e74000000000000000037603c10000005000300030000000800040000000100"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(0x0, r3) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2888.531686] serio: Serial port tty25 [ 2888.543467] serio: Serial port tty29 [ 2888.562107] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r2, 0x101, 0x2) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/36, 0x24}], 0x9, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x2000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2888.606135] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) [ 2888.636268] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:39:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffcfdffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:25 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3b7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x2000004, 0x40010, r0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x2}}, 0x0, 0x0, 0x1}, 0x1ff) [ 2888.764769] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:26 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@generic, 0x0, 0x800, 0x1, {0x0, r4}}, 0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2888.842250] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xd8e6, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000040)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:40 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000280)="446ab7956ef7e7c0d2c00d04e18dbc902a48cd7f2b35a192afc95c6e8ea547a6336a232e6476dc35b43f7985bee8d57b36a3d0f496542799c6da0a97c5b7a85603e4187ce798eed697c0b58b8ae4eb3c72676277b80ac1859cc00b909abcab88", 0x60, 0x5, 0x0, 0x3, r1}]) 10:39:40 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x9, 0x3, 0x53, 0x0, 0x1, 0x988, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x560, 0xac80, 0x101, 0x3, 0x8, 0x800, 0xaf1, 0x0, 0xcd2d, 0x0, 0x800}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x4000, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x4, 0x3, 0x3b2, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:39:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200000, 0x110) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:39:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffdfdffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xea, 0x0, 0x0) 10:39:40 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x4000000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2903.547329] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:39:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2903.569163] serio: Serial port tty29 [ 2903.602283] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) [ 2903.609740] serio: Serial port tty25 [ 2903.640315] serio: Serial port tty21 [ 2903.650673] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 10:39:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f8cffffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_io_uring_setup(0x1379, &(0x7f0000000140)={0x0, 0xb37b, 0x1b, 0x0, 0x329, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x1}, 0x8) syz_io_uring_setup(0x5827, &(0x7f0000000240)={0x0, 0x68a1, 0x8, 0x3, 0x10c, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd=r1, 0x9, 0x9, 0x5dd82a4, 0x19, 0x0, {0x0, r7}}, 0xffff8519) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 10:39:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, 0x0}, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7f) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r10}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0)={r3, r4+10000000}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x724) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaff, 0x0, 0x0) [ 2903.766190] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) [ 2903.772372] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:39:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffea, 0x0, 0x0) 10:39:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3868, &(0x7f0000000000)={0x0, 0x1a1c, 0x1, 0x1, 0x270, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2903.847964] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 10:39:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ff6ffffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2904.380962] serio: Serial port tty29 [ 2904.484229] serio: Serial port tty25 10:39:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000ffeffffff0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 10:39:54 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101000, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x280, 0x41) 10:39:54 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0xe1, 0x2a, 0x52, 0x0, 0x7, 0x50, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x4808, 0x2, 0x2, 0x8, 0x2453, 0x8, 0x1, 0x0, 0x45d, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) recvmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)=""/117, 0x75}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x101) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xf8, 0x1, 0x7f, 0xf8, 0x0, 0x706, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffff7d8}, 0x400, 0x7, 0x6, 0x4, 0x3f, 0x2, 0x496, 0x0, 0x8, 0x0, 0x3f}, r4, 0xf, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000003c0)) io_submit(r6, 0x3, &(0x7f0000000300)=[&(0x7f0000000380)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, &(0x7f0000000340)}]) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040)="1919a4f40bdcd9c1d6a3335bade5", 0xe, 0x0, 0x0, 0x3, r2}, &(0x7f0000000240)) 10:39:54 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, 0x0}, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7f) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r10}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0)={r3, r4+10000000}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x724) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:54 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000010c0), 0x40c40, 0x0) sendmsg$inet(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)="14ffb7cc96ca4e9ccb590bbfd986375624bb076115c8600881fa8a742871850e83e7d24750293696de1feb72d770fc9d8adc6fe0c003a380e3995f2be1f85e56e04b2ba5cc9502cc0aebe92b7728faee6d4477ca0dbf9918121c500a5bedd4e615b1547e10d53d3bb5a7822ff4fc8ce2796aa487969e0d5832190ede910464c10134c42db6ec6ecda3a4226e55577d3c9f3b25eedbcff2b3f9a11620b9e3bd13b9de5bc8c8d35054f166939dd9b7fe0ab241206d6e8c0df6dd881d8b24fbb2f24823575d6b045f27c4d884034c4f7a466de06f7c7dcf7ffa499f", 0xda}], 0x1}, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x14}, 0x1, {0x0, r5}}, 0x9) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r7) syz_io_uring_submit(r1, r2, &(0x7f0000000840)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r7, 0x8, 0x0, 0x800, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="eb3915b184ab07169270986fd34c868f2c286741f477ef", 0x17}, {&(0x7f0000000340)="553e950756a8831041715a2a9ff9492a3c6372cd4cf593b91908e5a5aa45ad972a815eae20570be15954d74f6d14aac32b0e9bba534c85ae5546123dc00306699f7db05010356cb684d6c3ef9b0b6689704d19bb1ea43613d8352ea491db990de707fffb6abb26ce73d55d7dabfe89b9d77f5920680346b8c3bcb9928c1060b41fc0015f159b70200939a4d8049291030ba9fc7d8021f53762cb4d7d6d1aef3c584aa4d0660bc887ae2a07f2da7dec69831d875f26a549f5b9da61a19c1d88474f691db1ac6855ffb9c9b0860f357d117b58b540dd", 0xd5}, {&(0x7f0000000080)="e639a606f9fd0803acd1937058353d3d22fc8af8c48e2ae230b85e594e7322634057fec881a0dd4ebd8eac0cbb6de39694b0cb5dee3ed0c7e8fd6a38b77cae6c5fe01caa4d18", 0x46}, {&(0x7f0000000180)="5d6c3f4906442c15faf5cffbb920f66d95b18e539c7d083f09997cc806bb7ccb035af599694f974a4a664296e3082523e0a02aad9b013437c10ad4b86ce8daf00e55144423975b25272ad0417ee5359368c8d3943ef1dc4fc934b06167c03ca6a403c8983bb395ce93aba2", 0x6b}, {&(0x7f0000000240)="99e7", 0x2}], 0x5, &(0x7f00000004c0)=[{0x48, 0x88, 0x6, "3b486769c5eb0be771f77759ce8ff54074085b4b5ed60e3099026f823770c7cae06225b3ad4f79b3ccdfbdedfe8f20c5e8fdc8fd"}], 0x48}}, {{&(0x7f0000000540)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="596b9c38bb3548abc713a5de30511a4cc84be79b972ab5cf5005a51de17c3301e49b934a586e8eb6661063f629cfc1861371a3348b56af84fd4dbedacbec99bc32e8801b07a6c73f3e1d0721f3fca63fd593bac3b4a0925a7753ec9f4fe085c592b6d83ec15645c1b85d63b8e8f6d230ac43a592ebaace0197253d63dca109d8ddb0630bcdd515ee150fb7f216e82a9f1f4b302719a1c50b2beb4b415e56141dea08dbe1d16ca62d0ba117974cd996550cd9dac802d61037bdac958124e49041fb4a2da5fd5f", 0xc6}, {&(0x7f00000006c0)="5c105b46c89234ff0dd8cdffe26f5184b8e17fd31553bf6b8f9c777f8ba0807a08bdc95dcbf2026a193e5eacc644c12c4f0cd8da163495ba22bf569d4f15eae66475daf0656a3b4d0895a32b96", 0x4d}, {&(0x7f0000000280)="4b312c3d56f663428226483c34483e169f6ec3ce8e", 0x15}, {&(0x7f0000000740)}], 0x4}}], 0x2, 0x24000010) [ 2917.650115] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) [ 2917.668657] serio: Serial port tty29 [ 2917.678499] serio: Serial port tty25 10:39:54 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:39:54 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000040)=0x80, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000600)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x106, 0x1, 0xfffffff7, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x118, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x20048801}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00a5dd989200fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000100"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) r4 = dup(r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8000, 0x6, 0x8, 0x80000000}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004095}, 0x20008000) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2917.694495] EXT4-fs (loop1): bad geometry: first data block 255 is beyond end of filesystem (128) 10:39:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaffffff, 0x0, 0x0) 10:39:54 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r6 = socket(0x11, 0xa, 0x637) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x100, &(0x7f0000000040)=[r0, r6, r7, r0, r0, r0], 0x6}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:39:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000200000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:55 executing program 7: personality(0x400000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs$userns(r1, &(0x7f0000000000)) dup2(r0, r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r3) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xfffffffd}) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) [ 2917.795021] EXT4-fs (loop1): fragment/cluster size (2048) != block size (4096) 10:39:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffea, 0x0, 0x0) 10:39:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000300000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2917.898362] EXT4-fs (loop1): bad block size 8192 [ 2917.925395] EXT4-fs (loop1): bad block size 8192 10:39:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000, 0x0, 0x0) 10:39:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0], 0x6}, 0x58) r2 = clone3(&(0x7f00000008c0)={0x90074000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x15}, &(0x7f0000000600)=""/177, 0xb1, &(0x7f0000000840)=""/105, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) clone3(&(0x7f0000000940)={0x1800000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f00000003c0)=""/23, 0x17, &(0x7f0000000400)=""/147, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) kcmp(r1, r2, 0x1, r3, r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:39:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000400000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:39:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000300000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2918.033819] EXT4-fs (loop1): bad block size 16384 [ 2918.053155] EXT4-fs (loop1): bad block size 16384 10:39:55 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xa9, 0x5, 0x6, 0x9, 0x0, 0x6, 0x448a, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0x5}, 0x80080, 0xfffffffffffffffb, 0x7fffffff, 0x4, 0x3, 0xffffffff, 0x9, 0x0, 0xada, 0x0, 0x3}, 0x0, 0x8, r5, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000005c0)={{0x6, 0x7}, 0x100, './file0\x00'}) [ 2918.116630] serio: Serial port tty21 [ 2918.474311] serio: Serial port tty25 [ 2918.487520] serio: Serial port tty29 10:40:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 10:40:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, 0x0}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) lseek(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x1, 0x1, 0x1, {0x0, r6}}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x7, 0x143, 0x0, 0x9, 0x0, 0x0, {0x0, r6}}, 0xffffff81) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f00000000c0)=0xad2, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000500000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2931.371399] EXT4-fs (loop1): bad block size 32768 10:40:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r9) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x22, 0x0, {0x3}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r10) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, &(0x7f0000000040)={0x100000000}) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0x8000, 0xfffffffffffffff8}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:08 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="130229bd7000fe0000250004000008000101", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000100"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000401bf91e8af300005a5500002477a802d10500076a4e129275bdd63e975c01", @ANYRES32=r2, @ANYBLOB="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"]) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:08 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="080064428296769ecb88af4be4b52b8df77e00", @ANYRES32=r1, @ANYBLOB="738600000008005400", @ANYRES32=r1, @ANYBLOB="8c00648006007a002700000009001200e5806cabed00000071009200447c714888e4197176090ec29e3158f856ca550522eedd76e7987773ead8d66dc1af1d79dbf8437e6acf89afa5b20633112176a6b21cd7ba43415606d0449b9c9e387389c886f1a8fd1f0611a67cd55c5b711b46bb54f5f879b6c5573254a642ff944f0cc3ae7b73219b15ffd4000000f2b88a5af146e5dfa26b055aad8ed1ad0aab8859f1ea5279280fbd121057c133caf72852174b750df457d2982627c371f153a7ecf9f352ce74de264d2b7c1ec5175a52a74cca654d579da7ea29e6ef611a14449f9bd0fe105a8cbbd713270640be9e563e4a2933043d8f12577e183721d6227a174ea6a739cfefa4f8bbc4530a70a38a9e293efa8e25d37869268ef871bea8a9090a90d76170b95141bffa2ff88b18996859d39a23739edb47020175d8575a99edf7e75711c622a250644fe2243e9d24740a4e17042ce63683828dc308c6224ffeac4f3333155f4349f7666a920cb8831cf892325ad176f6b1b7bf0fd9ce9bb42a1def3a3454df6c10738b99ea80aaaafa68c2e517cec2745ab17a4929af8c05d3c9a2a333e42d3d178d3c37c86f404b12372b7498494e2ff167dfb925c3d5bd986d86cca938484be4fc9df2967404a84f932326ff109f2d1364fcefc1945859b6917a162a71832d9182126a8270c56e36cf044c11e1df85bc2d8644520797da620c1c07cbaeb03763c5f49a348a51fe2b14ed16b1b778c6fad0fe957790932d2e4f18f5147b7caa7addac5d49f08253f39bfc591e3ab598bea78c464995cd7d9de9e1ae04b42ee4c40a9dd57b4cb803e663e28f9da348706d1eb1f13d8cb1ef6e7af0cf83b01ac3ed7d756b0d00756b24121baf6fa059dcb5917f4b830382c192de96c38a5328404cb7d9aeec50b5342c9e08c711a2158e8a894f83dc68ea7a34a90e75eb4ae0e3ea00639620e3f3ce5cd999e73fd08266b0a156c329706c605124dda749f5a4c04a382334ae1e3d8c82efa0db73ec37dc9bf1bf4c6d0a96a0bd4e684573dc763bc5dce819e2791eb24bfd7659b99576deda1f54bf742df91f5f21217d75219ef29513eeba0e4a30e9f1ad8229fb2280495d8a88668b87323df81f66bc8a8fddc5f276eec4acd1e23b79f8b4654cb22266d460cc0e775d3422eec3990cb3aaf68dabe6adcd05e8ec0bc7c61de6ec94c78663dd42beac9dc6cf518d0b1c5e8c48412b3271bb61e0174f18ac747ef5572883e97b75e629b5a97f76b5e97d2029f29a9bafc178d79c9deb1b6578ba37282e6f434d2cb20547e9a32b13f6198d334466f2d96c74c2798d5f8582c012a1d281636577c46b5d4233f27aac0cccfc9f13cb5d170be8d0e1f38858e4563879c0eb56770a48fc0249d267a97229d53052594850268baacc18b5900980347f133650d1ec3f2611c96e7ff27beda1aa3ee7d38e6b17571c2fb5780c568b96b9c7c450905975cc147ee307c85778792c61446e6546fb7d1fdb903081d01b4566cc2abdf029ee66af58052b99cdf40fdfd7d0dfb4e8e6ca4e7f3dcc6bf1f310aaee932fb2ba312a00d59cc24e17e3cee8949dcb2a4b58777649fd9cf2e43ea4bcd4d75342112ac8e84cf50d459e30a188fa7101a26096d9bfd6ac089d1a720e07b7d5c1b04127f60b0ea4193ad4fc147d6e650df37ae023a7febd4ad0060ea293bdd6a3b284a3cba9007369fbd9755244c2bb956ee0dbe3d16cd3ae5804965b7c6d557bc95ddd628eeb53a38567efa7e08ba101380e51b8344cb77eff06b2393a7746e0e3d2a0a96713b793e93a17f51fcaf4193bd150d646f4bc3ddbcc15d4e17ac14d842fc1db808c9b15ca303433dfaf6c849bc87ca97a33bb708ab8f753ed18992009560648eb2a7130edd03961b943426583cd1108482977b77697434ec8754eaebad33da63f7c785c2c8c127186cc8c86c5c5a9eb384a0585b3fb990dca0b14e628b5d4be03fe7c3b94114afa2f4cb29c45b900ee74ba2f30873d5396ee3b1dd8d5032da5501c0bcef760b37fc2b2ad636c96eff5fbf3faafe001f1e2001135ec70d0bc9fcf45c58d9b5e122b011f0617cee4f55f2d8a18c281a84df4479ceb3f7fea56c10d871652250ded137ba55fef16791f56392a883ebeebdfa9df08ba1044863a03be7b365aaa12fccbc76ebcacd3bd3e146be1a016186cfb2996f24b577fb396bc338928aeb788d9e2d0808e8dab9b3aa9ab6180246dae866caca09bc3fca51079abc405231afce2cc833f71e1712fe1b01504df02396e04b874ef941352c2f323d1b7a86a336338ee8caf48dc19d22a59d5f5f484b3b722cc384a1c1ddf3a92be691c51cedd2b75c66e0e79792d2432f499942efd0cb057b1c75909a2c6341faf4679e5c8fd7b4c326dbe1ad1c0bcce7b248de976c0ea715e6d55e2601e9ec1efca98b649c6c4cfda769ddc5f37c94833e8cde1b771da03ceffd8724828f9acdeab22975d61b24ad6eeb89d8d9f16c31698b98fb36c971cf5cb516610313e6f2b64dd43c313baff5c184415ad8b25a9e2027bc50761b8b58f899d116e307788e815df4a9bf08ebe40ec5287b9385a966828063880b24ee3554f26fb57ea89fec995fe05068b5d5666f84da1d3d14d5e45c662430429cc351c43ca2055b411d949c3cc97c93d516324826809cfe5a3993a178ef48436483819684efdcd0bdbadabe5710abfb4e8eb027ca5cfb8e65ce30df1258cdb86d47f62de082f83d0336c1e1e0bc51cce451111f409be8c70d83c68d9be315b6041ca15a7bb6cd5a4fe620ef79cea1503d35bf82afadba726c88af939d01e6a4460d19ae58b8405140c884c31650876c9bcd5321ab275b80129e72198da521f9bb44839110c917391ccbb1332a38887142016dea779b4d3a721336a1e5f8c24c4059dff6e4d30867e47c47927c809616673e4b7af8fb5e05326d6b5732da1cc443d8205dcd79107a38f1ca4ef3e595d8da0615ffaaf1511d00adf37f41e3dc3f16b06356fb25ee65a0c511cc1fdbded172698fd8aff76f312f326452b63e3b035387af916cdc088827c5fcdc43f3dac0c0f2a099af6dba9694584580d6695786e3b5498a31768cb5ef7d68fd1f748a6d768a003a250eaa1b3b2e48122fd0dff8ad3fd8601881d114f64fb0e20812864bf992f56c5f09886a7cf573703ec209ecd26a094424717bbe2b886f3168b9efb96ba2640a85f04b129470022e05f631426206d9d8b24543cec21d92e9b7ea3509be7e7b5f72cdd522f6048dfa11c1a4871857e84348ad9d2716810fe02d4a853e894e0149d4aad684fc67aad46097f7a3c6942e48f22d8ded9000482d80b8b037e8e1371be7a65311d67a5b45e7ff1c5f5a9962db061c0474f4035431438e1517ef0c81e7a8460ea0b04ee549887041ea6cdb6219b9c6ea66b9bdb3b2476ffd43ff479674c9e87f9e319e487d4fdbff0faef647a2f954ec632670f1a57126c21d5c4a14ce644eb3918bc3c9cf215fc71720d85e4cdc2a59eb38dfca84ebac64b50edf77fef0a5703b4e99f139c15055eadf7b397a4c2bda361547a3da90dacd586b8291c3911fffd18c6c57818a26725cf151d0548d8e3d5e596651e2da67c315a373261a74ab1c515288ab2edcdda039165fd8f7164018250926e407b8c311e1bcd7da97e1031ff9afc624ace203fedb4ba2ec69f214fc275d713ac124f7f4937129c5d9605dada07c0229d5d2b2a26b8c6c7247d4fedf7fdd87ad858e60705e50b883da66534676983aa54a2a15da5571bf0366caa0bde31d07d161ca1e96a918a8465b1507cc2cc41514f69c6434411c2f9553fdda62b89ffbdd4c62d5a4d905c4f5e2a45a61fd0119e043894d55e8ddcf910ff452b45456ad8fd99af0213970a0b10e444b6b891d9d3270c326bfc83cbe70e4daf93da7f13b66353d9c1116ed7004d8e806c26e9e6ac88a33f851a10db51cc34a1dc5df5ee55976f61493f8e7019bf5532799687c917871c3ba6060457be33eac45b012a1137aa331531999dc1bcc27f09eaa851a7ca712d9c2bff45bb61c0f096cb13b821ef78d56d1bd5a7dafad726a4d3790975f9f30b7664a66aa4af2781eb42c6fbe0efbe1c007bc50e9f7cbf505ba11d5746b71cf4732e788b6490bcc77f37a6d07981ad294bf4463a372f8d811a135aa5ab7ec4209c1c25d4d36f1488892e55c2d1c42a5af4cac1d22434b8d0a40ec3922eb41b54b7f24ff72689ffc0ea8cf65f0555b33c1ae6534f56fa74955f2f374a34be71859ecea8e14e2ca6ad52ea21536d15f79e0b06aaf0fd3233add4a977f3649b8a6013c9bc01d2522fe2dc469e8ef800049a10605bdfb22737111fdaf51a318b47ac6cd2bc4c1455e782fad02c2483716642e386f6f3fcd7ad3e42c810ebc924d3bf3974df91505961853dad4cfdcce5737ed972b2b86ed79ad2f094e4d97e99081b3c93ebeac4e042af0979b80f6f94279a88a7bede9c06577233b157ef8592dc8bf6040d2b0b2fee2452ddf2afc58633a926924a46090d0eccf97fd2a232c450ce6838a80068fdcfafd0dc8832b8589113a0e553387031051963633516e56f2155841a82889a49b208bd9c0c9b0d070d025bbdd85b7f643064f452f579095af85499c03d6f3f8c671ea13d6007c74ada126e09603365b3def62915b763a5bc7ebee150176cea53711153ff3276b13961b7bb605a1851317c7489fc16b02cfc3999706eee37d9c3267c3d65205ff32f25f7af806ac75824392b39b36205f7ab7d99addf0ac2db0a255dd21c4724a12d77ad814be2b6919de7e1f1649632a95588b204f3838d093b0b3bae4e89d32f16096a647b215b0483357529a0008127f7b163408eac169cd0f01bce35db682630c6f2bd8fa1cfe7cdaef80ffb2f997936b4d0d526d705a7c9fea5980d37f392ab9abdea3ddf83fa402373824ae6fe2cac630778464ff8e898b2f15b2a5f1505a38b22d14a2822055a9a0daadaf3535329fc8130d4483deb3c2cb09c9b236ffbb7834349dffa749fcd0d8232fbe30c868c6a772f94dd34a2793c67257fd78928cf167288a3233ca0a223161f1691612bcd8d19aa0b5881a250f167017f5b1c06df39547fc4bd44324d5986ab74af541d64b4c3c55861b8f4fed18c155b07cf1bef49899f58d007f50eb8f9064910acbf2c8e8a773d4db509c17fc4278ff28f33aeef99135fd235b5404d2b16a468ba5e76c3753c21c835b0eb06304556c484f38e3994e93782a9ee490f32e3de20a58dfaf0ff669c20f2284852eca55bf8fc7eecb58d4387df45dd419bef397ce7b68c9bc6d750d528a3633df02cec3b5a56935446ebaf3624ecfe3f0ae6a2b319e5a8e22e8226df753451f47eeceb9c8ab8d987d322137b1a524bfa08262f6e3d56344b86eb7cf1e063726e7cde5fbb2e9b6417a00a5c82cc4e65a8939fcb5a96bcf949259b8d0b2bbd8552abe0b22cb29f6839cfe8d68366d8e6d2b5e6b9f7f96576ff34d314bc33fdd1996cfac30c7c779ff87722cc258bc66cd2f5fba1cdbeac8b99ad2bd9b7c4ba5a66200bf938c0c2e521e44aebd2569ee7853608c03e401e8c6c4760080196abf8dcbd8a9036035bea836d72f5a7e8205aea163fe3a85cbb2f7027e774f4f95db413a6e14f2b02c2d205a8714a4953b28f102a43503c8da251079eba81c614e881e97d4a3dc24f16cc95052a5272312c2799b319cdedbc814d44b7877a5b4cc1bcef5bd81b7d1c40156ed4ec11c8ae5d0100ec8de71a3503ef8e58a849ea80c11b499fa0336762d001ce0970285b75daa395e1ff2946b95b47c81f1851ac7ab5e61899eec92b709b60846bf6e5b62d31181f6055bba67f06c964ba00bc1fc1521412825282dc67f41cf9427db20e31d3cadf1c9ef6a6180204096fa6b6aa592d3fa8391a7a7957e77ca20c36cefcf4655d7d7d3f218b99ec8f723a8f554453f9efd9ec37881c5a46fec5c1c624c546c8f9526268fe408b21bf9f4733ca1f2c762c9aea7777aa79fac73f45fcee6c6c0dad2a5fd7c2ee61901faf97ff5c730fd551d343cbc05041a1b11a54fbca29ce1494efa57dae8d8f0b424c1ba7e2172ec9f96f9171b01087d9a1bffc053b0bcb213fb73c23a93b066d3b8832bad7a654ec92e8df17b4f0a51b9b2f28305e03b739d81c1b1dee6bc7a55a4650ffd91893c2ce3a839c4caf8eb4ce4f769879f4f0fe3ba2e311187e8f0692d65bea7f25970c4bf1465e598e9c87cd7bd7710c4c1c38b2c0bf329b40a2e5bf6f9272a44147be7b5924427d1aa414cc2883f8bed6d248057410365030a13d99"], 0x1494}, 0x1, 0x0, 0x0, 0x854}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001680)=ANY=[@ANYBLOB="010000000100000018000004747ab82a1a36c11458561ccbae142717fa5997031058a4d37e040056558c7706e6eb21bde3d2ab7bf20635e6e1aa1895901361582d97a1a9b3b100f4a6e658a5cbf3006731fb0200e9343c02cc2d6daca1cb4da120376e4e95b95ab94eb2ac716abafef6aee377b784dce54ae7d0983dce768169bc8f5f9d62448102769b6c31ea8471f2f8cc7807000000ad8fbbf705ea9166152e2a9c37546850c91ab9be24a786527b185b84b8ec801224f36627494ee7e745d0b8fc998d56ecbd6c192290336949130ee5ac961be46d15392247e7c1137f894539bd6678a338ded6000000", @ANYRES32=r0, @ANYBLOB="01000000010000002e2f66696c653100"]) [ 2931.389682] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2931.403319] EXT4-fs (loop1): bad block size 32768 [ 2931.431877] serio: Serial port tty29 [ 2931.435108] serio: Serial port tty25 10:40:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x480482, 0x94) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:40:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000700000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2931.566423] EXT4-fs (loop1): Invalid log block size: 7 10:40:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2931.615007] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:40:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000f00000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 10:40:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) [ 2931.735104] EXT4-fs (loop1): Invalid log block size: 15 [ 2931.746826] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:40:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000700000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2931.792144] EXT4-fs (loop1): Invalid log block size: 15 10:40:09 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x8b2, 0x80, 0x4}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x190, 0x0, 0x23, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x726}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "04917aaac13f595e6d42f09ab7efd76f6488b8d585c73e110b63929362"}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2931.931444] serio: Serial port tty21 [ 2932.260208] serio: Serial port tty29 [ 2932.272157] serio: Serial port tty25 10:40:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:23 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={0x9c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4814) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dfffffee", @ANYRES16=r0, @ANYBLOB="000427bd7000fcdbdf25060000000c00028005000d00010000000800060009000000080004000500000014000180060001000a000000060001000a00000008000400ff0100000800060009000000340002800800060001010000080004000000400006000e004e210000080007000500000006000e004e20000008000400020000002c00028008000300030000000800040008000000060002004e240000080003000300000006000f009e4d00002400018008000500020000000800060077727200060001000200000008000b00736970000800060000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40080}, 0x20000045) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x76}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000840)={0x0, 0xc327, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000001b00000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2946.284563] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:40:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x7, 0x2, 0x1, 0x0, 0x7, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x2420, 0x9, 0x865, 0x4, 0x7, 0x10000, 0x1ff, 0x0, 0x59b3, 0x0, 0x51}, r1, 0x4, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x7, 0x9, 0x1, 0x40, 0x3}) 10:40:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaffffffffffffff, 0x0, 0x0) 10:40:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x5b80, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x0, 0x256, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c, 0xe1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x7, 0x2, 0x80, 0x4, 0x4, 0x0, {0x2}}, 0xe4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept(r9, 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) 10:40:23 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6f, 0x4c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x21}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x5a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000904) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2946.357006] EXT4-fs (loop1): Invalid log block size: 27 [ 2946.361774] serio: Serial port tty25 10:40:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000140)={0x0, 0x9, 0x0, [0x0, 0x1ff, 0x9, 0x0, 0xffffffffffffff37], [0x2, 0x1, 0x9, 0x3, 0x3, 0x7, 0x7fffffff, 0x7fffffff, 0x5f47, 0x4, 0x80, 0x7fff, 0x3, 0x1ff, 0xe61d, 0xb23, 0xbd9, 0x9, 0x4, 0xfe2, 0x800, 0x7, 0x4a, 0x0, 0x89, 0xa, 0x81, 0x8001, 0x20, 0x401, 0x7, 0x1, 0x2, 0x1, 0xffffffff, 0xff, 0x6, 0x4, 0x2, 0xbdb20000000, 0xfff, 0x1, 0x8eda, 0x0, 0x8, 0x3, 0x2bba4493, 0x5, 0x38, 0x4, 0x3, 0x8000, 0x4, 0xff, 0x1, 0x203, 0x401, 0x40, 0x4bf7, 0x800, 0xfffffffffffffff9, 0x2, 0x81, 0x3, 0x3ff, 0x7, 0x7fff, 0xd11, 0x6a8, 0x0, 0x2, 0x1, 0x1ff, 0x7, 0x8001, 0x0, 0x8, 0x8001, 0x188d7e0f, 0x1, 0x7, 0x400, 0x8, 0xf9c0, 0x3ff, 0x9, 0x2d5, 0x6, 0x8001, 0x9, 0xfc8, 0x5, 0x0, 0x100, 0x0, 0x1, 0x40, 0x6, 0xf53c, 0x4, 0x4430fe7d, 0x3f, 0x277, 0x10000, 0x7f, 0x2, 0x42f, 0x8000, 0xdadb, 0x1000, 0xe58, 0xb84f, 0x58, 0x1, 0x81, 0x4, 0x4, 0x9, 0x1, 0x3]}) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 2946.407673] serio: Serial port tty29 10:40:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 2946.428112] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:40:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000006651e00000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000002700000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:23 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000140)={0x8, 'batadv0\x00', {'macvlan1\x00'}, 0x2}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 2946.608467] EXT4-fs (loop1): Invalid log block size: 39 [ 2946.638971] EXT4-fs (loop1): Invalid log block size: 39 10:40:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/254, 0xfe}, {&(0x7f0000001440)=""/178, 0xb2}], 0x5, &(0x7f0000001500)=""/97, 0x61}, 0x0, 0x10060, 0x1, {0x2}}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x680042, 0x23) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) pidfd_getfd(r0, r1, 0x0) 10:40:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000004000000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:37 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14002, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x18, 0x50, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x21, &(0x7f0000000300)={0x0, 0x45ae, 0x1, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:37 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x200000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x4e24, 0x9, 0x4e20, 0x5, 0x2, 0x20, 0x90, 0x84, r4}, {0x3f317f45, 0x5, 0x2, 0x2, 0x2, 0x8000, 0x5, 0x5}, {0xfc, 0x8, 0x4, 0x8}, 0x7e, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d5, 0x2b}, 0x2, @in6=@remote, 0x3505, 0x3, 0x0, 0x8, 0x5, 0x5, 0x8001}}, 0xe8) r5 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1}], 0x1}, 0x24004005) openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0) 10:40:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x3, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r6 = dup2(r0, r0) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x3, 0x8, 0x7f, 0x0, 0x10000, 0x60000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x20, 0x9, 0x6, 0x7, 0x1, 0x6, 0x101, 0x0, 0x81, 0x0, 0x6}, r5, 0x4, r6, 0xa) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:37 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c08028038000100240001006d636173745f72656a6f696e5f636f756e00000000000000000000c2c983b1000000000001000100"/63], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x98, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20}, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = dup2(r4, r3) pipe(&(0x7f0000003280)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0xa9, 0x40, 0x5, 0x0, 0x80, 0x44000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000440)}, 0x0, 0x1, 0x7ba02619, 0x6, 0x3, 0x200, 0x6, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x8) [ 2960.408488] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) io_submit(r7, 0x7, &(0x7f0000003500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4f5457bf094a86fd, 0x3, r1, &(0x7f00000005c0)="75468ee208c8be8d1df86147c7d2eb6fa7adb53257c839bcba7aa1681e5bbe99a6e61740c7146bd5b006c3652bd214e7d3b608ad6cbaaf16c204de38d6b5c8a38f1ce5375bfc76e2d0fc653172949776415cca0e8fe802ed77d3ca73963f1372b054772fe3c40e70918f53e69dde5d303931470665d5fa618ef3d71068501ed63ec6c8a586ed479f148d5eae7da8ea723603ef6ff680d7de5768e9c2038eb88b070e2fe084c0927219e99415122c459a02cab1979a52a7b86d7ff56e40a1015549a6155025f6bd3cd4d8d635f378129625784d3313d80f2e5576a47b11fa1a91e1bbb6d7fb16993565d5", 0xea, 0x8001, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xfffb, r2, &(0x7f0000000280)="85a83635dd5120239c516baeb21ca4790d34019052ef", 0x16, 0xfff, 0x0, 0x3, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, r6, &(0x7f0000000380)="0ea715823a18e4094d2583370fac62f9358d4da6ce44e8320fd342ed62f42385d78b920b7b5917a6b1c9a2d23a5a73d72dd24d0159572a6a36efd98d3334cb581cbc47b306d32607ccec0436a84e3c1f72d7fae26ab5baf23985b287d99c82fc62117cb57d91bfa7f20b925cb7f4c0dc87524538d7d0154c1e0007fc0d70", 0x7e, 0x5, 0x0, 0x0, r8}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x3, 0x81, r6, &(0x7f0000000740)="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", 0x1000, 0x1ff06416, 0x0, 0x1, r9}, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000003300)="6e94c6d2640200c57c48c8a405017dd42c34a68780c50afc67b331331d04d2464d9f0c6527f52481ad54aaa493", 0x2d, 0xffffffff}, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000003380)='\r', 0x1, 0x55d5, 0x0, 0x5, r2}, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000003400)="8f4c542ce56c8a4ae790cc66fea7ac78fca246ea1cdbe56df1e16b5047467fd66c73a4aaabf97a55200a70f926486c93df18e0f29a4c9c824f315fa647da2d5730281773380012ac24a555122ebd4217bf9f5477e2f5a8336a66d1f32b919cc70879297cde4961e6f15b55201a2a24d2390ed97c8b19a048aaccdd29d2ed8bc5ece7e294c0566acb3ae68d99c9cbaef4", 0x90, 0x8000, 0x0, 0x0, r2}]) 10:40:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffea, 0x0, 0x0) [ 2960.451166] EXT4-fs (loop1): Invalid log block size: 64 10:40:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000fffffffffffffffff00000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xd43, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2960.550091] serio: Serial port tty21 10:40:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:40:37 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x8c, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, 0x4e20, 0x7, 0x4e23, 0x3ff, 0x0, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x8, 0x80000000, 0x1, 0x4, 0x4, 0x5, 0x6c}, {0x9, 0x5, 0x5, 0x3}, 0x3, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0x0, @in=@empty, 0x3504, 0x0, 0x0, 0x1, 0x3c665728, 0x9, 0x7f7b0010}}, 0xe8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:37 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r0, 0x9) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x90) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2960.661956] EXT4-fs (loop1): Invalid log block size: 255 10:40:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xea) 10:40:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x20, 0xfff}, 0x100, './file1\x00'}) [ 2960.683735] EXT4-fs (loop1): Invalid log block size: 255 [ 2960.701991] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:40:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000200000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2960.809651] serio: Serial port tty29 [ 2960.816282] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2960.817497] EXT4-fs (loop1): group descriptors corrupted! [ 2960.832391] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2960.833597] EXT4-fs (loop1): group descriptors corrupted! [ 2960.882346] serio: Serial port tty25 10:40:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:40:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x20340) clone3(&(0x7f0000000080)={0x221848900, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0xffffffcf) openat(r0, &(0x7f0000000140)='./file1/file0\x00', 0x18b880, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2f80}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) io_uring_enter(r3, 0x336d, 0xc83b, 0x2, &(0x7f0000000180), 0x8) 10:40:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x20, 0xfff}, 0x100, './file1\x00'}) 10:40:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaff) 10:40:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000300000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2961.318669] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 12160 (only 16 groups) [ 2961.402768] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2961.410352] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2961.412715] EXT4-fs (loop1): group descriptors corrupted! 10:40:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffea) 10:40:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000400000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2961.618934] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2961.621095] EXT4-fs (loop1): group descriptors corrupted! 10:40:38 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14002, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x18, 0x50, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x21, &(0x7f0000000300)={0x0, 0x45ae, 0x1, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2961.724645] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2961.726734] EXT4-fs (loop1): group descriptors corrupted! 10:40:52 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x8c, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, 0x4e20, 0x7, 0x4e23, 0x3ff, 0x0, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x8, 0x80000000, 0x1, 0x4, 0x4, 0x5, 0x6c}, {0x9, 0x5, 0x5, 0x3}, 0x3, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0x0, @in=@empty, 0x3504, 0x0, 0x0, 0x1, 0x3c665728, 0x9, 0x7f7b0010}}, 0xe8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:40:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r4, 0x8000000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r4) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 10:40:52 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r2}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f00000001c0), 0x1, 0x1, 0x1, {0x0, r2}}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r2}}, 0x400) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:40:52 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) getsockopt$inet_int(r0, 0x0, 0x224ee7a352fe0ea3, &(0x7f0000000000), &(0x7f0000000140)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) 10:40:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000500000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2975.124116] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2975.183167] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2975.185336] EXT4-fs (loop1): group descriptors corrupted! 10:40:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4f9, @empty, 0x5020000}, 0x19) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:run_init_exec_t:s0\x00', 0x25) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x12, &(0x7f0000000140)={0x36, 0x3, 0x3}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)) 10:40:52 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fce8df2504000000280001800800030000000000140002006e723000b00400000000e6ff0000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0xd4}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r3, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x5b0a, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x400002, 0x2b0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2975.261136] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2975.263286] EXT4-fs (loop1): group descriptors corrupted! [ 2975.273514] serio: Serial port tty29 [ 2975.292939] serio: Serial port tty21 10:40:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000600000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000700000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:40:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2975.395610] serio: Serial port tty25 10:40:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x15e10, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 10:40:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000800000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 2975.620705] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2975.622914] EXT4-fs (loop1): group descriptors corrupted! 10:40:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x15240d00, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0xfffffee2}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x66, 0xff, 0x7f, 0x3, @tick=0x1, {0x7f, 0xfe}, {0x1, 0xad}, @raw32={[0x7f, 0x5, 0x4]}}, {0x3, 0x81, 0xfa, 0x8, @tick=0x2, {0x4, 0x7}, {0x8, 0x5}, @ext={0x9a, &(0x7f00000002c0)="b5ca3c9532274fbd1e13c90776972022695120b5cb860ef5094ffc083c3f409f935c02597a16d9be6652156a53019af38edb3b09bafc7e05dd87c1d6f019bd443a9afb4d3013f7d97bdc3316201a933afcb1d79e1cc79ac2375a5b36e890f9ec39f7185093e24bb2b35d6ddf1e939b7f7cb3c56c1a1d81e382ec40a899d9a801457b013a6454e94c58c557d86e897d692ae764354847935fb8cc"}}, {0x91, 0x5, 0xff, 0x1, @tick=0x80, {0xe4, 0x40}, {0x81, 0x2}, @time=@tick=0x6b}, {0x85, 0x8, 0x2, 0x5, @time={0x1ff, 0xd}, {0xc5}, {0xf7, 0x1}, @quote={{0x7}, 0x8, &(0x7f0000000140)={0x76, 0x1, 0x2, 0xff, @tick=0xffff, {0x81, 0x80}, {0x9, 0x9}, @queue={0xa4, {0x2, 0x8af}}}}}, {0x2, 0x0, 0x81, 0xff, @tick=0x4, {0x9, 0x1}, {0x80, 0x1}, @quote={{0x0, 0x5}, 0x2126, &(0x7f0000000380)={0x9, 0x7f, 0x55, 0x0, @tick=0x3, {0x3, 0x1}, {0x7, 0x2}, @addr={0x6, 0x8}}}}, {0x3f, 0x17, 0xff, 0xe0, @tick=0x1, {0xc0, 0x4}, {0x6, 0x3f}, @addr={0x90, 0x4}}, {0x3, 0x0, 0x32, 0x3, @tick=0xfffffff8, {0x9, 0x5}, {0x4}, @connect={{0x8, 0x8}, {0x7, 0x3}}}, {0x0, 0x8, 0x7, 0x4, @tick=0x8c, {0x8, 0x3f}, {0x3e, 0x8}, @raw8={"ab4ad85a9345ff69ac3db79f"}}], 0xe0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="f419d7ee5f883fff555b53e2000028641482bf8c22f7106f6f7ebc004d66a1de6e51b26ce93bc151a1"]) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="e1ae19ad9176e8894b78a9d55919e4866b1334ddcb43d6ef71dc317ef2682f2d12783797346e9385c2a99efec07fde157c7c6cd99658a645996371383d7bf4795af438f56c907d7b2546d1cd4cd565bd6961d4abd3e91c9038e26b6dbb97631945d45bd2694c6a2651e4a5838755fb01eaff753eab051e9d12b5c13ce0bd3a1d7deadf20262acb65e26269f16b1c2cf06c3ff3f666a0d60e68f8232cac653fa159cc02b3be80ee64e8cadd25ef08a2c5987453759b59edd47ab014e38f35da044d99fa2673016a9cd3ca62932dd45acd66841f0a92233c6b3c8209af461fcbf1327a0aaad660742424e0d6124afbf48325203a50ff71a8ea1b3c4056cd59e402") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0xc28, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x20040095) [ 2975.665074] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2975.667222] EXT4-fs (loop1): group descriptors corrupted! [ 2975.713298] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 2976.073763] serio: Serial port tty29 [ 2976.079624] serio: Serial port tty25 10:41:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000b00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:41:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x15240d00, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0xfffffee2}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x66, 0xff, 0x7f, 0x3, @tick=0x1, {0x7f, 0xfe}, {0x1, 0xad}, @raw32={[0x7f, 0x5, 0x4]}}, {0x3, 0x81, 0xfa, 0x8, @tick=0x2, {0x4, 0x7}, {0x8, 0x5}, @ext={0x9a, &(0x7f00000002c0)="b5ca3c9532274fbd1e13c90776972022695120b5cb860ef5094ffc083c3f409f935c02597a16d9be6652156a53019af38edb3b09bafc7e05dd87c1d6f019bd443a9afb4d3013f7d97bdc3316201a933afcb1d79e1cc79ac2375a5b36e890f9ec39f7185093e24bb2b35d6ddf1e939b7f7cb3c56c1a1d81e382ec40a899d9a801457b013a6454e94c58c557d86e897d692ae764354847935fb8cc"}}, {0x91, 0x5, 0xff, 0x1, @tick=0x80, {0xe4, 0x40}, {0x81, 0x2}, @time=@tick=0x6b}, {0x85, 0x8, 0x2, 0x5, @time={0x1ff, 0xd}, {0xc5}, {0xf7, 0x1}, @quote={{0x7}, 0x8, &(0x7f0000000140)={0x76, 0x1, 0x2, 0xff, @tick=0xffff, {0x81, 0x80}, {0x9, 0x9}, @queue={0xa4, {0x2, 0x8af}}}}}, {0x2, 0x0, 0x81, 0xff, @tick=0x4, {0x9, 0x1}, {0x80, 0x1}, @quote={{0x0, 0x5}, 0x2126, &(0x7f0000000380)={0x9, 0x7f, 0x55, 0x0, @tick=0x3, {0x3, 0x1}, {0x7, 0x2}, @addr={0x6, 0x8}}}}, {0x3f, 0x17, 0xff, 0xe0, @tick=0x1, {0xc0, 0x4}, {0x6, 0x3f}, @addr={0x90, 0x4}}, {0x3, 0x0, 0x32, 0x3, @tick=0xfffffff8, {0x9, 0x5}, {0x4}, @connect={{0x8, 0x8}, {0x7, 0x3}}}, {0x0, 0x8, 0x7, 0x4, @tick=0x8c, {0x8, 0x3f}, {0x3e, 0x8}, @raw8={"ab4ad85a9345ff69ac3db79f"}}], 0xe0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="f419d7ee5f883fff555b53e2000028641482bf8c22f7106f6f7ebc004d66a1de6e51b26ce93bc151a1"]) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="e1ae19ad9176e8894b78a9d55919e4866b1334ddcb43d6ef71dc317ef2682f2d12783797346e9385c2a99efec07fde157c7c6cd99658a645996371383d7bf4795af438f56c907d7b2546d1cd4cd565bd6961d4abd3e91c9038e26b6dbb97631945d45bd2694c6a2651e4a5838755fb01eaff753eab051e9d12b5c13ce0bd3a1d7deadf20262acb65e26269f16b1c2cf06c3ff3f666a0d60e68f8232cac653fa159cc02b3be80ee64e8cadd25ef08a2c5987453759b59edd47ab014e38f35da044d99fa2673016a9cd3ca62932dd45acd66841f0a92233c6b3c8209af461fcbf1327a0aaad660742424e0d6124afbf48325203a50ff71a8ea1b3c4056cd59e402") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0xc28, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x20040095) 10:41:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:41:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffff) 10:41:08 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500e1dc3a30000000ddecacd9edc52a4fbd878a5070bb9f5fece7715956c221a7177fb4933aee30592969e403322a842555c0653c8827248fd85f8d02fec25ce0b236b81a5bcb0d1bc47a13c61972655a9aabffa79fc3e1ee199d3c057be2a12215dd5a4c3b7e7ce12c39a9d8c705c65fb5f8ba36a0f8f1b70410a21f0d705e1b20fb3d4a2399fcdd1192caaae8fab4c0642e39c5af187085fc6d9a167846fa4fa1c18307236292beae5e14cee1dceda6da5f39b6a25b972d648ef9cfeb9b5972bd5e188471"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:08 executing program 7: r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x100) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x40) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) 10:41:08 executing program 3: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000340)=""/4096, &(0x7f0000000040)=0x1000) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2991.257536] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 10:41:08 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 2991.305431] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 2991.307479] EXT4-fs (loop1): group descriptors corrupted! [ 2991.341688] serio: Serial port tty29 [ 2991.484485] serio: Serial port tty25 10:41:23 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f001800000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:41:23 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/53, 0x35, 0xde) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000014000200767863616e31000000000000000000001400020062726964676530000000000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40051}, 0x4044) r8 = fcntl$dupfd(r4, 0x0, r4) sendmsg$inet6(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) accept$unix(r8, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) 10:41:23 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x200000000000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:23 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x503e81, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xee01) dup2(0xffffffffffffffff, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfd5a, 0x3}) 10:41:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:41:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffea) [ 3006.301376] serio: Serial port tty25 [ 3006.337421] serio: Serial port tty29 [ 3006.345201] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 3006.353196] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3006.355311] EXT4-fs (loop1): group descriptors corrupted! [ 3006.402429] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3006.404586] EXT4-fs (loop1): group descriptors corrupted! [ 3006.452000] serio: Serial port tty21 10:41:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f001c00000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) [ 3006.524967] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3006.527162] EXT4-fs (loop1): group descriptors corrupted! 10:41:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24100, 0xa) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x8000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="96d37f0a36c6994238b2bed3ee35b5d387f58f31ba8c97db3548978d07a5b5f01c2582f61bbddde21ed503d9b8fef38cdecea435e9b3567f5088db4c39da2567cf782059a5dbf63ba69cc2873ac9721d4017ed33b2ae35d82a960a98730b3d2a01ecc6cc6df4171fd9144f4b379be79d", 0x70, 0x800}, {&(0x7f0000000200), 0x0, 0x5}], 0x9020, &(0x7f0000000400)={[{@fat=@nocase}, {@dots}, {@fat=@errors_continue}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x4dd}}], [{@pcr={'pcr', 0x3d, 0x26}}, {@euid_gt}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_measure}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clone3(&(0x7f0000000080)={0x21810900, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:41:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) [ 3006.571718] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3006.573984] EXT4-fs (loop1): group descriptors corrupted! [ 3007.177235] serio: Serial port tty29 10:41:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f006500000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:41:38 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0xa, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x32}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x41800) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:38 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500e1dc3a30000000ddecacd9edc52a4fbd878a5070bb9f5fece7715956c221a7177fb4933aee30592969e403322a842555c0653c8827248fd85f8d02fec25ce0b236b81a5bcb0d1bc47a13c61972655a9aabffa79fc3e1ee199d3c057be2a12215dd5a4c3b7e7ce12c39a9d8c705c65fb5f8ba36a0f8f1b70410a21f0d705e1b20fb3d4a2399fcdd1192caaae8fab4c0642e39c5af187085fc6d9a167846fa4fa1c18307236292beae5e14cee1dceda6da5f39b6a25b972d648ef9cfeb9b5972bd5e188471"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 10:41:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 10:41:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="0200ecf4b82c2dbd704a4bee5455de01afc1d0af610692bb9d57c58fa5ede626401f5ff051c896529bb9aa07195bfcaf7ca7f8c07184deea68161784040c3dc115ed1dc3ca5a62305913a59b7d3cb13204c28c8eee7d81c2aaa157681c2320277faf6811c5cc93c9517f8909e136d33da043f5edf040d93eba99de7e68cbf906b1e6d6ebfdf0dcc173791d889aeb403cd8ca07840b55e16a8ed74b1faf0b6c93dd3a8f3a1786b605c4cbfedccd8b6da966142b9d4c20dea5120cc4181f5f0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44008084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='schedstat\x00') r3 = clone3(&(0x7f0000000080)={0x241945100, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e401000016efa629380ff3cf8fc53f", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x200400c4) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r7) ftruncate(r7, 0x100) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) dup2(r5, r6) clone3(&(0x7f0000000480)={0x200, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x15}, &(0x7f0000000300)=""/128, 0x80, &(0x7f0000000380)=""/177, &(0x7f0000000440)=[r3], 0x1, {r1}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)) 10:41:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:41:38 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r8 = dup3(r2, r2, 0x80000) io_submit(r5, 0x3, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000000380)="fe73db2e8ac885960cb7dc029cc78c81d0c37bb6cb8ec36babc1b2f00efff7adebda8d3b77c9fdeb1c1ff7de482c6ef011a2345bb08e71f84a429bb7e017d6c188ce78be843900ca4082846ada2b622ddaa2723b4653bef2", 0x58, 0x0, 0x0, 0x1, r7}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x100, r4, &(0x7f00000005c0)="1795b1c4b853464d9cc0af84c00188be06d03444e5ad371907fd7b887dc41eca24e9fe942654ece91a80c4f821911375e7064178c18ef8a57b8e5f85f95c909c873745e5e6c375e312f0f9a2c29f8f02abbd54e688ea348b79a8c86f71573f68f0593c176b495586df16e347fb1f30720437a97fd5ebf358c41b31f24319b18a5a46bab6cc843dd3fc3b8bcc8343401cfbb8b31dde1e991c0f9976733880b4c5777b22696b4a9f009555c44a2351802d05c3c5990c75fb4b39416a86fe9d3fc8b4675f7fd1", 0xc5, 0x5, 0x0, 0x0, r8}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xfffb, r6, &(0x7f0000000240)="d1fe509f4272f36dd775213e0701872442ca645abec2cfd69680dcc1c415", 0x1e, 0x3ff, 0x0, 0x3, r0}]) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 3021.093066] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 3021.106710] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3021.109535] EXT4-fs (loop1): group descriptors corrupted! [ 3021.115243] serio: Serial port tty21 [ 3021.132780] serio: Serial port tty25 [ 3021.178659] serio: Serial port tty29 10:41:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000003000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:41:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000001280), &(0x7f00000012c0)='./file0\x00', 0x6bd, 0x3, &(0x7f0000001540)=[{&(0x7f0000001300)="ae19c196bc16a18026cf07feccdae9ac7fb7fd973a76df7e2b1e411e7127c427f8e00ebe0c373c9cbfa9479d3a2117c1035d528f7b959e8e10e6fbd01bd59c2f4b19dee0b64813da29488b308cb2a413cb241af486c1c8a63bbdaefacebe591db242877e548c0419ee31bab18543874b28f40bff6d83e00dce383474c7dba7a43ee74efc9d5fbfbd28f69f3b760ab25e843f03b27d5a747b6a4c4c88fc06384f9917ef953913283cfa4b70948a16b4ec1709f14d2b8ebc35d4f7a711682da73fe4428e773b388a7a8c53721e8c2d7b154d28d34a4b2cf9191c19", 0xda, 0xffffffffffffcfef}, {&(0x7f0000001400)="e5f4c1070722680920228396ade3d3f3ef99f2585f", 0x15, 0x6}, {&(0x7f0000001440)="088ced4a514812ec598bd85e4d0ab8506391dc2c6e46e98dc102bf50cd563256d14a2d76ac071f2ad7d651dc3be2d4014580379dfe482f646b04eabecd67af2b05b1cfc196fbea685d5fdf69cfb6c3f2f3df4002560e884b757feca3bcdb105288ec605834528f4e0979294650cec27376dbf2447505f03731fb654d244b76c83a8d87e71ee335dbc0b3eeb82c3524eead382bf10e1756a72a5bdd30c89569851144c97ed3e01e6ff07abe87b91010ad7b13a95089917fc3f74b00836c4c401196aed0", 0xc3}], 0x400, &(0x7f00000015c0)={[{@session={'session', 0x3d, 0x15}}, {}, {@unhide}, {@session={'session', 0x3d, 0x1e}}, {@map_normal}, {@cruft}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, ')-]+}'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}, {@fsmagic}, {@uid_lt}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) creat(&(0x7f0000001700)='./file1\x00', 0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000016c0)={0x0, r3, 0xa4a6, 0xcbf, 0x776a, 0xdff9}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x2d3043, 0x84) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r5, 0x2) fstat(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r7, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") sendmsg$nl_generic(r4, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000000140)={0x10a4, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x8d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8, 0x0, 0x0, @uid=r7}, @generic="71d47c9ab162bec18df9168f681be42cf8dfd2f889ec4ad638ba49576674e2fdf1033a033247e3a6d79c73705c1d782d6d1548af20b45f7252d4347b3a8989262c4e54b79e0b07201a6d88af6a982d8b992b14b7ebab46908e7678898a3e69f9cca8c2c73dc990245244115d3fe183b7341b2497a3f1a09647c4c2ebb1fa", @generic="4886340eb75833860149f602bbdb3adfa1bbbf5d39a63540bcd4d60453342cbb856793f85b275be291215dd868589dbb0174f27a6ac568889a6b17577b3815a93a42ed052c1099804bf8da363971be6a8d3a43d09eade7cbfa7c45b079851c71ecd47714331b33e10d55de699237ffb096f2586d4c6868f8f4722a6fa862fbf2f679c68f09f5c52b4fedff73abdb02d4e4b3f2950d6264d4703097bc7ee46598844201a8627f70413f58569c4244428ee5125a881a777cf4cdbee40505ce9a0b3564b425033594732e549a49b633bc637f3e1e539315e8715f31f3c1ca9c38302d2a8ad323f3761795e639e5d94410b36e1b3669bf89219881291809fe1fc2aed5833ba2f3e7a926f2deffadbf494eda119e6678cc5a74b57a28c3dc7a7d70df3a7730eb8aa827c0dde6da6dc7ae0431260c820461dfaede00921833d29a0888aaf3fa6d5ac88bf26bcc3492575601d6b87c846062b31132325f9d0ca208cf27a6d9ddb56432fbdf5b46c6e2bac2448f358568ac246d955f5f62e8eca193f7ddc28e818268a7be5928364d5d828267b359b3c8980359d8711e64b6ae9cf809a188cc5c65da6711f5ebcede1b8d45a15343b74910ac5b30a371b4fc8387054276a79b269017aac5bf66a50f4a8b1e967dbdc2e633be9ffcdc8f022e4bc935a490e01aef801154a2e187ee990fa5f795180226b4761efa2c3160ec4dadc7d63513ed714e7e4d6561bd0cf18635812b8cd8f784a4f001663a7d5a6e198936e5769d2fc83d7280ec74e23d29935b0a06179bf3f163db311b379e39677119d7c07aadf4ed494b948532f3f05ed2fab689cf24ac4196eb0ef01050b4577d2f709ca4495ced8a3cb89639137b286258e7dce770e36537175b9a72b8b3314a1917e67ecaf6c87ec4d37f502781bc3a50443f4ff952b409ec48d12f58c53f8ec896972ca2f546b9f5a89dd92369f99bf01f5a6397dbcb9cfb12c2330b72317e58a0a9b78d28bbcb7c2cdf3c3df84f1d8fbb86b5d969ff0973f880a3ba329015b8ac87108cf78352f02884ca4cca8f75d927cb098844d3affde3762913111fab18f40b90195a04cf16f68e3b6b89b68990f10a651a2548fa69f5c95a2f7cf1f78b041c36c23cabaaa82596da69d2f4b8cfbdf349f6db4d1cd087685ed31431eb5ef8423645c67ec586cfa832cc85734d4a5de774e8c92a5708d5b51eb31c0968d0197938a4a7e8e38ad3b716032eb4043c78bf77b6e8c36557962d4bb33c3f05dcd557bb22e71350c1bf835a509f8e9f11c81c18a4d679ccdfa3815e51ba99ef0dea4cc7f9ec4c2263b4d4c49b25f9d1e61e976ee41f7aa71ca8bad00b8206053df9ef820970b981012d0ea18e523914381ae538ec139067f0eac23f9ba0e13bbf22b3647767eb82721ab6dacbf180ee973a143b6940bf1b564900f5e8b1803d11d2306c9155a0388a65f46c15e1f03a385e955fd3d1a4157b712632ac20853a109534810cb64cd81213bb89c0d48c3b83aa9a9af48523de684722736a6b0040820461832910cbcd2e252a49e5c2ae4191568e5b396b7bf4e381fbd992b9d220142193fb615a18a8a46e37732aa5a33feafba6522f294cd8e5f00d357072473e3b22ef5da67f2535e5440a1088ddcf9b0fe3edf3af134bee82ddf62194b810a876d242c90d9120c56065d5744eaf8c94a697ba70743b83373153c52579f3a2284282c3e1cbd1aab760b2e2cd4c34e45fed1ae15f656fa7d0dc9ba0c654c09c522b1f98b02fb491543a6f3be9c057db3180fe72acb62c70d7cb434a0f9f0a8048852e67b730b0f9b4c4f322245fe14d715d6c35c8485df19b4a4c9800de465f48dbe21523878e9d20415bad642afc3e14f5974b0deb0cbfc0d193b775bc51ea44e80aba279177d71307ec126e3df9e0da674e0deac8fdc0c8b0a54e3d5b056ec6359ce6a8b63d3a91eb72bc6762494262121f86ae21a955819e6ec966ef1b9c2f430632698edad4f5fe7bcb7608652a17fb2e6be538f39bf5bd4ea3de25b9c82e93521932ba2dd8d2be2a10c2a607055a055e462b9338e9299a1683899157185cad20cf5f185d1f0d0be96ac8532df7dfa102fa79c98e37014d8efe950a8b3ac13444d5034779bf698f5ff6f065e360ae1b47383d86a88071f8bcce8ca35a47e81ccdc66b98034fd38ba007e63498dc66671c9c4cd6ab58165d7fc42ea666e78a6a4def3f3801def3c959ed2753175a9763c01b013618f58d0b039a49040b38fd37a9fbc375d68f31db886d82673c40817ffd45236751932d5c08e2fa20be37f2ad98ba9f3f69354b2ea511631e4b40a724cafcb9795a52b60311a56987e88353f747a092646e82689559f8893b7c571fd9dea126eeb2b93c3d20ee35e209a5ac1b5cb295f604c1ca1ae89789a1d3fa598422ad539d3522bc53ba03a27c79281a7b995aa886abe18d98d18aae2e349602575472fe88653504fe181fdb3a9b6b3301905fa0f8efc41d46589e8672d92649a4223885169267424686818aa8768bd7815e1145cfa76de1d6ce311c3c30efed7fd63e3aa71c3b812751c580d9d7c11fe92bfe671d8062b8c83f4d10638bc5d4a44bac55aedfd1bb8f691f42e8ef6a85b7fc714ab5c86d30fd46ed5ba0df3db8fca955b2f0e6ad5a7525980d8de785c5afe6b476d4610557217f2c42dc6d2f955fe36003fc31047f97c6a6f0a97e941b893aee8448167b9411b175d066c6fc79ea43558b9e242e54fb4ccfb4db25c03f2a9305339ec5c5c0294f8f2b2ec2e40cfb29477b92b7cd726f6926f28e0f992ff66aca6490d8c70d2f102266ecbedb3b3901477b52db2c7ffc61387ac9cb64da098abd01d95c5b3480c98f274065b267626d75989494e4826be936c3403a08ba9cbe54f2b3ef64266d56492792aed19135c789a47db8d008f85957c274548c9d0d4f355797c629466a921a19aed1b76221e3a4c8f65582af46c7d5579b9d4cfa197a4ef3ce6e48611a855a8526489e86cdef39f8f3363a65eccbd391b6e8c85986c215eeb63fba39fb7c0ccda6694dede24c338a222c7763d7e5aed3a8c4f899e24e229805db24ced985eefa080416f7dca43b259c3ea38798acfa79dc9fc33422e606cb622e560adc69cf36f11ba6403c6fb76d8431f322c80b4aafe966b591a5b6c886e4c802fb1881cc453eceb7befaf22443bfe38ecb1fd47aa94e7012d382da94abead443c2d8f4ea73f621ea3db8aab0acb3929998546efe7130e612cec415036c9c555eff6a0372d7963b948cdc4a11f228d6acb8e070f9c5a0bbc84c2a90700f4f5e4668da820786f70b57e4f1804dbebccdca285f896d55b41a05b8f381849cb7ba73c808e44e4731c2e7f11c5100658636b18fe79b1003fcb11f1fe4df34099f601710341ee710c1a5d54830c4fcbc0af1c0e28ac0fde5a467883718e1b4510a84e440a324f5115e6e989ce48ea4d178d796b337f9c8d6e9738acdf34deff0ee096fa0ce85089b591958c0de7799f6b10f89cb3075775c1e77e05626f1e68cce8a8915a2f54d261d19fb147405b9c5b8e94799c1bf7176c3d2ea40f8e9766c593b78a07c94a4e1704be9fc16d86533d019293f0fa8a9c598b66014d1bdde4f717853c2e8e39a2d3415f20df70b91962369c8cd6890f601e7306b8af7a6aea2caefe3dbc802d7e6837cf6014e710cc2eb7cdd42c912fcd1515ce5616eaf81271b17014bf1eeb0aeba67816726691918309c3cdeb23ea88e82397c83af7144b354eb5c1ee630c3a3b1cd4355e76d83b2c16f69106a8be15c654e42e397651b948233382a74a5d9abb65ccaaa1abca9aaa68d342b07787b91afab69b2173382723fc138b139927eee1e88f957bd2d45e227286f5c6ba117bf832173de82f4654f366b4884483c421dc66b65c3a25a7b08b846ed60fb50c9f6eb15b2dd63979ebea0dcb7201fb0b9797ad9cac6e5340e13abfdc2104c770e8080337f0ce31da3c761262306a9dede9ae13ff69d84892b6280659b1cce32938493e9a698c3bf92755e2564e04f35d534d09eef657d1cea6e8658ba03b043ac2556954f79dbe31df6972f3fb637b485f2f23c999d0c1f5b34b9b4b055baf05fe194cd35457d2ad5b66e8e9ba7e224163fc916c658cec0636c8900a33d8edff5645e791a6de6587dd31007d843927212d868bc323463e524d7614d5b97b4e2fa8ec6bb15bd2b9e59616519553c1055bfac53969c8604179809a8f050204d4a957b9f3ea8dd36f136e4433f38a37a53b1d8655969a3a27fb07041f74ed3444621e7844fa37da457ab868c9d869084f162276584b1976c076816953790ef19e786a3ec04a7bd14d424fd1c1a9e90965512689ad8f45e837c1455d7eaf2537b203bfc12c2961d8f6a15f9ec0a7b3d111c59b09e8efd1b9d7d854a5ea6bf26a0c0ac9907badfe84ff48943a9fef8379755241c703f9266514116ed0fc06f4e5ee07a1ea953506b5bea6ecdad0d779839551d93f687da2c500ec0f820365c0437d825fd7035a1beff7c632d5c6ddc6c4066c579e1547b69dff21a694fee4aa2558e4363354d1da1e4e40c3fef62984d856590b5f547233b2645b78afda2f8077bb8e442e5cf1a4cf749cbedf5050e365110ed4648e2948f4bbaa3f754ac4fa22f5bb01727a83c0109bd1333a37922c2781ef2d8434ff9be3a4e015113c1c88d08008211d3cf36c9caef79a8d7cee8c98198d5a52be65c64eb5ab74c258c760a32ad1496890eb67652e9cc4ac1206f3a8fbe3e0268778539770a72cd40da6a768ddb1344c5506c60b23b3b252716c7ded7593a2672d181c51c5e0734416b0f45aea6d6a450f04b7583f409781433c7182d3d7b5b5ea0f1d5f4874cef33482945cbccd9b07c9d1f9eece2841e1e8517ab390d0cf59c609b1fdae9ebe98617708cb0ed8b1b0f30cd574cfce8b2988fa58157db81369fceeb29c03f19c6f3a0b8533de54725822a8ca165fbfb25189949db2c91f8ae59ac28e80d5bb554ed98429d1647754bc062507ae7c98db4ff2defe115413418d359dc9fe62d957581ff10d6a473acb894580c255d94af666b69fdd8e3c8acd5a770553be063f9229928ef3514161475e3d3c39356223ffa8b5e30f05ee48679f0f3b159f603590d410ff3b380b1a5c3510cf52a902391ff6bc66bef67ef0279c877e8d8671b52d15db706e1c55dfc272b1a8f969a415b244fdffca59ac10e707d444ecff2984ae16306864239693a8d1ef4bd8040098039f9ae863b62247d783f7ab8bd1b712ce3c4deacb76ce5a613b07c48ea13632d94e87f4e08e1d40afc5ba1961f9963e9f87308dd0461d1f92a89f03a47142f0dc6d36b38f2a85a783ead5c56dcb026f41c5c759d81b3518f68e3fb6a2865708812c2ca058304dcc0569f3ccb2f6c0232dda249d0457058a56966f1fbc084f26c85d71a4d963b3528a1ffb894326b141eac0864717991c70b92a5c2bd4d84ac50ee27a85e4046015d5c5877630e4df91994a7da015f4c0efbad222cf4bb170a36fd8663d16cd2738ae9124bca2f789175a5c0335474f0e901d648ff40b3c8e1c42aa04581877a9b02270d887f7af0518d80b0c5ea2e53af58987e33bba1b9bee20b01d2401600786ba204a32e358bb2d7c11364241416756943c8acdb6bf9569753f98cbd8310a60c19e5314165481a986e00f7c4fdafb7795aeca7171a13a3dbfd2b3a200b41dd2d57ca7bc62ece601e400ffdb104bf820bf5dbccfb43bf344413a17421d78ec0472bc87e1a4411505a0f293356b6708ff7d0876d93182b55b5cb6c"]}, 0x10a4}}, 0x48d5) [ 3021.243134] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 3021.286790] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3021.289507] EXT4-fs (loop1): group descriptors corrupted! [ 3021.377993] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3021.380145] EXT4-fs (loop1): group descriptors corrupted! 10:41:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x4e22, 0x685, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2, 0x400, 0x1, {0x0, r9}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@aname={'aname', 0x3d, '{'}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@version_9p2000}, {@mmap}, {@access_client}, {@cache_mmap}], [{@appraise_type}, {@obj_type}, {@smackfsdef={'smackfsdef', 0x3d, '\xf0%2!/'}}, {@subj_user={'subj_user', 0x3d, '@g'}}, {@uid_lt={'uid<', r1}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '@+,-'}}]}}) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 10:41:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 10:41:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f008004000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000a4", 0x4, 0x800}], 0x0, &(0x7f0000000140)) 10:41:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x262f, 0xdd04, 0x2, &(0x7f0000000ac0)={[0x54]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f00000006c0)=""/78, 0x4e}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x40, &(0x7f0000000940)={0x77359400}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 3021.546312] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2751463426)! [ 3021.547607] EXT4-fs (loop1): group descriptors corrupted! [ 3021.900271] serio: Serial port tty29 VM DIAGNOSIS: 10:46:44 Registers: info registers vcpu 0 RAX=ffffffff83e57410 RBX=0000000000000000 RCX=ffffffff83e3f4cc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e57a18 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c16b R10=ffffed100d9c782d R11=0000000000000001 R12=0000000000000000 R13=ffffffff85671c08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5741e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2330065010 CR3=000000000d8f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000403fe016c6c6f502e726567616e61 XMM02=a2a7fc095e44a4fc6b0ccca4fc287c1b XMM03=000006060600060501d5a401a5fc1afb XMM04=650a007a7a7566206365786509006e65 XMM05=20636578650a006873616d7320636578 XMM06=6465657320636578650a0073746e6968 XMM07=650e006c61746f7420636578650a0073 XMM08=650800737472617473657220726f7475 XMM09=7566206365786509006e656720636578 XMM10=0a006873616d7320636578650a007a7a XMM11=636578650a0073746e69682063657865 XMM12=746f7420636578650a00736465657320 XMM13=616469646e616320636578650e006c61 XMM14=0065676169727420636578650b006574 XMM15=0000657a696d696e696d20636578650d info registers vcpu 1 RAX=ffffffff83e57410 RBX=0000000000000001 RCX=ffffffff83e3f4cc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e57a18 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c16b R10=ffffed100d9e782d R11=0000000000000001 R12=0000000000000001 R13=ffffffff85671c08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5741e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b8bd3f000 CR3=000000000d8f2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183ff7500000000 XMM03=0000000000441217000000000043a122 XMM04=0000000000439a1900000000004392ae XMM05=000000000043a1220000000000439fea XMM06=0000000000440d180000000000441217 XMM07=00000000004388ee00000000004389d3 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000