={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1a8, 0x5, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2e8, 0x5, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x234, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf31}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x8ec, 0x5, 0x0, 0x1, [{0x390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd02}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x31}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x891}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x7d4, 0x5, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x14}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbbf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe0bdb92856f7ae71}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x51}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x227}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x233}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff40}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x87276f20f5d82b67}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x118, 0x5, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x46c, 0x5, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcb6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x43}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffc0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e2}]}]}]}]}, 0x4660}, 0x1, 0x0, 0x0, 0x4000081}, 0x40040)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000004980)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000004a00), r0)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x40000c0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000004b00)={'veth1_to_batadv\x00'})
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004f80)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004b80)={0x390, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdb}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "9439dcc769c8b5b5094e1caf4e02b3eae0170557d19873cda212a06ff0c99b7d251067a55d02596823cac77797ecd7647f42de7910cc58ccc4296411ca0e6843dd16965224a1b2887bb50403c3aebfbc1d9bc3c1aedac1d5f3cb36bf6576aa5415014e4bb7ef5497e9ec3d1d63b42551e1b3922e0fc8a23e39a4fe14d5f51e526e517c11b661c0919c4e44cc8bdba6d4ee4b71a7764c9754bb4bdbad8b6d0d30122fdc60f432f41336f3cefa9b06322da40364e491d73a7e0a1634"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x578ac4fb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x600000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc2e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfdb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20048004)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x480)
r4 = fcntl$dupfd(r0, 0x406, r1)
io_submit(0x0, 0x8, &(0x7f0000005700)=[&(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x5b, r3, &(0x7f0000005000)="4c40b71ff7fe59ec418b24edc5c180", 0xf, 0x0, 0x0, 0x2}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000005080)="0f85c1a2ee705b228e71c75522a57ccb4accdfbfb2e7e73e53a9d5b4b9fa4653478be99bf5988621358a2e4057dd325e434586029669979149834b17a222b0ef299ba5f470ad0aba46fb6d7b634d97ee006947c6dba97e08998ccf1620a8a6411118baccf55e590c623f5a4f0f22690945d411f83c85430a5731e3c7092872f32fd1935ca7ebfc9b79de8dbd1c29e4854ba44732c922eb34170fa0d0f641dd5c43d2dcf1c78ac556680d2d26fbc91dd361ee0dfb92", 0xb5, 0x8000, 0x0, 0x2, r0}, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000005180)="4a91a9449c61c9544e56bd82e656d217fa9465e8b455e01bcb07c47b2962bb32f39fcd65e80b3497134f78f6924f740c66d79b2199a1", 0x36, 0x5, 0x0, 0x3, r0}, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x401, r4, &(0x7f0000005200)="7dc13f30e9ac5d00ac143361d7f4c5ad1db9df4827a38e85f3609171a7c1b76c5f82383a0ee4387a2869634717e37a136f4da997c0d5a17a107597bb0bdf66b9970a1c8f11b92fde56f267224635d81f24db32a9d16adbd7a812d359e485b323c66938b7a2756e680ebe265e4ec0ed85e6eefe", 0x73, 0x3, 0x0, 0x2, r0}, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000052c0)="c283d8f2299c6d3a4d4e3335cea0a61685fd311cbf29e562480f13cb352c94ec915bee15df68de19fd42b1b3cda9cc9f7b2f1893380c0d1243cd848471a9ede4d0f7cf636a297361f809dbad0879f2c7dd00170f1b9fabcb26a6ed127257a632eb788bc81f7f9e6c4dc09e73c4d504a9a73e6b8966ad2c8f6adec53d156c329b53771e2555ceb9af2d21c0a56cd0a1c6867b4c643aad5ad7c4ee4da007541abf5c446f66ba7f4795a5", 0xa9, 0x8, 0x0, 0x3, r0}, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f00000053c0)="bcc792c405b4c9b71de08f679394ff7d23734235ff69eec1f30f3790d31617bf053bf224a5467e646223e7adc651698cf92030ddda9278c31fdd4a9791211027952a6c6ced0b5e43baf20336aafe20c6c8fec71c19388cd138b858c4a54678aa9fe70d911a95cf44c799ed2d5512c212d624a4f60ca18f7d3b5fbef3a14d770fd2cd401e9a82fe65eeb6a65f8b8ea1685372723aaff4b42bdab1920b1b26867ef96d18f82035fdd8daba926706005fdfb9850a73b8885a572ba2d5c619aab114267823bac43cd1a95ee1465125d75648c6c7ebf37d7d13f43e1eb54d7e445758e1d22a875a2b82a3a668668827a8f8", 0xef, 0x0, 0x0, 0x3, r0}, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000005500)="a7044c27bb3417d67a796359af1a17f68dae21dc954dac54839d71cc85691d85e57544bea3f19bb9b23b8b9678c1d04bb4e8795f4dcde2db55191c691840c4232fe50fc5f2a7002713227297d55d9d4808a4c8a128137682c0dcc948ef149a4faf42c05880e727cefecb2beb76ad0c26d71b17b6e8533d4fb741274b50ffb57256c3cefd3f04cd28c4d31d09f3afd5bccef42f4a99e84810b36e0ae6edfd60eb8b7208cc9d5501431bf383cb8c9bdea1c6b32b06ee5523d2d35770552a07ec3e3849aeeff9b2637f469c9292aa6b76ebf2092d5c8b7969f2e49230cf36d2454d65", 0xe1, 0xe11, 0x0, 0x3, r0}, &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000005640)="395c7ab00a539ce2bd0a0368e43f70c40b2cfaa15b5093023cb6d903dea561f0dd57b1cb96b0bda5cb75c970555c9265a103450f13b76eb9a4a440f211d297a40c37fcf980d45823ad08820828a76916d41681cf6631b45fc7aa04944db8bd01253fec", 0x63, 0x7, 0x0, 0x0, r0}])
pipe(&(0x7f0000005740)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000005880)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x88001600}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x64, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005980)={'ip6_vti0\x00', &(0x7f0000005900)={'syztnl0\x00', <r7=>0x0, 0x29, 0x8, 0x0, 0x6, 0x4, @loopback, @remote, 0x80, 0x10, 0xf297, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000005a40)={'syztnl1\x00', &(0x7f00000059c0)={'ip6gre0\x00', <r8=>0x0, 0x0, 0xff, 0x4, 0xb09e, 0x72, @loopback, @private1, 0x40, 0x40, 0xc4, 0x1}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000005b80)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005b40)={&(0x7f0000005a80)={0xc0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xbb9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4a4dec78}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fffffff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005c00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000005e00)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005c40)={0x14c, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "687682751296bbf05010e19cd4a399c65d952f6cce87a2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "935b233cf2507e26d754a8225908bab3cec5dd13f973aec38ccd09a3e412d41ecf658f06cb7b6339423411bd3828dd224816a7cf24b713c7869a7545439f76763a35370200e283a7a1ae14fac5b378e5aa4bbdfe1d8ade834c67e9a001089f3c1415c7fe0fad8b5d2eb18e88aad00fd76d425beca4bb0badf036d2df6a0f998541ec242e2edbd7b1c036157486c54eaa1ee7da7a8e0e9a622100d788ff9086226121b091b2d7a98ebfc548c8034b82d730e1fd7ed843a02ce762842adea5d6f8a5e605"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000007f80)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x4010813}, 0xc, &(0x7f0000007f40)={&(0x7f0000005ec0)={0x2054, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "a7413ec8423d44cd82c5f75b0fa5a3d940421be3f221cde663ec336e4f467f6c1205695c7b88bcb92cb2112009bf943dbbdca303e9d6f9d4b3253127c0ab831e160299380e0a5fa961c60d7c708e9ef6fcd9856b47f5a157422be0f2efb2b38e443623d99505f24bc7b175b985321e9f6f174535088fbfe1fea3dc04d33be530b0980ed49c696923890125335d041e323d70ca49913e389746961af4caaedd95e7a2075459bc624491e43457371e57977ec2096450c7c6c899658f9d54972fa257d5f00a5859769ae2e763c19284cb42a599ebc36d23324db5f82cea400378dcf677f0ce71b125771c391e11d469d28d61394e6330e89834f4fab6fdb6c8041ff0002614eecb121609e0370d20f092f7b4ba08c562b783876cf83b319046a8a4bbc4eabc91071b9299dcd2deba0c459cf7f189b5c46529bdc2cbef2536d1bda3eb4739d1b5775fa4a5c2fc9e6a1c9728da22b0896ee1eac9b8fb4c4e6894bdccd1d48a46a25d6a271d90d5fedaca2d429cde9945d96c8df1db4ed3d6db36c4d17618a505fb5158c22c817a0ce6d1babd7451c4f636209447c85ffaca1a6333433c14ee6e3df673bbbc3412e3a150f7f82b23d1d2d08dab9a7c529610f318d9baee847c2798617491fe552f87481ed58b0934e097476b6da99e29cb09e5aa6694eef88897e253450c0ca3b7123dfd24afae1a1a2f1bbc2ba135f0fb2bd2b0f64486e3ed418660bb9f2e61e280a6b6faee69e029e4864b04fe3166be5bb2f7957cd9959c7d0eb6d70af1c4dd1c6d7beca16eb3e1f3bfaf1a9afddceb5e9e4efacf27cd5568aa13474f56f01d28228a465a90bd01f326935762b96acc46613d193f6919eaf3c7b2ae6c8fb0565cf40c6dfd0fecb77c686f43ce1451ff254559364047063a15ce9526baa4ec6edd956f737fad191c8edcf4260be85da93bb769f0d0c00e89d30095c9f60ed6db6a58b85a2f1cc17f3564df4eb5e79c27029555de3b2f4ffc66d7c2d8734bf10b1b4212b748d133ba84b657427335da5a02c22d4f862417087c00b08ef6aac35c290e03dda404b8411ad61aeb8ba3269881c11a930b51b66f73eb7e00bd856948324a294775068f483d094c295504bdfe3718d65952c35aea823dfde5e7e6952750df7e3a3b15c4590aa141048c021eaf1e20e558e3185e8253a4e42637d41ceec0c770dc5c087631855142483b490deed4f027aa375ab6d2f0bf39a96143f077ed37f435cdfa71de4dab4a3a1b65cae1e7a29cb129c1f9a949838401dcabe62fb9318af52d31d0bcfe7af753e8869312a4ae53135fc7e7ebd1063b98cccde5fc13584f91caf37198f8b4ea5f82f15b2543fe15842c04a6082192ce066b46bd9a01ccc3977b19c895d6d365b4b4c11fc8e75106e42e617739b5d60f196ef4afe640d47debc3d7e90d3e9d94f85755a48d778c414619b8f3277f1149d6a7c0b6093ad2b912bf2f23883f0096187d0f1b793b4a23e435f982b6e09f7dde27aa34444755ed616286a3f232edaba78310b19e0cfb451228339e5c3b5de64d1130b931ec1b449507fe328e9d0fcf855b28d048c070bdb56240f6b8b8e60de2769c2b8d958aeb151417849b593bc337dac7014b2ae4cd700e6396efed0482542ce043e64f638f3d1fdca3ec68f99e1effb99645ce072c591cfb86396612c146aad9a3bb352ff5ada31cc8da11645e9d51369a2b5d50718ffbe4dd645fab6357ee3248b719506c139418bc237090d69c1bbc45e2e05a0303df8153dd636cf91f58a02ffc5e56c58691487d0615aafc1a01cc9deb9eaac44eacd260bc0ed4678b072d300fe62fe67162db37298b5e5fffbd44e7b89f8fb1f4410e2b8a5f01d90a646f1b37bc4d026cb669b4076d37e1f0130204370775a473867a8f20f2e27ba151476ddaac10d9e917e075b932564972f137c83bf307af50e7bd6da5791b108c0ac5700292eab732bbf28834c1050f62e7349b62a66be33dd86f0206d95621ab1d6fef522ba81e0886d3bca0902e090f574b8f610635bb72567e5ff6914d20d6f31ca8560c3ee48862932d0c8aa95afc90b7c877ac5cda2c0759efb8994b0dbfe142ad876351863e896dc32a0faae57ebcb9142f5ab60195d58dc206a7f492b24702ecff146a4f3034b03d51585bc0e2a5ebb3d4aab16a244d79334f0d5042c9e8e6c8b043ee3b8f411d6a5970f834e97c6253740efcb4127509e358bc5965ca457adfe88562262c0e0aa3025ec5b68dcb83370289c23231ce2ea269de7d514fe4c3e8450b8460684b7088cebe87dad3f7f6d5e467ed56f2a20a08f4ca7c2cf132a741020dac196e7f0b46aca610348d9c263fab4db6cfed2c3ea968d33ee3360d1b79e2b893cd46c47c6134f484fea5bbcf0efc4e71ba473b2530f8fe777c1a3f117c7b7d4bcac370890cfc0660d37cfec36468c7caf347c9584be5f2978bd099bb455d029771ef448cf548f45d82e887e38ed86c30c294a11f5cb02e92ff125e00a06393e9f42072787a2bff4613916cde47ba0640c36c2cbbe9a46419a26abb49a7e804a05f0d41165445b36bee94ff83122601b57d36731e82ca04d450221cc41a6dc57a10482b322d53e892f680878b5dbf42896506ad61e8076e58e40e2efb7f96594f49c4794c35b813da97531c82ae87efcfd20d3bab2c96a32512e2012805bb134e5fb9ced9339353297bea351960e091bea15b7cab96a6ae801b98fcb75efbf950228656e14617a0b42ff638125280575d0753c0549c541770264fec28aaba0c275bd228b1de624e48e96d51074c70822c9cb281dd2f861816edde416ec6f6537efdaf39518c0cea01f97304341eebc8e5d5495e4793ce9f1508a0587636b9808b3849685ec0eddf37a1565dee61a6994f5c4b9fd26f0b781f1c06ae143554f9eac926ff59c7734dbe16322283c05345decd676730cfed90c12bcfd7ad0b767787f406a437499275ea520cdc30f47523c610e5d6ee38d4477a453e83738a712992ba99b6ebb340622e3a8afae2d02a48c374973dac9c420856a38039e433f2762b5f142ba6059d8fd70f8f45549c14b8c861d4c2b131f0edb8f4c0651502e642b8ebaf6620adf46b640de61c34bae8be2b81f1b4f94a2494f10414ba21575e05b8c552c348235bdbf2431d46c20d11a8631afddc30a5a8de7b391b14930a5a1c9c9a1cbdc78ad6974da48905811a14ac236b2aeee3ba5f4bce37078e7d17d77f952b9ac6c07c87539dbbc4706673842b3bd2746e9856be655b52e068da69dff26412cdd4abcf756c4c9c1aca137dfc1eed31927e4b3eb90bd98fb0ee67e1c2ebb6ce11f35c79c34b13aab2b3658578a63a1c962600e7782474fcb10d7c94885f18e7835e5119381b5b0cb11dca2e91b2edffe6559f8f18590498f6d3a1cad4caa7d1b5ad91f14fadf7eba3034c0a34a8f362d333ad710971dffa2c5460c1628ec8108d07f0051a82e4397b4cc2d4456fa7be98114e281c4c4f723ce19ccb143707effa3de9b15eff2c44209669a9462dd8c601fef0dec681eed444464c7d205f071ce8d610c3f9d25a666f3575739c19bef817c7536d3856b2e6a141637c1364cfa9c20b35fa5b137bc57019e1fe6e3487e9ecee631493f77aeda8ed1a217fab860dfa264dfba5064ec9a4e8b44aec0b8e1693ab0332e88b592ade899109d07b1b9d6be40b5829bb054c94e40c53a9a8c0002d59862b18d954b30329e91f0603df8484f4e6eec6b0c6cb5a9f6e232ed7bc638755cd5c92583761bbc5531e277c7b13fe401c13dcd67036ba7a93f510b3970e38e67c7f8111d8c6c2510fc282bc9cfa060a7c40e6f3c4ecd65d49d5e5289fade77b40c44d95c722bcefd633fed829417583c58e8a4a87da6d1eb2c613d7ab9e2da7d92bbab5a3ad7e04c95c1f718decf1a7038e6e9e907d1999e26036e8c1dcdf9a0800b1b1c61acb84385bb555046d5e387548d89c649802d5fb4c3a3fe6c15dbb565a8f4d188f7f91703f0327fadaad3412bef0853a98336afa2ccae3c583ea2accf6da21406ade37f30f6788a5aad45b35d9c93530e32f5fa3a5b6f4e6468c4e9f6aa3f7f30cda12fce4d23fd45ac6edd50e7fb5941824699c6d4a42d654f21d4ba5532202a73334094e1592e98938322543c8def4522cce434f3d15ae0e924a7fd61fb5652024225b56e0c781a902945f40ca95bc8b7927d68769bdd9332106f2f5655aef76f953f2d135fe10220c389578dfa8a27840871e67e6ebd710961513dde88fe37dad0ee98691baa9614cbe9829d9b1a047b1cb0ffe0413d3601f9f180d004d98bdd2795b45effef94ee4cf9f228395eb42668e587dca5d149d7fac609195280fa07a9ea01084422fe0fe476db45abc923826e83ab76ddbedfbd99d13d83fdf597fde80e81b8bd200ae59fbeec5c83487afa053aa90282580bd7228c86d307b1bd12593dbb70a869da851c149fa7e1ebc6325bb106b185a28c04929026805f9a33c063e8b1c19d050d07a4018f1aca2eba690e87ff559a4a87d343b640dcf2209d2dcbed813cb59b219f39da2a8912401fa05317505fea0c8af0288c0781a1e49bfb46247dd8a48415e2808f5b8a52b264915687620a8f1619778d99427d0170a5d3e93a546e361fed550b329efb358c69ef84103f93a29c9e148c83d1a3bb2786298c08e92bba10dd96b9cdffe00c43a6f1a1b4f406e8eace0c92494ecb74ab8a8323dc25655f39e8921443bebdc1c027cbf2c64b4e82fe15c87d8732769fe69103df0445a28fac8dea3dd2c8176d05d7319c1e01e044daedf4861fc9f778f4e5333d9ae5fe52d93dff5e770a10a94141da721e016f7f047fa64a81cd94796ae3bf596fb14921234d6f45be8f3ed4092d6a7006a55ffdf543bfb4636f212ed0dc9dd83f7e77eff4e7cd96a152e42ff06393180638e07b19f3e68920746a08530dc0c01164844d2fb8e9cd7973f2eae376d2951d0921f609d347b73ae49dba7d2597e1fb68bb2927a99ca9d1d5d06c56a362b81e3e35b91709120cf8948a41978ebc15497e3c1bbd2cb75a80908aff83df28a6f47f74f95d42fe05d914459f03a33c20cec843f7eb1b8185e9c749559c3f82f50a4a8422c04359f3421237abf9ab08aa8b3f66f91912d1a20024cd909451adc4dee496dfc5be77ebbea2ccf0f8d2fed7406cf1cfd9b93afe8847f3462d2b5e18c5779bcf9cb128b557906ca19358fbc4731645926d04642d15d7795d9cfd424304d68f07f0e0d74083427d247c070568f1cf627ff8dae36e90bff269a9cad1c8714200dfebcc0a5a2d746aa5dd02bcc0d376e15a55af100b28c86655ce956971d6c2ea26d9245b89f409c39d1eb3dabb46de9637031177494645bebc64e6342fd140f2f5b10afd52faaec800f9746f50395af3c0eab632ec2781b6ca6147d1d36599684896ad55435202327f8b7f255d14cd24090f3fc37d6163670803a509c382c9575a1162a92ad866d8b9fb7028cd597880a410254e8c824d57b405e93f28ea2ed1f3872d9f6583b3efe526cddda6adfaaea7bd6c6835dbaeaf00a7ea74a3cb5745ec8de65b744d43ccaec0b04f2a4e3ad6d5b83ec56c7405622cd95f4bb21fc19943a83581fb5f9c675feea0dc4698b7663b85eb1eaa08aaaf830bbd93237ad2043d6dfd6103389838f75edd086cbe7f94ea0deb1a81543e2dabe7b774cad242f5e5ca0be991d8bd41d1398deec9231fe41d74387a0a0932edccba8933e160a6dc8b7ab2c5dab877748f88f2ce739e5920f7ed8e919eb5dedeb8648c9c658929d61db4d14f636"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x5, 0xc5, "06"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xbca}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x2054}, 0x1, 0x0, 0x0, 0x24000010}, 0x4800)

[   96.952285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.957248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.960908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.965281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.968158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.970557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.974592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.976089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.989199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.997071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.011792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.014623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.016693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.037545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.041497] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.081510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   97.091320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   97.097218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   97.101047] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   97.104519] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   97.106102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   97.111774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.112553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   97.115193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   97.122007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.123169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   97.124487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   97.124873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.126096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   97.135181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.135367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   97.149082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   97.158134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   97.162108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.178362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   97.181644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   97.201465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   97.204533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   97.216689] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   97.246540] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   99.047286] Bluetooth: hci0: command tx timeout
[   99.047291] Bluetooth: hci1: command tx timeout
[   99.110809] Bluetooth: hci2: command tx timeout
[   99.239151] Bluetooth: hci4: command tx timeout
[   99.239201] Bluetooth: hci3: command tx timeout
[   99.240317] Bluetooth: hci5: command tx timeout
[   99.240390] Bluetooth: hci6: command tx timeout
[   99.303217] Bluetooth: hci7: command tx timeout
[  101.095021] Bluetooth: hci0: command tx timeout
[  101.095870] Bluetooth: hci1: command tx timeout
[  101.159669] Bluetooth: hci2: command tx timeout
[  101.287275] Bluetooth: hci4: command tx timeout
[  101.287499] Bluetooth: hci6: command tx timeout
[  101.288177] Bluetooth: hci5: command tx timeout
[  101.288204] Bluetooth: hci3: command tx timeout
[  101.350889] Bluetooth: hci7: command tx timeout
[  103.142929] Bluetooth: hci1: command tx timeout
[  103.143432] Bluetooth: hci0: command tx timeout
[  103.206829] Bluetooth: hci2: command tx timeout
[  103.336848] Bluetooth: hci3: command tx timeout
[  103.337255] Bluetooth: hci5: command tx timeout
[  103.337691] Bluetooth: hci4: command tx timeout
[  103.338185] Bluetooth: hci6: command tx timeout
[  103.399205] Bluetooth: hci7: command tx timeout
[  105.191794] Bluetooth: hci1: command tx timeout
[  105.192222] Bluetooth: hci0: command tx timeout
[  105.254868] Bluetooth: hci2: command tx timeout
[  105.383761] Bluetooth: hci6: command tx timeout
[  105.384186] Bluetooth: hci4: command tx timeout
[  105.384568] Bluetooth: hci5: command tx timeout
[  105.384980] Bluetooth: hci3: command tx timeout
[  105.446775] Bluetooth: hci7: command tx timeout
[  129.651928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.652582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.851406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.852057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.043470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.044178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.120513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.121237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.167088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.167622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.215390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.215972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.250883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.251488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
15:34:33 executing program 6:
syz_emit_ethernet(0xc9, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="ceac4520d0da", @void, {@ipv4={0x800, @icmp={{0x27, 0x4, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x3, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local, {[@rr={0x7, 0x1b, 0xa, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @private=0xa010101]}, @ssrr={0x89, 0x23, 0xf4, [@initdev={0xac, 0x1e, 0x3, 0x0}, @rand_addr=0x64010100, @remote, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote]}, @ssrr={0x89, 0x23, 0x3a, [@rand_addr=0x64010102, @multicast1, @remote, @empty, @multicast1, @private=0xa010101, @remote, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x7, [{@rand_addr=0x64010102, 0x8}, {@remote}]}, @noop, @rr={0x7, 0xb, 0xe9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ra={0x94, 0x4}]}}, @echo_reply={0x12, 0x0, 0x0, 0xe000, 0x0, "3c2a04e1a5a22f5d769f0741900f895ad2b46f5245e79b"}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000280), 0x100, 0x1f)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xb8, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x7ff, 0x6, 0x3ff, 0x8f61, 0x0, 0x6]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfa6}, @CTA_LABELS_MASK={0x18, 0x17, [0x1000, 0x6, 0x8, 0x8, 0x3746]}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

[  130.285786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.286390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
15:34:33 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x89, 0x0, 0x71, 0x0, 0x383, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x3, 0x6, 0x4, 0x7fffffff, 0x30e7, 0x3, 0x0, 0x1ff, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x1a)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f00000001c0)='smaps\x00')
clone3(&(0x7f0000005880)={0x7b80c100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @xdp={0x2c, 0x4, 0x0, 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x6})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @loopback, @loopback, 0x80, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r6=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000004d46c000000000000db1932b610d67ac5ae00000000000000000000000000dd0e0000000000004d0000000000000000010000001000000200000000000000060000000000000005000000400000001f00000000000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d6470000000000b355b0c8000000007300000000e7b3f9cd0c0db4dc20db"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
setregid(r8, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r9=>0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x3, r6, 0xee00, 0xee01, r8, 0xa0, 0xff7f}, 0x9, 0x6, 0x9, 0x5, r9, 0x0, 0x8517})

[  130.342523] audit: type=1400 audit(1761320073.865:8): avc:  denied  { open } for  pid=3878 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.347847] audit: type=1400 audit(1761320073.866:9): avc:  denied  { kernel } for  pid=3878 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.354202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.355243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.409791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.410341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
15:34:33 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x89, 0x0, 0x71, 0x0, 0x383, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x3, 0x6, 0x4, 0x7fffffff, 0x30e7, 0x3, 0x0, 0x1ff, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x1a)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f00000001c0)='smaps\x00')
clone3(&(0x7f0000005880)={0x7b80c100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @xdp={0x2c, 0x4, 0x0, 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x6})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @loopback, @loopback, 0x80, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r6=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000004d46c000000000000db1932b610d67ac5ae00000000000000000000000000dd0e0000000000004d0000000000000000010000001000000200000000000000060000000000000005000000400000001f00000000000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d6470000000000b355b0c8000000007300000000e7b3f9cd0c0db4dc20db"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
setregid(r8, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r9=>0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x3, r6, 0xee00, 0xee01, r8, 0xa0, 0xff7f}, 0x9, 0x6, 0x9, 0x5, r9, 0x0, 0x8517})

[  130.432708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.433407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.508574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.509223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.583116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.583718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.625283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.625923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.654559] audit: type=1326 audit(1761320074.178:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3901 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c107a1b19 code=0x0
[  130.656448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.657097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.695901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.696457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.430379] audit: type=1326 audit(1761320074.954:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3901 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c107a1b19 code=0x0
15:34:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)=ANY=[@ANYBLOB])

15:34:43 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x88801, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
fallocate(r0, 0x11, 0x80000000, 0x6ef)
ftruncate(r0, 0x10000)

15:34:43 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x541100, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x50, r1, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x3d, 0x12, 0x2, "785cce41e7f4d36cb44080520f0133bf47e1a0348118e7e6193a4b118be371c5c7840bc5e1d4cf27426c63fa7c4bc83689923b5345c7f4d0e4cb626da1"})
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009)
pread64(r4, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000000c0))
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000f, 0xffffffffffffffff)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r5, &(0x7f0000000080)=""/239, 0xef, 0x5)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)

15:34:43 executing program 6:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0xfffffffffffffee4}, @void}}}, 0x1c}}, 0x0)

15:34:43 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x1000, 0x2}], 0x880880, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8001}}, {@session={'session', 0x3d, 0x39}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '{'}}, {@euid_eq}, {@subj_type={'subj_type', 0x3d, '#'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '/dev/full\x00'}}, {@seclabel}, {@dont_appraise}]})
mount_setattr(r0, &(0x7f00000002c0)='./file0\x00', 0x100, &(0x7f0000000300)={0x71, 0x100000}, 0x20)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
pwritev2(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)="8e", 0x33}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r2, {0x5}}, './file0\x00'})
ioctl$DVD_WRITE_STRUCT(r5, 0x5390, &(0x7f0000001900)=@manufact={0x4, 0x2, 0x800, "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"})
sendfile(r3, r4, 0x0, 0xa0103)

15:34:43 executing program 0:
set_mempolicy(0x8000, &(0x7f0000000040)=0xb, 0x800)
set_mempolicy(0x4000, &(0x7f00000000c0)=0x40, 0x2)
set_mempolicy(0x4000, &(0x7f0000000000)=0x9, 0x45)
fchdir(0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_io_uring_setup(0x761e, &(0x7f0000000140)={0x0, 0xd068, 0x0, 0x0, 0x395, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

15:34:43 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:34:43 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file1\x00'})
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'erspan0\x00', {0x2, 0x0, @dev}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setuid(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r4 = fsmount(r1, 0x1, 0x8)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getsadinfo={0xb0, 0x23, 0x100, 0x70bd26, 0x25dfdbfe, 0x0, [@algo_auth={0x61, 0x1, {{'sha3-256-ce\x00'}, 0xc8, "d273a3bb358287da3b9b210c60a554d9a52b4384e7248b9908"}}, @policy_type={0xa, 0x10, {0x1}}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e20, @in6=@loopback}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)

[  140.174133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[  140.185402] loop4: detected capacity change from 0 to 8
[  140.210609] loop3: detected capacity change from 0 to 8
[  140.217884] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  140.249190] loop4: detected capacity change from 0 to 8
15:34:43 executing program 6:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0xfffffffffffffee4}, @void}}}, 0x1c}}, 0x0)

[  140.271203] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  140.283552] loop3: detected capacity change from 0 to 8
15:34:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  140.364333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
15:34:43 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
r2 = dup(r1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1, 0x0, 0x6a1, '\''})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r3, @ANYBLOB="f8ffffff000000002e2f66696c653000"])

15:34:43 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x541100, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x50, r1, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x3d, 0x12, 0x2, "785cce41e7f4d36cb44080520f0133bf47e1a0348118e7e6193a4b118be371c5c7840bc5e1d4cf27426c63fa7c4bc83689923b5345c7f4d0e4cb626da1"})
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009)
pread64(r4, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000000c0))
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000f, 0xffffffffffffffff)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r5, &(0x7f0000000080)=""/239, 0xef, 0x5)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)

[  140.462696] loop5: detected capacity change from 0 to 264192
[  140.468708] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.480469] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.509919] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz-executor.5: Bad quota inum: 524288, type: 0
[  140.527389] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=524288). Please run e2fsck to fix.
[  140.542404] EXT4-fs (loop5): mount failed
[  140.566379] loop5: detected capacity change from 0 to 264192
[  140.582032] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz-executor.5: Bad quota inum: 524288, type: 0
[  140.585771] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=524288). Please run e2fsck to fix.
[  140.590256] EXT4-fs (loop5): mount failed
15:34:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x8, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000200)='wg1\x00', 0x1, 0x7, 0x6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r2, r3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x1f, 0x60, 0x8, 0x0, 0x1f, 0x84208, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfd3b, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4080, 0x4, 0x8, 0x3, 0x5, 0x40, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x8, r2, 0x8)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r5)
creat(&(0x7f00000003c0)='./file1\x00', 0x10)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000400)={0x0, 0x3, 0x3, 0x400001})
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syslog(0x4, &(0x7f0000000000)=""/132, 0x84)

15:34:52 executing program 6:
process_vm_writev(0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/181, 0xb5}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000400)=""/252, 0xfc}], 0x5, &(0x7f0000000580)=[{&(0x7f0000000500)=""/85, 0x55}], 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x30a4, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x16d7, &(0x7f0000001b80)={0x0, 0xceb3, 0x3e, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000))

15:34:52 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:34:52 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x84100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xdab39eac554c6bee, @perf_config_ext={0xea2, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x208, &(0x7f0000000080)=<r1=>0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_submit(r1, 0x0, 0x0)
io_setup(0x4, 0x0)
io_destroy(0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/239, 0xef, 0x5)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r8, &(0x7f0000000080)=""/239, 0xef, 0x5)
io_submit(0x0, 0x7, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3f, r4, &(0x7f0000000140)="61a33ab7fd1cf360babebe9c0b02159080f6a639b9d4d0b1397fd880440b2dfc2d8f1f3b512bba0f18ada90f7be1d056e6d6242447ced8ac1b15c955127b398f0c898b0fdd5584107a9a18505405fc321286328595280b98902558e7fedce0e5e323b81ed0b3c8f223ccc7b605ba43e1cd08e1cb6aee7d6fb3178785e4ad49b9139de16b330c5621e88fba37434701", 0x8f, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5ca1, r0, &(0x7f0000000240)="8594b360687b6857de5cc24f1f3c5a373c0f6fe1cac1096a909e21dd13d05cda50d22b5d5637cb45b7eaf9", 0x2b, 0x1, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f00000002c0), 0x0, 0x1, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x1, r4, &(0x7f0000000400)="f7543ffce4bb9ecddce61d90699306977ab9e91a2e22591997aa003abcf80df3927430241204d2fd3ebedfab0d17ad62d48dc8e9ad2a879ae77cf256368fb3f1bc8abf20b802bbd004788bd22c91100a9bc14f2362103f5284f07abba056b942ed2606f54c5d205568ac3196143ec100c7636395a21a7511e3dc8c8cd0fd379c96736fb29b138b9046b70ab695ef6a4fb2186665cc0773f0f0564099e7151a70489d675f80fb2c27f28a347547d2", 0xae, 0xfffffffffffff001, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x4, r7, &(0x7f0000000540)="f1e32a7452e1a8736e72744aefca1479fc53ce996d910c456cd44e3ff57512031ef4e3ad30966af2790afb21d2f03ab891fd3180dcbc002d30d7b21b0620358a23fbc84240c8f4cd0661b7987bb357e33c513373e4399171420d122b25556b41541191dd4c4c71f3060e8aea4bbbed50b28433d869a5e69b933ff56d95695309272a2159e8", 0x85, 0x8, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0xe45, r0, &(0x7f0000000640)="ba3d87248ee3fb614199ba436ff70174bc2650a5f5061a0bf7fef978a338e47580eb7dd5c321524970664fb8a1046243e256b792660dd9eae4cc1d65785d6bcc4186abe0554ec1776c6207c7286b1adca0d20a50ccb9566d4b0850c741bdab8f5cbbef433272569c6e26b460f1c507e4512366172750625c8aa81628d9bc23bc43b5555e4fad91b3cf6854c36515255b8be061fef80994f17c0cc9ad4062e2bd9ebf037595570a649f6a10bda13a66b3a502b3a10e0ca66661a4362ab770da481925db4e90082bb0166f69d415cf", 0xce, 0x8, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x9c, r4, &(0x7f0000000780)="5268cb2cd891f1f88ebe186644c5b84f2152c3525a8e28e628b90401d00788e05655250316e4198b14335645028faf03308c2ac930c832ac1b0199bbc8c79af4b4d36f6d507fc2a802b25375be9651c06438bf64c4fc2217ace59480c80eff86415269886ce11ebfae09f87a36db072d673019c25b824e45d89aba682ea789b2024dac4584cc596bb6de6f52c7504602107815f14c9c9835bfdbb7c88eff17885837eb702cb22ca65fd3e1503ea4ae0dbc8a182e7e1624dac558c130865da54a4390a32de9e739b3d80ddd840790047a2ca256813b7c9eb3abcd78856aac", 0xde, 0x5, 0x0, 0x1, r8}])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})

15:34:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ae, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x5ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdbfd, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

15:34:52 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x7, 0x4, 0x0, {0x0, 0x0, r0}}, 0xfffffff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)

15:34:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:34:52 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  149.326296] loop5: detected capacity change from 0 to 264192
[  149.347829] audit: type=1400 audit(1761320092.869:12): avc:  denied  { write } for  pid=3979 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  149.383245] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz-executor.5: Bad quota inum: 524288, type: 0
[  149.388358] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=524288). Please run e2fsck to fix.
[  149.400290] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.402971] EXT4-fs (loop5): mount failed
[  149.431033] random: crng reseeded on system resumption
[  149.520454] random: crng reseeded on system resumption
15:34:53 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  149.551356] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
15:34:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:34:53 executing program 6:
process_vm_writev(0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/181, 0xb5}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000400)=""/252, 0xfc}], 0x5, &(0x7f0000000580)=[{&(0x7f0000000500)=""/85, 0x55}], 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x30a4, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x16d7, &(0x7f0000001b80)={0x0, 0xceb3, 0x3e, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000))

15:34:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x8, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000200)='wg1\x00', 0x1, 0x7, 0x6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r2, r3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x1f, 0x60, 0x8, 0x0, 0x1f, 0x84208, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfd3b, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4080, 0x4, 0x8, 0x3, 0x5, 0x40, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x8, r2, 0x8)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r5)
creat(&(0x7f00000003c0)='./file1\x00', 0x10)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000400)={0x0, 0x3, 0x3, 0x400001})
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syslog(0x4, &(0x7f0000000000)=""/132, 0x84)

15:34:53 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x8, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000200)='wg1\x00', 0x1, 0x7, 0x6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r2, r3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x1f, 0x60, 0x8, 0x0, 0x1f, 0x84208, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfd3b, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4080, 0x4, 0x8, 0x3, 0x5, 0x40, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x8, r2, 0x8)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r5)
creat(&(0x7f00000003c0)='./file1\x00', 0x10)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000400)={0x0, 0x3, 0x3, 0x400001})
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syslog(0x4, &(0x7f0000000000)=""/132, 0x84)

[  149.676221] loop5: detected capacity change from 0 to 264192
[  149.682518] syz-executor.1 (3993) used greatest stack depth: 23360 bytes left
[  149.709204] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz-executor.5: Bad quota inum: 524288, type: 0
[  149.719531] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=524288). Please run e2fsck to fix.
15:34:53 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x8, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000200)='wg1\x00', 0x1, 0x7, 0x6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r2, r3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x1f, 0x60, 0x8, 0x0, 0x1f, 0x84208, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfd3b, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4080, 0x4, 0x8, 0x3, 0x5, 0x40, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x8, r2, 0x8)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r5)
creat(&(0x7f00000003c0)='./file1\x00', 0x10)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000400)={0x0, 0x3, 0x3, 0x400001})
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syslog(0x4, &(0x7f0000000000)=""/132, 0x84)

[  149.735936] EXT4-fs (loop5): mount failed
15:34:53 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
unlink(0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0xc086254ca66de2f1)

15:34:53 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000040)='./file0/file0\x00')

15:34:53 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/213, 0xd5}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6849, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x60, 0xfffffffffffffffc, 0x2, 0x9, 0x401, 0x7f, 0x70a9, 0x0, 0x4, 0x0, 0x1}, r3, 0x3, r1, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)

[  150.809458] syz-executor.2 (4034) used greatest stack depth: 23312 bytes left
15:35:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:03 executing program 1:
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a118d", 0x12}])
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})

15:35:03 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/213, 0xd5}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6849, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x60, 0xfffffffffffffffc, 0x2, 0x9, 0x401, 0x7f, 0x70a9, 0x0, 0x4, 0x0, 0x1}, r3, 0x3, r1, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)

15:35:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(r0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0)
ioctl$CDROM_GET_MCN(r1, 0x5311, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x3, 0x9f51, 0x62, 0x1000})

15:35:03 executing program 0:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300))

15:35:03 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00552cb7c300000000000008000000", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT=r2], 0x20}, {&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000240000042abd7000fedbdf2508004f00620604000c1d8000292e0e2b2a272b5c080057005d262d00"], 0x2c}], 0x2}, 0x0)

15:35:03 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = memfd_secret(0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
pidfd_getfd(r1, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000e0000001ac1414aa000000018000"/169]})
fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1)
write$P9_RREADDIR(r0, &(0x7f0000000100)={0xe4, 0x29, 0x2, {0xffffffff, [{{0x10, 0x1, 0x1}, 0x2, 0x1, 0x7, './file0'}, {{0x80, 0x1, 0x1}, 0x3, 0x3f, 0x7, './file0'}, {{0x2, 0x4}, 0x8000, 0x32, 0x7, './file0'}, {{0x4, 0x4}, 0xde, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x2}, 0x3, 0x80, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x2, 0x4, 0x7, './file0'}, {{0x26, 0x2, 0x2}, 0x7ff, 0xff, 0x7, './file0'}]}}, 0xe4)

15:35:03 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x7, 0x0, 0x2, [0x2, 0x7, 0x4, 0x7f, 0xfffffffd, 0x2, 0x1000]}, @rr={0x7, 0x17, 0xe5, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}], 0x48}}], 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r1, &(0x7f0000000080)=""/239, 0xef, 0x5)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
bind$packet(r2, &(0x7f00000017c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
bind$packet(r5, &(0x7f00000017c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14)
sendmmsg$inet(r1, &(0x7f0000004940)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="ee3d9762a6ff3d5c518d85b6e33bad8e5cffe259b78a8a252bdc38c06ac4f491ccc8e82fffdd8b2f492be5302a516769e275feb37c0bac", 0x37}, {&(0x7f0000000140)="b2c58fd73fcbc140428ef5665496c45ac9ad8665f98ee7d8cef95c884d2a40e41c2d5742e56bd11cd408de9f0c2e4672c4c57019e5fa2034df8bf9a403cae1c2767f934151f4d65109ebf115f904a6b5354b67720aaf2073973afacfb9a5d4aea16ce9399a2aa23af29ac42419479612d6b2751adf508bdab0933a8e4b5b82d6efc8f996cef4a86800e83b0363fd5024370ccc5220993a4e4b5c134e04f5b010ee307925e928847309dd831c8d3223bcaddf26c8fd783730f662f4a0ce6f3d5dfa50fb82d158066f5c80796a73b2b1783a", 0xd1}], 0x2, &(0x7f0000000280)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x49, 0x1, 0x4, [{@rand_addr=0x64010101, 0x3f}, {@empty, 0x3}]}, @generic={0x82, 0x3, "91"}, @ssrr={0x89, 0x7, 0x74, [@rand_addr=0x64010100]}, @cipso={0x86, 0x3a, 0x0, [{0x7, 0x10, "0ba3efc172cbc0e38f0934eaa601"}, {0x0, 0x10, "712d317ebe9499b5efef540aa535"}, {0x0, 0x6, "848ed315"}, {0x7, 0xe, "be3bf336007ccd1dd80aa152"}]}, @rr={0x7, 0x1b, 0x99, [@loopback, @private=0xa010101, @rand_addr=0x64010102, @private=0xa010102, @empty, @empty]}, @lsrr={0x83, 0xb, 0x32, [@empty, @empty]}, @cipso={0x86, 0x5a, 0xffffffffffffffff, [{0x1, 0xc, "199bcbac060c0b166420"}, {0x6, 0x5, "f3891f"}, {0x2, 0xe, "3a2df1ecd5264c5ac5e0f33f"}, {0x0, 0x7, "6adce924a8"}, {0xbf7514b1f16e45e, 0xa, "754c9c23bfcedc34"}, {0x7, 0x12, "0454ff14f26e744e9d01a7a6d4cd0669"}, {0x6, 0x12, "b21bb3dc001e630c255aa6c98e77c965"}]}, @generic={0x82, 0xd, "17a5f27913814e8d3a14ed"}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0xb4, [@remote, @multicast1]}, @rr={0x7, 0x1f, 0xcf, [@remote, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @empty]}, @timestamp_addr={0x44, 0x24, 0x93, 0x1, 0x9, [{@broadcast, 0x401}, {@local, 0x80000000}, {@private=0xa010100, 0x7}, {@local, 0x4}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x83, 0x10, "0c7b7cbfd3daa7ff29a9b57db7cd"}, @noop, @rr={0x7, 0x7, 0x1f, [@remote]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x53, [@broadcast, @broadcast, @empty, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @private=0xa010101}}}], 0x208}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000500)="d2cd2c98274b2a6b4176a16aed7e3bc6f024668964cfc1301717f886fd7a075837e784aff77adaebeec84d7cae12ec6ee7a31aaea4edc8b40a55e80d83c873756acf295eef288d0589ca68aa941d61c8181f83275f18f4a9530e2a3beeb1de4d350830766a7d5a308334ca2512c8effaf7238d6039f58cfd4302980d418a062aa2306ac0af43b7bd2bbe28c38adbe37da8dec52f2a3611ce19b6adc5c66900a0e40f8a351edb4341970a9cd6d914aa1cbb3e9fead655757ca5bba5fe32ddd7ec51f6dcfa1915de4682f4d947c62fff308fd184d56cb141464cef8afd83eec72e946bbbbc71425846b450bcd6d464bd2699f59a2255c91f7f56db9b339c3d5e2e595613cc8e5bf54ec8a290389a50958db0fed92c92b4914d8c1c8ee442752068fe2205323b7b3f222e3b9e62158a8a94b5cb039eb00d0cef239c9ce66033f3ff39ff9b55cf3982fcb3c13c05d84fb07cf39a6fe25882632ba33bd72213878eba5e8a34fd4834b87a52cea33262e1bfd2cffa2a3bb0e4b3b812a4ec425043f151dc4e51461277ef13a741b5ab5395dc6f7257e28b75abea0c10e310528dffa1be7ddb72fef726bc9401379c8dee6d453e8763c9ce3530f2bb21eacb845fe743afffdb17a2790b7378df1c1dae716343f53a594ad9e0d480192abb4326b699af93564b1fa5c3d0fd9e99df1ae36218098f842488b2403f2ba324ae37134024fec480e77b461b5bde1abe0440d955f7dbc7ffadc72ff75c72076f704d97c9df9e5c33c8a83020ec22f1a4d18fa5e579677f8d06be4bb51cfccc332cd5f8796169c0d9f988bb0811ec5c470035013668e8f9c422f6b9f2f9327fd9e6af5d5f5608824a1f32962e82eea4a144a5c4a14e4e7edfc51399cc0a65d0924a55a1ac6939f7ba54a921b58bd0a1815f209b553cb1d9f5f6fdf633da2bfa69904f3873c60b463e9bb5d1b403b174d6798da46fefc7bade0002d216ecd00fa22b738b3fcdbb7a47b8da334b8f6075efec0fdd4d4fe23ad28d3b50980608b67b77295f38788ee525a51af91c9891abd8537ece019a1658711b7b4adbd49f175446a4e14c63b9ee9f0f5aa68e8480c2adc0841128eb40ba0220d1529c91d783d6630372b62de42dbedba7e145d6a3f4fb48b814c6c80f2d2db79e14e261326ee02fce1293aca8fbea48c32f8e0e63b01cf002a95d378703b5741cde8528904237e334d13f95964150d7ef8515e747fa216a1e4aadf4e4b881234cc54bbfcf7ac13029e83ac2b74ca0e4f74f150b2d930c31ad6b2c37feefc3bdf2592ec27af33e1d4681cf483cebd8914ccc2fb5d6debba59627882343fee0ad7e0d54182e54b0ad9ca12cfeaa264413fe4b07cf6722de465ed66cfe9f8b7571f38a18fe48731adc2f5f203fa1be8924d44dc7881ab0f830237df514e7003c07308fa507a5a28fe8a50ccda3589333e41a72719868a04ff0d4924f91a1415168de8fd68040a2ad7844e4f96b9a40961ac34b5d1009b79ff31274d6f9221f8708b488b6c5f0ceb03e6f6ead765b65784d5c61e4df00cb4dfa12312a9d3c2c2072fb046eb9b1875e540442cd5cfb08ea30ba373963424e4678bc8ac91b5d95ef1807e6e288efb76b6f01e82a4c50178129546cb16db1734c50d60e61a14145535e30ad6c11d861bfe12a26cc95f7d7e94b79fa6a1a1fc1f3741f7de9b841000dcf4b3ec56135afc46b02f57e90a68d1d1344ac8f43bcd09956723df07a7c89eb58acca566c9ff96d34e80b3fa6f659df1e92a915e8a0c9d33a78849cd21896b4861a0827f383834147699643005b269cf2d9e592577b7b1b1d8c14fb955d379436b7305e41a70bccc27c13600a0ce8f92b9c291f36f5308fbc569233dba66ccdd16b5c5166c6852fc9524bec64df47c4a202d1204871c8212f0c7009c3cecd81f397383583f65511f1dc5e94e48bdc3c7b198988ef7c5f47e3652c2d0e17fe28bc8357c910e719b249eb73b7ae491b7196f94cbd857dea002383c7b039797dce1f3e36cee3db91a31a636abb099d2c8d168ebfbbd0c1f552c18a875e5498ad4b0529fe22fb5d56a428455e1280fa92d8fc5461260d5c561ae3b5b0e9624928b16ad88f6c5fbe7e01c33eac00a7c71d6ee2a8c1d68300ab2b1a9f14423e95b917d178c16b90dcdee719bb47ccd9bef12801524abdfed23e28d76ff1ba87fe3bd41aff2dfdc1ab2c29b7beb912a5bba14a9281be00c56485522a98e812ff95815aecb6b52867a90f0cbe1c77d1d4992f91a21e33e46c16bfb552464760d4651b4ff531a8d8c5eb00b1c63bda14625601b19c6608d09e244545e6842bf03625dd441a0bef0ac89229d78cc75f98c74ead19eb07e067d2c8860dc4bec16ddacdd024251fb012ad542e296f92303d0c9ff1ca2b802315cfaf298cb54b8e07f836bd9f891afd786d571f49560458e45a5c83de063d63626549a3cf61b20f7a6f15e9aadfe337e915c4c7c51bcbe0fc3979ca5105d68afc1dd30acfd7d2a04d41ec1a7c9f9014d2aee5c08c55416ca93a167f0590cce3dc8b52d0520697a5ff0ed9cbc0744018acf3ae96aa2bcced8261151c4f18c68f70ba9245829bf5ae338f2fa7faf65cd82b9fbfd2b93a35d88e0859749fec96cc9ec9317c4a8542b949ea6b4eb5acaa462667ef57071fe98a47bbfa010d28dac4ff5441061d3edb376f7199eb3768ccc44a78a9f008c1f9e435fc1e1e09e1442a2600f821e62d1ffa3b3e341c7f844759462e58f7505f0fab264c22927226f63ff88376755d36df9bf40cd921e56264b6a70c24c11b6814e07293d47339b813a3edf5cc9f02af833166fb58853f615e0674497efcedbad46abec38b8780a42ca0bc6700c4ea49e37c1975b748ea8f3ba56ed8af762533428daaea6d7a310b5e4ce493a4378217dda0c042e862842e8feede39e1f6f89865a925faa1b1c815d56625084ac87a60dbb650cc89c68628a833ee2e389408c048f556fbad9e8aa2b8335c2c4beaec594e781624c2704618ae025c7aa8189606cc0f9207db944f08f66744f8a6182f7611a41146f7cf1b0d56d786ab806abedcf7eedd2b13e37db927cc8aaffdfb1aa0aa0be4cb7d780bbf966d92d01005df03a4f1cfd56dc5be9eb82cc65dee0d4996a76f7f8b677187a4cecf05e383273c9910f4fd4a0e8bbd4c6a3554cb5269a7a09304169771198d44a81e6c7f1fa42cca0f1cf9b5a971704742c5d93cd08bc1ac7c41448c93afac9f543e4e119529347c792188b96781746ab251741d013b2b71c14a86e1a80d044c08d7b93cb3ed8e866fc1fa1dc6c668c292f15428ddb158aba8e0193be34c91ac4cbf7ceacf10e34640d8efca96dbcb5db2a550c139086bda6195374316293d1ab78be141ecd8402ec5f8b32ca3c70012fc8b8dae4afa1f2daccc1e6cd39b089020a25bf28f5143fb649305266246e7e29dc69119f00206b48b2b7e0cd30ddada92536c4a81b736507938143d3f1d65a18c3436c34d5a8a22bdeedb3a23237168e4de94b5b5f52d3320ef2b7a8d75996169ce2346eaa16517d08065963645f38a10b5adfebb5b2ba185c90035b57afad26ece1e65a006d14cc44a5a2dd228f6b8a188f4313321ebd157a28e661e06d5a3df4dc1c487f25f14186d2d61db4de3d921595e98df1ca43f5133dd5b54e1c518eff5cc86dcb69d12b8d6bd52a20628c6c9063bd325cb6b2d1566a3a4c264f0bd4d09267dafba59c7c25a4da712806b0702207dff385e3bad680b80a5be47349c669b1f85786eef1dce853b9b8e28f68f01dac56fa5439385d7d1c6bf1e9bb1ddf645aba5bb0ab11fb2b5608fece86e90158bf5caadf8c34eaae1262bab5daf930dee7fb7356e1084c88f5dd7ae853514a3e8aededce36157324ff6b6cf732b68d029d73bcde46c3ed732352249a983ef38ef79a3b1a97d5c06aeac787ab3ff1b579b64aafad6fbd6ad69947eaec13a903f009e2e6a8009763d941fc8f291c6aee467e6e23f7db79340d72ef6d7a5aaa472e43144ebc38c700815b83bed99994e0e7625b10287bc384468cb4f74e2256d365b75ec2a0880ad2eb18b66c4134d6a8ca2430c5ee678e76f59f337536f0345fb9b1bbca6e337d2e84a14b52887eb1d59763e7f3b63d0fcf8eeec28b2c2933d7320d8d27307f55fdfc8a30162f7eb88815503a220fdee3c65f10daa0baf48fe9d732f7bb59f50f2f7a27ff66ab8452135664d2fd219d324e4e2253c55e878661eee2f6c90759cd57d7bbc019eae98329f3197f9d9fc110d2450bbc952d7034b0a2b1c678c11e0d1d2dc589868318c20b6ca0869a6b75d088784bb7f86548d916fc3e5e5623126750fc1a7d49b1462c7c576c4eb89f5a3c66518cf43ec64f9ab8d781d9bd86db0d8826b52bb6b71071373962b1be650db5df06dacee81e123aa04bb75e00c2e284101449d80ca6fb4943c54c016f2fc5445f788de5e8fbbcbeff381d4762d4ab8d08afdbf113d2912e293bd5fa2ae06f74f4015acef030c600d77b70f1d9cdfa32130d549400a78da833340a7b4881119ad359c1b45078bbeb48fbd28296e8b2b03a30996cf0efc6c9507c3f0df360e66124c45499277d5c04841b365858e0ec73b2f6487e3838a85df023d74a8db80926b5bb8174b29953e990c64a03c3c6d82e9dfeb10d96503b5fa91b6d0d7713e309286326c4580d7c1a1acac94b6626a0608eaaeaf66dd36e79a80ef7b1a5372b5ee046c99555ad12806af7354a1cfeb4dd6165bcf9eb617cccad564b4eb7f44ab880ab88e9b65ef613f03ec3adcc463ade20b9ce627a281fc7a4668666fb60804d5ab96c24b4205fff495db832b97fc7392d91651d1ef566aaf57d96414f4e5ddf8a7b8f397b7e8ce85c7c4014b663b770065f95099889c5b6e839d6811a45917e78afb25be2230e510dea92cd2bd09be475ec103e05855f64b57d2c98710e6739a5d9640ea3e12426830227f97c26de14e5c60fb721a63f319bf8032a0e95e0bbf291c8c3aa617c8f800db10e8afd0df7134feb97942141ebfef1007c03a2ba9e7daec951c89ad01526ec1318576c13028340628d6fec6f8f708f9dc67cf358feaea0fea054f569d0689af5b0b90f048336ac16d3703f203c837466d2e9de1f97126d2252176ba63d7f6f1cc40fc60157d646350f7cdf10f180a0c56e094226c3566c61c6d7c2f136b3e2c4ec8a0dd7d1397526a5e60a4ccc56a59c60d213ac3d8aba95a3d36e902f72874743c81a5bd6064fa745f09befc411bf2dfe89c4298676e12e8d17aac475f2af87d743fcd9a192c277cef2dd7c422659fbf1fce124eb6d03d1f929c2445e9cc2b49f6d2c8b7fe981da77e1451f5d52590c52e9ebabd22630950fe7e7a706bd0ce9dcf808c803c95735c97b2819afb39a79099fac87d150e4f44c10501c9ad7c1739764c652e4cf071bba418f64309165fa06794dcd47d6d7d98a0acbe0e3aaa6d7f6a769670bf4e72f36e8fd4359f44fe57368c235ba3eb820c97cd428b102dd783a99b1fcad85c37ab8b252bb5f48dc7c93d7f2df29cafd1a8d1ce8e93bbc59ec2b84b9b2b56e3162cf9a364c9935aba46a23b56cb828030a8c43088ab7b38bffb96f96e11d9337a47115502b3d75cdc60f4802d2dc719f395d94f6afdff2e55cfa44b4924a30455398a5377278dc89068347d44a346afef73bef42dcb59fde9cb561c41a527cd220f0ee906d49cc330403edcafc15eb78bb45e66e2d6bc9927db2b6a15ba231bb4a2d89adae9f40839df422897740a37ba317fc7989279a4667a4da2b810dcd711309d16fb", 0x1000}, {&(0x7f0000001500)="469f495dc0008be2315bfab65a5e732c96f762d5752a31de68f0b204a0d7cdbadd0e68c881559adbdbac998657cc367b54e607076b9590a2a5fc4faceb027a213598bed54507a5c4f2533539267e23b6be4d3fffaf5527a2d8a8a698c7869bb5a10691edda851665ce1b7b50406a5342b6c6d793838a3643ed68acb63351e2c2", 0x80}, {&(0x7f0000001580)="77f2e037ab599cbdcbb8daaac9281d5c5496aa922a69ea62cb5e83080b843664c7b77f8b6921c2b6b966e265b917590911fa573a99194dd363c0f235b3c4f6ec91df1a50d0275f45f8ebfefd11386dc2e3991025582bebbe1c6224f2af790f776d027d283603861d85e23a13ec86ae1f10c3b0a032b4a95e568bbaf81864854860f06fe119f7a4ccc15be5194bc93d711114be98a98aaf6f", 0x98}, {&(0x7f0000001640)="8403f1c5951d92978e3a2e666f2d740ba79c58ad8ef549bdea0e38735f1b205305de0beee1d08481a3dfe66701507599", 0x30}, {&(0x7f0000001680)="abe4230392f81680966b2b7c3095835626e11cd32dc3a53b795464a6013108340b7c285e9ad488583dab4f85e0ae519aed52faef2776b8508535ee42447eba465089b841ca3c6e57e4c1e981ad677192669c8947325a63d33bb8f1", 0x5b}, {&(0x7f0000001700)="a6ce3c81fff20e63a1951b651a83f93d2000ba9560dd7cd76b41dd7d5c0e3c2bf4ae5af05ba2b84dcb1838b548abc35ad9712dedef11612919ee053a281a6152477f1d5bc192a582", 0x48}, {&(0x7f0000001780)="d994ac6f03a455ba2b64b309608fa6739e8c22e5b7e1e4bba18a05183c0329068dd295f8a84a8c071921d27375245de916522369caacdf1d2fabd7b6b342dd070149166814e17c9bd5266954f5a43fb83af7ad9af86c5859909ae06158b510847dfc9d9519c532a408a4248f7429727b4cc68aef5c2c7ab9fb5746040b2b95ed7df43c74bc0f179dd4fd7df975b0", 0x8e}, {&(0x7f0000001840)}], 0x8, &(0x7f0000001900)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x110, 0x0, 0x7, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0xf, "25cfc0e78f2ec28c1de868a563"}, {0x1, 0x12, "d5330b7ad37f78f9d0e9ad602a5c8508"}, {0x1, 0x4, "d73c"}, {0x7, 0x2}, {0x5, 0xb, "f1ffd1e247d1e23bda"}]}, @cipso={0x86, 0x4a, 0x2, [{0x5, 0xf, "8499a38c930351d099ab226dd6"}, {0x1, 0xf, "a34026483f7711281afe5ecc25"}, {0x5, 0x11, "987cd8d04d81a455e963636efe79d1"}, {0x5, 0x6, "32f8cca1"}, {0x0, 0x8, "43bb568b3129"}, {0x2, 0x7, "832a559a8f"}]}, @cipso={0x86, 0x4e, 0x1, [{0x0, 0xd, "b35cf1a1b98109c27a5059"}, {0x5, 0xb, "02a4b61c63bd38ffd9"}, {0x6, 0x12, "f110d78defd43f3a92041bf200e41114"}, {0x7, 0xf, "ae23940de456229a67f1197279"}, {0x0, 0xf, "b6f0a7ba6f50c05e37282861b8"}]}, @timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@local, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x991f}, {@local, 0x400}, {@multicast1, 0x9}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x40, 0xfffffffffffffffe, [{0x6, 0x10, "27172972167fe17b5a8195a4fea0"}, {0x7, 0xa, "185cc5c4035823db"}, {0x7, 0xd, "5990ea04009bc227523005"}, {0x2, 0xc, "1908d0acb81aa5b52490"}, {0x0, 0x7, "3a3dc1bb34"}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x5, "0c9508"}, {0x7, 0x9, "aa1b43f98cf7cd"}, {0x2, 0x5, "2ae833"}, {0x0, 0x4, "fb78"}, {0x7, 0x4, "74c4"}]}, @timestamp={0x44, 0x1c, 0xd4, 0x0, 0x3, [0x9, 0x2, 0x6, 0x0, 0x69, 0x712]}, @noop, @generic={0x89, 0xb, "34eeb5d1e3586854db"}, @noop]}}}], 0x1e8}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="1bbf7e496eae8f963b235e09689fa561717f0ed543f13114c474706b378acef47779f94c3261c3dd", 0x28}], 0x2, &(0x7f0000002bc0)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f0000002c00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000003180)=[{&(0x7f0000002c40)="50d3c4899dc0d6b2e56b4354069f762c751df04d99d0b79d7259ee8ec0541569a779e18d8d21d79905505006c11c6d1e7878ef88b7f787751480a77d1c576afb39cbc37f213b292e8a9fe7a24577a012dd19d1a9e07b428c9613052981bbd38f97ec7487cb705797dc9ba4c6624c9456d3a9f39e99fb7292122c0394f541efb6c00879b1fa852ac3a2b415dfa6ee7aa9d7d7f03e0cc1fb4ae9f1aa2c6314a6ce04d66205cac758fd3e1350698fdbb7d23c9d246343b43b7d34640f691f9131f2a5049ece9012e570409e7ae7ffe7dc4bd85825a2b8c5d98508398ef41649a61e4b7c8679ab0fc81454020fcc47a45fd54f", 0xf1}, {&(0x7f0000002d40)="5fb41088c7e782bd7e8ca9aab7d0443a86a8c93915cbe7a7d5bb8ae0acfe41630f8c7bfc81244c7d4147fa993ae19cfaf993a8219de4675dc5cde4ac5e1875c3f087482638e1d45db4b72090cf219352912a2c8e7759475d8030d3cc0215858bbe577b47a14b0d78e23f1e8d12e6462c85f617b320a42246adc1992e88427e6e3a9d393ccdc0e5f831d7cae982b3fbdf0724a40a63e44d34a0239e041f4f41f2a80720d7557c6e36d35537f31ed5b22d3f3cdbc154e04432eda86cf2bddc3d75b8f78901e8a3f9cda85327bdcbecc17de0be67c7fd1a784f7d586e065fbb66ff2e1663524429b984a6f307cd223d455c7b1e9a4eb729", 0xf6}, {&(0x7f0000002e40)="20ab49a3dc905750a4a03c1827ac3a1f7d62cef5f981e1712acd5f23132e224210e85be1609276cb6a5f0668fa2fdfd0f07b08291aacd0f94bafda06e9c3f2deb3c6096f7ed2cd0fbd08188cd46e35513c47ddf9907938a07da1621054550d0f0da139892139ae8c08b4529573ea72ce922224a0c69f234b950a61b2e49f1417596c93ab0333e0fc3d94890c0f32e39bc22b41a86ad00c8f12373e8d1ec6a7159ff54261723bb2d78e9ab88a0a62698c0b1ed8d0e3ce622ed136aa773d1eb3ae7368150cef7e93a981c872d45a09", 0xce}, {&(0x7f0000002f40)="3703de316308e60f8f659c8c6a5c1a3ca9fb67bf8a5b79525079f400ae6d916d0f2e0ed96d608559d906065a096072209ddfa4127b521e7669834061559f1074efb01f06e25a1fa8a2df4f69903c16d7509f6b1a5dc595ada701c4337d4db374038d5f7f2e2389b0dba0a4e2e22fc6ad3b53614ebc6595d3d0b81394ded93b84d11285f5f77dddd7d15c1b9ca0b6d9b11297011f87d9edb00569499212d499b9b75909ce5bbf565541c91d7d1bc02d5872ce22e12aaeb0c7918b85ff62e15b12f3", 0xc1}, {&(0x7f0000003040)="fd2c73a45e316e736cf8b17f6f895a1d2dc093d838701f617b7b5e3630c564f5c5ccdc041d1211d267e29a60d820ee556e8dbaaa19d7f585b501f3cc017bfb521b0489c135e916", 0x47}, {&(0x7f00000030c0)="8788f0c0465c9f9ea61f4c5c2582859c33e4262cae629f92801e5cb35e42354f912f712f7d50cb1668a5312f827591dcb6aa14bbb45740ba8efa38bd63849443477c66ac8c5c7b9a52a8a98a834937388f3e951b8b2d983d83fc75a51b3c82faa5217a6349c57f5d39ec031fc95e678923ce7a5d90a7ab37832f2288e24f90acfae7ce75ef154d48227e14ea84c8d7c0343c8008908300f803ba10297d77b554e5811598b99c44262ab65ca9c44d5cebb0a8619ce8cf", 0xb6}], 0x6, &(0x7f0000003200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="2547150dea7bbdeb06dca9be34f85d681ad356cd3d353a49c5756e8a88006fbae69da451d49157b286fc443675bc8478e78d79ba22c40bccbc9599cd5a5f60ac7e2f3218411d4a42f949da3c78b3c9982a16692fb0de5ed97aec299b3b2927889fea", 0x62}, {&(0x7f00000032c0)="1ad7e7bec1abc25baf0841124cb2fae89e4fa96ca1293f501fc020aa33eae93c", 0x20}], 0x2}}, {{&(0x7f0000003340)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003480)=[{&(0x7f0000003380)="aae10d4517eda651753939fddb1688128fd47669a6caaa1367b550893cb62604b613f20a7ad3bfdaa9c1ae1f700bfac9aeecb363ea38eea020e997ed7bd1706cf0c45d63531504ed9884dbec22ee4996a5abbcd45cfac469c8e90f7418e8bfced7", 0x61}, {&(0x7f0000003400)="8c", 0x1}, {&(0x7f0000003440)="98ebfbc3eba53447f8ca19b52d53222dc56635a1581dc5f3e4bcd8d887a693837047", 0x22}], 0x3, &(0x7f00000034c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{&(0x7f0000003500)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000004600)=[{&(0x7f0000003540)="bc718ee88aa65a113c2a81b45090cc1e76f5df4e06d5f47c5ca6bc9f4fb8b665428cbbe83d23b557d7fd07e94e7d3af56888d16cee8b7e64b7f17b3d2de9b925a4462233d0f69780d96ca40176442e22a21c0c529abb72c53774ab71418304b823d20af43fc6a17d8f0b81f63e33c79d89da369c65e85f7aa80830ec88d4abdb193b43d9e4ced908cd8eaae742757f0bb07684bd7c6277b0c688c3e6aa17e77e7b", 0xa1}, {&(0x7f0000003600)="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", 0x1000}], 0x2, &(0x7f0000004640)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004680)="49dc6af859e2d56babd25acba57f94522f5775f66c6c853d8a9102837e95771c5ad70199068e134d161d5c82a45a3fdd11cc2756b0fad754832f4645c1da2e007dd2df31d1ca81f4943398df41c41e4db4948cada1c294586215979e98d7bff9d9df72b7cf3519b3c4da508b6ab8122091f88dd0", 0x74}, {&(0x7f0000004700)="1fdffff21a933fd771117ba191e957dc7e0abd46da61fe264d940f2c1177b74b221ae1a1af4bc62194df76e1cf729d4705793d189d4669ffcd6fbbf43a675c557f80267ca40bfdb8c7329e1bb00d62cc2a4c5898a8e37f96656a27e58898a6ad8b344bba52ae57dfa1af481b678d71e7d4473f966530bc7b3678a6d9e843f455bf9ea3a0476a5b595d6bddcd51a8d21fb6a0322efad5ec6309ce2b265041b1f72398bb29ac55eadbba38b35ff7fdcb59d622c5ce455749568283790caf1368184fc74cba8cc68203bd849c70cf1994", 0xcf}], 0x2, &(0x7f0000004840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x25, 0x0, 0x9, [0x5, 0x5, 0x39ff, 0x6, 0x3, 0x768, 0x8, 0x7]}, @timestamp_prespec={0x44, 0x4, 0x35, 0x3, 0xd}, @generic={0x83, 0xe, "77a4586043059de4eaa6ab3a"}, @rr={0x7, 0x2b, 0xc4, [@loopback, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @rand_addr=0x64010100, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xb5, 0x1, 0x4, [{@broadcast}, {@multicast1, 0x1}, {@local}]}, @timestamp_addr={0x44, 0x34, 0x1c, 0x1, 0x0, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8}, {@local}, {@multicast2, 0x6}, {@broadcast, 0x3}, {@loopback, 0x6}]}, @lsrr={0x83, 0x7, 0x5b, [@empty]}]}}}], 0xf8}}], 0x8, 0x44000)

[  159.624056] loop5: detected capacity change from 0 to 264192
[  159.652428] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz-executor.5: Bad quota inum: 524288, type: 0
[  159.654247] loop0: detected capacity change from 0 to 64
[  159.679447] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=524288). Please run e2fsck to fix.
[  159.689485] EXT4-fs (loop5): mount failed
15:35:03 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00')
pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2)

[  159.712153] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=553 sclass=netlink_xfrm_socket pid=4071 comm=syz-executor.3
[  159.739677] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
15:35:03 executing program 6:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x0, 0x7, 0x53, {0x53, 0x21, "cb9b0c256fb5570d11fb7f80293eb5555910af026dbea1796c68b60af811e964ec855e88f08406e7f1ac60a7ec5a9ddb41284b94b5a4b24753f85f1bc4e0cfd14d3bf9dd9d4e2038eae5cc49a2d867804e"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x20, 0x31, 0x99, "8caf1ad649a93feb914a0c190e0096ddb512535441874f49548aaca29f34366e7de00f5108b060883fc470906348a783713f6542d3bf782b51d3cb7541e574f421a151d9638cb1528a2d46f05eaec817949bfb6eb7deba57b8ea917eafad5218c99ca04fb0ff7874d31cf926cc2f2161f3e78ef5e2de2b5e07d58915486daf2c3f4a3fe2fb067396210036ff5064daf116fa0a1582286117ce"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0xff, 0x2, 0x8000, 0xdd, 0x7d4, 0x7, 0x2, 0xc463, 0x1f, 0x7ff, 0x3, 0x81}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}})
exit(0x1)
exit(0x1e3)
exit(0x7)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/184, 0xb8}], 0x7}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000007c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="030204604867", 0x0, 0x0, 0x0, 0x0, 0x0})

15:35:03 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x40020, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4)

[  159.937257] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=553 sclass=netlink_xfrm_socket pid=4071 comm=syz-executor.3
15:35:12 executing program 0:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300))

15:35:12 executing program 7:
r0 = fork()
ptrace(0x10, r0)
tkill(r0, 0x1a)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
kcmp(r0, r0, 0x3, r2, 0xffffffffffffffff)

15:35:12 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1400000)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x9c, 0x1d, 0x9, 0x0, 0x400, 0x4020, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x290, 0x39, 0x7, 0x3, 0x0, 0x3df5, 0x4, 0x0, 0x7, 0x0, 0x6}, r1, 0x6, r0, 0xf)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="bd000000000000002e2f1701f3a37366"])
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40800)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0))
syncfs(r2)

15:35:12 executing program 2:
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="21000001021802002d"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15:35:12 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
pread64(r1, &(0x7f0000000180)=""/208, 0xd0, 0xffff)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000000c0))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x4000000000000)

15:35:12 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x8001, 0x1, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0x1000, 0x8}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='dotr,nodots,\x00'])
r1 = getegid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,cache=loose,version=9p2000.u,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',\x00'/13])
rmdir(&(0x7f0000000200)='./file0\x00')
r2 = fork()
ptrace(0x10, r2)
ptrace$poke(0x4, r2, &(0x7f0000000100), 0x1400000)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x80800)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00')
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r5)
kcmp(r2, 0x0, 0x4, r0, r3)

15:35:12 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00')

15:35:12 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  169.485814] loop5: detected capacity change from 0 to 264192
[  169.500813] loop0: detected capacity change from 0 to 64
[  169.507606] loop3: detected capacity change from 0 to 64
[  169.514471] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
[  169.538631] msdos: Unknown parameter 'dotr'
15:35:13 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:13 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x1d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24014011}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRESOCT, @ANYRES16=0x0])

[  169.576652] loop5: detected capacity change from 0 to 264192
15:35:13 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  169.629362] loop2: detected capacity change from 0 to 264192
15:35:13 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r0 = fork()
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f0000000100), 0x1400000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f0000000100)=""/96, 0x60, 0x0, &(0x7f00000001c0)}, 0x58)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800)

[  169.645013] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  169.664374] loop2: detected capacity change from 0 to 264192
15:35:13 executing program 0:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300))

[  169.691297] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  169.713435] loop3: detected capacity change from 0 to 64
15:35:13 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1400000)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x9c, 0x1d, 0x9, 0x0, 0x400, 0x4020, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x290, 0x39, 0x7, 0x3, 0x0, 0x3df5, 0x4, 0x0, 0x7, 0x0, 0x6}, r1, 0x6, r0, 0xf)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="bd000000000000002e2f1701f3a37366"])
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40800)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0))
syncfs(r2)

15:35:13 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04"])
symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file0\x00')
linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x0)
unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0)

[  169.758041] msdos: Unknown parameter 'dotr'
15:35:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/141, 0x8d)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
write(r0, 0x0, 0x0)
connect(r0, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e22, 0x5ff1, @mcast1, 0x2}}, 0x80)
recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x0)

[  169.820029] loop0: detected capacity change from 0 to 64
[  169.829464] tmpfs: Unknown parameter ''
[  169.850547] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
15:35:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[])
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x50)

[  169.880822] tmpfs: Unknown parameter ''
[  170.019616] loop7: detected capacity change from 0 to 512
[  170.074307] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  170.097833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.185247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
15:35:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:22 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

15:35:22 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[])
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x50)

15:35:22 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/141, 0x8d)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
write(r0, 0x0, 0x0)
connect(r0, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e22, 0x5ff1, @mcast1, 0x2}}, 0x80)
recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x0)

15:35:22 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8d99, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000000}, 0x0, 0xfffffffffffffa8c, 0x0, 0x7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r2, 0x49f3d43f9f2e6f70, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)
recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000540)=""/223, 0xdf}], 0x6, 0xfffffffffffffffc}, 0x2060)
pread64(0xffffffffffffffff, &(0x7f0000001740)=""/75, 0x4b, 0xb5fb)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
sendfile(r2, r0, &(0x7f0000000000)=0xae2, 0x10000)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read(r2, &(0x7f0000000700)=""/4096, 0x1000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r5})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x17, 0x0, 0x1300)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r9})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001700)={@rand_addr=' \x01\x00', 0x7b, r9})

15:35:22 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

15:35:22 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = dup2(r1, r2)
sendfile(r0, r1, &(0x7f0000000580)=0x4, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x4, &(0x7f0000000400)=[{&(0x7f0000000100)="a25eaec9eff2c3029da1ac71b8a7caa145a0928c7b3073bacaeffb3ce90e4f5d770e36216eda5cbd266556d76fe209a49b2f4b54fb9c402dcd3c89968f4e2d3a343ce49e07e4a230aa8ac4abccc23a973ebb054eeec8a5460e9ffd008f582275ccda986e95cee953da6c1fe806247fec1168bd89db150aa6a5b4f55bdba37f8880d90c8d54fc1b772a1c81d2b80cd362453385c51dd1d956322f90d53c2e17f3a1623ce572b91c43f2e29a0571988882c1079f37dd160a1d4aaa222d57bd0cefff48b2f898a79ee772f608fd6aac109c3261a273b4d001c398a738035edd83250cbbe4ce84453b9d2e", 0xe9, 0xc3}, {&(0x7f0000000200)="d2cba3b62b932b8f6ac6ce5a2d2f1f989ecd07d910bdfe4308691fd2754acbcd134c7770b5cb14d21d4f5f355a7a7db77b2c40d0a0d0e3d0043a030000006fa1c5904a22f82b8ca7e7d1e0a0217c5347420da4ac6686bee959018bd62f8669cc5d665a4a316d4b523f31baff2a903ce2396d27ef0e5a2ccede", 0x79, 0x3f}, {&(0x7f0000000280)="7247d83b0cf69ec2b72d4ab6450e6ca922708b53cb5ab3111cc54c5c2a7bb6829813d945c8e46f6b6cf759d40ef016012d30a9f686324bc949062f54234d8400f745e71b915df57fa8fa437829c7", 0x4e, 0x7fff}, {&(0x7f0000000300)="8061fe45e3db44d3b2db6209debb82c69858593ceb2f082d95d7f39f9e223e8b9eb890ec4cf7b9693a6e63204d5dbfeaddb300d24c65978bba5c21f5dd11997645c1a169a22f1d3fbde50bc16dfce0a07d153d287d296e68bb8779b70872a5c8f32ff8e5740f3592a30e89b7011b2f336e30078e79de48b1c1442c4dad3acf244a2c74f506574b562df1446c552518db4aa3cc3ca18d18914c581d4cce0ff7c3f7d985a07031cf6fb49e9aa9d84a270bc7c420ffd5b24763bc29cf04fea062cd0ea5c1d2e5e591626746629e599054f143604aff81990f1abe663a4383cf8c90", 0xe0, 0xe3b}], 0x40000, &(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYBLOB="2c61707072616973655f747970653d696d617369672c007a08ac4492a26a9e1be971a623a516bcca4abbff9072cb80c4e12b108f564b1091096dfe3635eb6bda5c01bae3591480ad39c4dc14d7fbe5c37af8d7eebd3f21a80b82aa989b13b0a6810688628323e76228f2335f9381a697f3796a0dddf7054b7ea86d7f85792fcd66db"])
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x5, 0x80, 0xfe, 0x8, 0x0, 0x3, 0x180, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f00000005c0), 0x5}, 0xc0, 0x0, 0x2, 0x6, 0x64, 0x0, 0x8, 0x0, 0x5, 0x0, 0xf5d}, 0xffffffffffffffff, 0x6, r5, 0x8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000540)={0x0, 0x4})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r7, 0x400, 0x1)
fremovexattr(r7, &(0x7f0000000000)=@known='user.syz\x00')

15:35:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x7b80c100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0))
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0x6c, 0xd1, 0x0, 0x0, 0x1, 0x20820, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x800, 0x5, 0x7, 0x3, 0x2, 0x4, 0x9b84, 0x0, 0x5d52, 0x0, 0x9}, r0, 0xa, r1, 0xf)

[  178.745803] loop7: detected capacity change from 0 to 512
[  178.764965] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  178.766232] loop5: detected capacity change from 0 to 264192
[  178.784079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.793695] loop1: detected capacity change from 0 to 127
15:35:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:22 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

[  178.888277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
15:35:22 executing program 2:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x7fffffffffd, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)="2c8dd798f02f942d9398ab828894bac32833570185bf85862d9667bd0bfff4edc7837a1c12349233d81e7990122e73d0a0812e770d68a6960e4153c2d72187ccf2c23240a4580549e59e1aff2749a2544a95c393378da65b5af44b2f58f7b0b5d4a636eb468d7bcdced72628764dd4fa1078ab496b47e8e778784e6501d1e8a9842abe688caf972c49e9f3da049ae08a8e2ed9daf2d1b320b681e2ef8439d824c00d82286cf50ebb", 0xa8, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00')

15:35:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="89426be9cced1ff25d5a3c8a707c1def9e1cd4144e66d40184d857ae38617552a5471df498b9d0905d298cc049e30b4ebe6fa92b154a734da669da672339c77c29462badf6b107acd4c42d9d1cb7dea3ac33e66dc8eadc310d48ce1cf217956a98b5fc7bf9287d94ce1255b3014ec40b2c6b62dbc986d679fcf6e51005ccfd8c680268b9205101cfca6ca4", @ANYRES16=r2, @ANYBLOB="000129bd7000fbdbdf251300000008000300", @ANYRESHEX=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000080001000000000005000700040000000500080009000000"], 0x2c}}, 0x0)

[  178.921461] loop5: detected capacity change from 0 to 264192
15:35:22 executing program 7:
r0 = memfd_secret(0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250f00000008000400010100004000018014000300ff02000000000000000000000000000108000b00730670000600010002000000060004004e24000008000b0073697000080009004f00000024000280060002004e220000080003000100000006000e004e20000006000e14cc4c27002d7ce5b335366033bc4a61fa8816f24d53c2dde4086c61004aecaf584011851a66c9e58180ab34851094c0b17dd78252fc2deca96032bf031f31a1902a0faa88527a16b570933d1737d6c91fba320a1b6b7a32553be7f146f5db41ca67916d0b36e3150ee7ae97d78ddb98e36820dec02f1ef93b00b3163016"], 0x80}, 0x1, 0x0, 0x0, 0x2004000}, 0x880)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = dup2(r1, r2)
syz_open_dev$mouse(&(0x7f00000000c0), 0x3d, 0xa4200)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f00000017c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1294, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1f}, @ETHTOOL_A_LINKMODES_OURS={0x121c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "c86cb6c2a9d935a9524c7b1453b19eef3db3c5fb18c6cf7cc512c5bd324ec49bbc008fe88a30ab3f3f023f85d16d61c2cc659ed80f04333a06a0d2fffe4ec8884e8f069c286c6d7e1346b263a40ca0ff0db355b2684e732cf24d61da495c23dbf90aad4148b700e90a6412aa2d8a4c9ba0ac0ea2e2944403db84c2bb0bfe93d0e2ccb77e67f290ef4c4b3723f3d62f091e3feda10899f15052e7b2747dfcaefd5976bacc0d1f1d091bf796aae4bf693300228ffd511df7ea2e52fcfc5accdb5c42f7ca46a4ee86b091aabaea7689490634ff01fdfb152cc2c720dec2a1f2a8800ec9ba3968223536af3c50"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6570ebf}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "f5da2feb85d4da93a51507ebdbf1fd968d3780d3ac068b844ef59dca2c"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "dba910e54a32fcce038d1ac310b4f48bd207d277792be1d7c7350c7cbde2ab089d8f15f328b826a3894696152740892d9373791e8c53dcb6179cf92f889792a6dadd72e6ae58f442a1996b3dc50f514dd99017ed49cb378f16f246e672c118c65a335d81468156f284c6bb5100d666a99e8095ad74d38ea8b3e0287f29e70a8163ef04b43bf00b65cf523a29a3d31245d46beb66b348b3d9c88be4e0ae2bcb7365a3c0e8d22ef03a700df5ecda700166444b0c2b16452b5ea31ce9d82ef3fbc10b8e91de890ee686ffe998e44e2c3e8edcba884c81004f3648969c5787c9ae334afb293a46"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x11, 0x5, "37585d91f1905c474a7de3ff99"}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1294}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r7, r8)
syncfs(r7)

15:35:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

15:35:22 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
setns(r0, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})

[  179.018309] No source specified
15:35:22 executing program 6:
r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17)

15:35:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x7b80c100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0))
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0x6c, 0xd1, 0x0, 0x0, 0x1, 0x20820, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x800, 0x5, 0x7, 0x3, 0x2, 0x4, 0x9b84, 0x0, 0x5d52, 0x0, 0x9}, r0, 0xa, r1, 0xf)

15:35:22 executing program 7:
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/79, 0x4f)

15:35:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

[  179.118089] No source specified
15:35:31 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

15:35:31 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="89426be9cced1ff25d5a3c8a707c1def9e1cd4144e66d40184d857ae38617552a5471df498b9d0905d298cc049e30b4ebe6fa92b154a734da669da672339c77c29462badf6b107acd4c42d9d1cb7dea3ac33e66dc8eadc310d48ce1cf217956a98b5fc7bf9287d94ce1255b3014ec40b2c6b62dbc986d679fcf6e51005ccfd8c680268b9205101cfca6ca4", @ANYRES16=r2, @ANYBLOB="000129bd7000fbdbdf251300000008000300", @ANYRESHEX=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000080001000000000005000700040000000500080009000000"], 0x2c}}, 0x0)

15:35:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4883e5b92dbcb91f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
close(r0)

15:35:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>r1}}, './file0\x00'})
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1a, 0x1f, 0x3, 0x6, 0x0, 0x100000001, 0x2003, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x99, 0x1, @perf_config_ext={0x0, 0x8000000000000}, 0x2822, 0x7, 0x3, 0x4, 0x100, 0x9, 0x8, 0x0, 0x4, 0x0, 0xff}, 0xffffffffffffffff, 0x2, r3, 0x0)
open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x100)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x8)

15:35:31 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

15:35:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

15:35:31 executing program 7:
ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000140))
io_setup(0x4, &(0x7f0000000040)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r2])
io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfffd, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)="e5c8c95c706d3d2e1c4708f805c486134b2467284f0b00d3c54576f331ba837235d0", 0x22, 0x9, 0x0, 0x2}])

15:35:31 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

[  188.508319] No source specified
15:35:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:32 executing program 4:
io_setup(0xfff, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="01cb9c000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB="ff010000000000002e2f66696c653000"])
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140))
io_getevents(r0, 0x100000000, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700})
r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r4 = pidfd_getfd(r2, r3, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x9)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}])
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0)

15:35:32 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
memfd_secret(0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)

[  188.685991] loop5: detected capacity change from 0 to 21
[  188.699988] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
15:35:32 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18089}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_tcp(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={'trans=tcp,', {}, 0x2c, {[{@version_L}]}})

[  188.794288] 9pnet_fd: p9_fd_create_tcp (4265): problem connecting socket to 127.0.0.1
[  188.801140] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  188.802650] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  188.802814] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  188.802886] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00
[  188.802949] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2
[  188.804144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.804306] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.804389] Buffer I/O error on dev sr0, logical block 0, async page read
[  188.804907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.804995] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.805024] Buffer I/O error on dev sr0, logical block 1, async page read
[  188.808434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.808523] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.808553] Buffer I/O error on dev sr0, logical block 2, async page read
[  188.808899] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1
[  188.810010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.810098] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.810128] Buffer I/O error on dev sr0, logical block 3, async page read
[  188.810537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.810622] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.810650] Buffer I/O error on dev sr0, logical block 4, async page read
[  188.812128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.812213] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.812242] Buffer I/O error on dev sr0, logical block 5, async page read
[  188.812648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.812790] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.812820] Buffer I/O error on dev sr0, logical block 6, async page read
[  188.813231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.813321] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.813349] Buffer I/O error on dev sr0, logical block 7, async page read
[  188.815023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.815149] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.815180] Buffer I/O error on dev sr0, logical block 0, async page read
[  188.815631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.815721] Buffer I/O error on dev sr0, logical block 1, async page read
[  188.818380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.851408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.851976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.852584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.855657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  188.856189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:41 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
memfd_secret(0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)

15:35:41 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x3020}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = dup2(r0, r2)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="0c25000000000000c910fe880000000000000000000000000001c910ff010000000000000000000000000001050200020738000000030c81b6bbf6010000000000000600000000000000150000000000000003000000000000000000000000000000050000000058000000010400000000134f501838d1a4936c80173a290746e6d83049e732938e779e8c258d02a442e5452e1c4f126450f34e9fdb38bc27d4b0ef58655be75f7e4312516a68ecd0a9a68ca00e01ea2e6c597be550d8052595eed32b476f5212e3e56da1e91a75d2f6112bd63186119714d697f83a1f132c18edf465ce5db1d847f331bcb2171d07e3b780a8d4d3ff24a7577729b78fdb5d80d9dcc31bbdb12ac42688f8d542c9a84f9c8db2acf67d2bd6f06b73e141bf532845789ef435c6572548662247974e78687ee20000000000000066ad1a4aabf454f1e72df0dea72b664422360eddd87c9e896c8ffcd801fc2215bde2e0bc350f61b98087f9dc4fb47669a96e182f4c8e5a6de4d8fb7ab41f35502426738caf1d4d6334d56f558bb2b255aca131f5af5c05e653a464b404f881bbcfd8cfb7590f6978abb9a2f732646ef8a0e88e760966e629ab03c411020211c786e33985ed1cfe0578b47ac334fa98dd15b03292f990f09dc620f7f9ea4c9dcc1087cd4fb260a2ed6dc8"], 0x138)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r4, 0x0, 0xa0103)

15:35:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:41 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

15:35:41 executing program 3:
setregid(0x0, 0xee01)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/nfsfs\x00')
pread64(r3, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000000)=0x5)
setgid(r1)
socket$inet_icmp(0x2, 0x2, 0x1)

15:35:41 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r1, &(0x7f0000000900)="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", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=<r3=>0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x5, 0xf9, 0x9, 0xe, 0x0, 0x6, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x5, 0x7, 0x3, 0x89, 0x1, 0xdf, 0x0, 0x20, 0x0, 0x4}, r3, 0x0, r0, 0x0)
sendfile(r1, r2, 0x0, 0xfdef)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0xfe, 0x2, 0x3, 0x0, 0x9, 0x8, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x81c1, 0x1, 0x0, 0x2, 0x8bf4f23, 0x2, 0x8, 0x0, 0x1, 0x0, 0xa2}, 0xffffffffffffffff, 0x1, r0, 0x8)

15:35:41 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

15:35:41 executing program 6:
clone(0x9164a257731608df, 0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x80000, &(0x7f0000000000)="d4a6d8a4ce07a7caaf9515d580b6b4cfdc7acba8a5a426ae43f59073e2d56f98dd05d070e135372851d7e96abac24658c0d6bc5df064182a00c84f4814d9de97ecb19453b445f6ceebd39c4700b5f6fa67b0754c06", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="505cf31d1ae2a0438c")

[  198.064667] loop5: detected capacity change from 0 to 21
[  198.089467] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
[  198.102976] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  198.104931] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  198.106075] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  198.107195] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00
[  198.108407] blk_print_req_error: 7 callbacks suppressed
[  198.108422] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  198.110979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.111496] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.112304] buffer_io_error: 6 callbacks suppressed
[  198.112312] Buffer I/O error on dev sr0, logical block 0, async page read
[  198.120966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.121453] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.122251] Buffer I/O error on dev sr0, logical block 1, async page read
[  198.144622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.145344] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.146159] Buffer I/O error on dev sr0, logical block 2, async page read
[  198.147677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.148284] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.149085] Buffer I/O error on dev sr0, logical block 3, async page read
[  198.150280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.150770] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.151462] Buffer I/O error on dev sr0, logical block 4, async page read
[  198.152453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.152955] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.153656] Buffer I/O error on dev sr0, logical block 5, async page read
[  198.155421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.155967] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.156724] Buffer I/O error on dev sr0, logical block 6, async page read
[  198.157886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.158354] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.159192] Buffer I/O error on dev sr0, logical block 7, async page read
[  198.160444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.160938] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.161650] Buffer I/O error on dev sr0, logical block 0, async page read
[  198.163242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.163723] Buffer I/O error on dev sr0, logical block 1, async page read
[  198.165018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.165653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.166694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.167888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.168711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.170120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:41 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
memfd_secret(0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)

15:35:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:41 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
memfd_secret(0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)

15:35:41 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

[  198.415904] loop5: detected capacity change from 0 to 21
[  198.431621] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
[  198.440588] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  198.442277] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  198.443410] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  198.444508] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00
15:35:41 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x240000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r1, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040))
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x0, 0x0, 0xffffffa5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r2, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000))

[  198.480586] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  198.482144] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  198.483321] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  198.484405] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  198.486257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.487348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.492768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.493352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.495716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.502123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.502721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.514331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:42 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)

[  198.516229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.527080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.528913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.530547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.539643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.544564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.550477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  198.559949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.571954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.575229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.580675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.614526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.616260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.621370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.623052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.625070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.627593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.629641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.631374] loop5: detected capacity change from 0 to 21
[  198.631686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.634181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.636180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.638084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.639726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.642291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.644564] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
15:35:52 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2)
r1 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000740)=[{r2}], 0x1, 0x7fffffff)
ppoll(&(0x7f0000000180)=[{r2}, {r0, 0x1000}, {r0, 0x200}, {r1, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:35:52 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @rc={0x1f, @any, 0xe1}, @phonet={0x23, 0x9f, 0x9, 0x2}, @ethernet={0x1, @local}, 0x7fff, 0x0, 0x0, 0x0, 0x80, &(0x7f00000001c0)='macvlan1\x00', 0x8, 0x1044, 0x7})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c00010000008000000000000200000002000000", @ANYRES32=r1, @ANYBLOB="080001"], 0x24}], 0x1}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r2, &(0x7f0000000080)=""/239, 0xef, 0x5)
write$hidraw(r2, &(0x7f0000000000)="ac5556fb5efe4486217df20daa6b1f48fd161fc520576743895627b69e4e7cfaaf741eb6401c0b92c25e445948f8a9f32bb4685d6485397362306040b6d29aa3938e6575d45e", 0x46)

15:35:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:52 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)
uname(&(0x7f0000000340)=""/122)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000300))

15:35:52 executing program 4:
uname(&(0x7f0000005900)=""/102400)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x358e, &(0x7f00000001c0)={0x0, 0x3124, 0x4, 0x0, 0x2e5})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000000c0)=""/33, 0x42, 0x200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r1, r3, r0, r1, r0, r0, 0xffffffffffffffff], 0x8)
r4 = io_uring_setup(0x3591, &(0x7f0000000000)={0x0, 0x80003124, 0x4, 0x0, 0x248})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8001, @empty, 0x488f}, 0xffffffffffffff7e)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000080)=[r5, r5, r7, r4, r5, r4, r4, 0xffffffffffffffff], 0x8)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={{r7}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:35:52 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
memfd_secret(0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)

15:35:52 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:35:52 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2989, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00')
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x81, 0x0, 0x40, 0x56, 0x0, 0x80, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x840, 0x1, 0xa82, 0x8, 0x20, 0xff, 0x1f, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x2, r1, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='sched\x00')
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000001c0))
io_setup(0x8, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
r5 = io_uring_setup(0x1ff, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140), 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r6, 0x1, 0x44, &(0x7f0000000200), 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
io_submit(r3, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000001b80)='r', 0x1}])
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
r8 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
pread64(r8, &(0x7f0000000480)=""/180, 0xb4, 0x8)
pread64(r7, &(0x7f0000000080)=""/239, 0xef, 0x5)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="28e43e0a62b7ea94d251b426158fb2f8c828f9384196db659dc3d0ec985ec5e4d7f8f95989a64b4f931baa3ae977551e982466213e66cf095a001c6302e3dc0a3f4f4b760f54d0e071edf093499a4286fff565a26778781bb16cb1ad6aa012370c3d58b9570ed3f1512620c1c4", 0x6d, 0x17, 0x0, 0x2, r7}])

15:35:52 executing program 6:
socket$inet6(0xa, 0xa, 0x9)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000000)={0x101, {{0xa, 0x4e23, 0xfffffff8, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x108)

[  208.602008] audit: type=1400 audit(1761320152.125:13): avc:  denied  { tracepoint } for  pid=4336 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  208.610062] loop5: detected capacity change from 0 to 21
[  208.618660] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.620196] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  208.621328] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  208.622371] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  208.623579] blk_print_req_error: 41 callbacks suppressed
[  208.623595] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[  208.626052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.626578] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.627417] buffer_io_error: 46 callbacks suppressed
[  208.627425] Buffer I/O error on dev sr0, logical block 0, async page read
[  208.631189] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
[  208.636147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.636620] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.637299] Buffer I/O error on dev sr0, logical block 1, async page read
[  208.647557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.648197] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.648876] Buffer I/O error on dev sr0, logical block 2, async page read
[  208.656705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.657295] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.658129] Buffer I/O error on dev sr0, logical block 3, async page read
[  208.671578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.672244] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.672994] Buffer I/O error on dev sr0, logical block 4, async page read
[  208.681304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.681781] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.682476] Buffer I/O error on dev sr0, logical block 5, async page read
[  208.691336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.691812] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.692502] Buffer I/O error on dev sr0, logical block 6, async page read
[  208.701697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.702296] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.703005] Buffer I/O error on dev sr0, logical block 7, async page read
[  208.703907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.704428] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  208.705135] Buffer I/O error on dev sr0, logical block 0, async page read
[  208.706925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.707517] Buffer I/O error on dev sr0, logical block 1, async page read
[  208.715141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  208.720441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.735651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.737847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.743399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.758948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.759888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.773136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.777301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.781756] loop5: detected capacity change from 0 to 21
[  208.791708] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (10 blocks)
[  208.801505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.805291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.813212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:52 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)
uname(&(0x7f0000000340)=""/122)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000300))

[  208.827572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.829828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.830402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.850967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.852023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.858454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:35:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:52 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r4, 0xa)
fcntl$setownex(r3, 0xf, &(0x7f0000000040))
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x5)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
splice(r6, &(0x7f00000001c0)=0xf83, r7, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

15:35:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:35:52 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2989, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00')
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x81, 0x0, 0x40, 0x56, 0x0, 0x80, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x840, 0x1, 0xa82, 0x8, 0x20, 0xff, 0x1f, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x2, r1, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='sched\x00')
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000001c0))
io_setup(0x8, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
r5 = io_uring_setup(0x1ff, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140), 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r6, 0x1, 0x44, &(0x7f0000000200), 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
io_submit(r3, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000001b80)='r', 0x1}])
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
r8 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
pread64(r8, &(0x7f0000000480)=""/180, 0xb4, 0x8)
pread64(r7, &(0x7f0000000080)=""/239, 0xef, 0x5)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="28e43e0a62b7ea94d251b426158fb2f8c828f9384196db659dc3d0ec985ec5e4d7f8f95989a64b4f931baa3ae977551e982466213e66cf095a001c6302e3dc0a3f4f4b760f54d0e071edf093499a4286fff565a26778781bb16cb1ad6aa012370c3d58b9570ed3f1512620c1c4", 0x6d, 0x17, 0x0, 0x2, r7}])

15:35:52 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5db}, 0x1c)
socketpair(0x10, 0x2, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x48010)

[  209.024562] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  209.025328] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  209.025886] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  209.026394] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  209.028534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.029114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.029746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.032191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.033583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.034148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.035866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.036411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:36:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:03 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:03 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)
uname(&(0x7f0000000340)=""/122)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000300))

15:36:03 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2989, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00')
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x81, 0x0, 0x40, 0x56, 0x0, 0x80, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x840, 0x1, 0xa82, 0x8, 0x20, 0xff, 0x1f, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x2, r1, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='sched\x00')
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000001c0))
io_setup(0x8, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
r5 = io_uring_setup(0x1ff, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140), 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r6, 0x1, 0x44, &(0x7f0000000200), 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0)
io_submit(r3, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000001b80)='r', 0x1}])
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
r8 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
pread64(r8, &(0x7f0000000480)=""/180, 0xb4, 0x8)
pread64(r7, &(0x7f0000000080)=""/239, 0xef, 0x5)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="28e43e0a62b7ea94d251b426158fb2f8c828f9384196db659dc3d0ec985ec5e4d7f8f95989a64b4f931baa3ae977551e982466213e66cf095a001c6302e3dc0a3f4f4b760f54d0e071edf093499a4286fff565a26778781bb16cb1ad6aa012370c3d58b9570ed3f1512620c1c4", 0x6d, 0x17, 0x0, 0x2, r7}])

15:36:03 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2)
r1 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000740)=[{r2}], 0x1, 0x7fffffff)
ppoll(&(0x7f0000000180)=[{r2}, {r0, 0x1000}, {r0, 0x200}, {r1, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:36:03 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r4, 0xa)
fcntl$setownex(r3, 0xf, &(0x7f0000000040))
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x5)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
splice(r6, &(0x7f00000001c0)=0xf83, r7, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

15:36:03 executing program 4:
uname(&(0x7f0000005900)=""/102400)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x358e, &(0x7f00000001c0)={0x0, 0x3124, 0x4, 0x0, 0x2e5})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000000c0)=""/33, 0x42, 0x200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r1, r3, r0, r1, r0, r0, 0xffffffffffffffff], 0x8)
r4 = io_uring_setup(0x3591, &(0x7f0000000000)={0x0, 0x80003124, 0x4, 0x0, 0x248})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8001, @empty, 0x488f}, 0xffffffffffffff7e)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000080)=[r5, r5, r7, r4, r5, r4, r4, 0xffffffffffffffff], 0x8)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={{r7}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

15:36:03 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  219.806542] loop5: detected capacity change from 0 to 264192
[  219.853527] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  219.854888] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  219.855813] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  219.856626] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  219.857582] blk_print_req_error: 28 callbacks suppressed
[  219.857596] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  219.860280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.861134] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.862342] buffer_io_error: 38 callbacks suppressed
[  219.862355] Buffer I/O error on dev sr0, logical block 0, async page read
[  219.880961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.881839] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.883001] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  219.883480] EXT4-fs (loop5): get root inode failed
[  219.884753] Buffer I/O error on dev sr0, logical block 1, async page read
[  219.886861] EXT4-fs (loop5): mount failed
[  219.908668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.909491] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.910672] Buffer I/O error on dev sr0, logical block 2, async page read
[  219.927950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.928803] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.930160] Buffer I/O error on dev sr0, logical block 3, async page read
15:36:03 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)
uname(&(0x7f0000000340)=""/122)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000300))

[  219.954816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.955773] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.956997] Buffer I/O error on dev sr0, logical block 4, async page read
15:36:03 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r4, 0xa)
fcntl$setownex(r3, 0xf, &(0x7f0000000040))
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x5)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
splice(r6, &(0x7f00000001c0)=0xf83, r7, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

[  219.985945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.986791] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.988111] Buffer I/O error on dev sr0, logical block 5, async page read
[  219.995724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  219.997010] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  219.998116] Buffer I/O error on dev sr0, logical block 6, async page read
[  220.018291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  220.019320] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  220.020417] Buffer I/O error on dev sr0, logical block 7, async page read
15:36:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:03 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000100)="c1c4f3ee4696925d15fadf128926527660014ef56412e3eec0097829980c4bfd6e7d96dab9d6381aeacda15cd84885bdaa77abda0f19ddc72a117a8a6193d40978e21a3986767ee9fb5bd3ebac54ef95d29a4cae84b7a0a9b83db5e0a805ba", 0x5f}, {&(0x7f0000000700)="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", 0x5b8}], 0x2, &(0x7f0000001280)}}], 0x1, 0x0)

15:36:03 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:03 executing program 4:
r0 = syz_io_uring_setup(0x530c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r1, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_io_uring_setup(0x5af0, &(0x7f0000000000)={0x0, 0x2f15, 0x1, 0x1, 0x288, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15:36:03 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)
uname(&(0x7f0000000340)=""/122)

15:36:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:03 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r1, &(0x7f0000000900)="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", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
sendfile(r1, r2, 0x0, 0xfdef)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r3, 0x0, 0xfdef)

15:36:03 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r4, 0xa)
fcntl$setownex(r3, 0xf, &(0x7f0000000040))
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x5)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
splice(r6, &(0x7f00000001c0)=0xf83, r7, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

15:36:03 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  220.524656] Bluetooth: hci1: command 0x0406 tx timeout
[  220.525189] Bluetooth: hci6: command 0x0406 tx timeout
[  220.525626] Bluetooth: hci4: command 0x0406 tx timeout
[  220.526788] Bluetooth: hci3: command 0x0406 tx timeout
[  220.527277] Bluetooth: hci0: command 0x0406 tx timeout
[  220.528526] Bluetooth: hci2: command 0x0406 tx timeout
[  220.528663] Bluetooth: hci5: command 0x0406 tx timeout
[  220.529000] Bluetooth: hci7: command 0x0406 tx timeout
15:36:14 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r1, &(0x7f0000000900)="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", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
sendfile(r1, r2, 0x0, 0xfdef)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r3, 0x0, 0xfdef)

15:36:14 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:14 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0xff, 0x0, &(0x7f00000002c0)=[r4, r6, r7, r0, r2, r0]}, 0x6)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000440)={0x7600d380, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x0, 0x0, {r2}}, 0x58)

15:36:14 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
splice(r5, &(0x7f00000001c0)=0xf83, r6, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)

[  230.602082] loop5: detected capacity change from 0 to 8
[  230.618209] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (4 blocks)
15:36:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  230.734980] loop5: detected capacity change from 0 to 264192
15:36:14 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x3bc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x8000, 0x1, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x800009d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  230.748879] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  230.749931] EXT4-fs (loop5): group descriptors corrupted!
15:36:14 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

15:36:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:14 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:14 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  230.899409] loop5: detected capacity change from 0 to 264192
[  230.948172] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  230.949095] EXT4-fs (loop5): group descriptors corrupted!
15:36:14 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:24 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

15:36:24 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:24 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:24 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)

15:36:24 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:24 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:24 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)

[  240.792656] loop5: detected capacity change from 0 to 264192
[  240.805063] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  240.806020] EXT4-fs (loop5): group descriptors corrupted!
15:36:24 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)

15:36:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  240.937587] loop5: detected capacity change from 0 to 264192
15:36:24 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)

[  240.969514] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  240.970314] EXT4-fs (loop5): group descriptors corrupted!
15:36:24 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r3, 0xffffffffffffffff)

15:36:24 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:24 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  241.087918] loop5: detected capacity change from 0 to 264192
[  241.097649] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  241.098349] EXT4-fs (loop5): group descriptors corrupted!
15:36:33 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:33 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r3, 0xffffffffffffffff)

15:36:33 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r3)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  250.158595] loop5: detected capacity change from 0 to 264192
[  250.181013] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  250.182508] EXT4-fs (loop5): group descriptors corrupted!
15:36:33 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:33 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:33 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r3)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:33 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r3, 0xffffffffffffffff)

15:36:33 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  250.394156] loop5: detected capacity change from 0 to 264192
[  250.411509] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  250.412998] EXT4-fs (loop5): group descriptors corrupted!
15:36:34 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r3)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:34 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r3)

[  250.722862] loop5: detected capacity change from 0 to 264192
15:36:34 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  250.822335] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  250.823959] EXT4-fs (loop5): group descriptors corrupted!
15:36:34 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r3)

15:36:34 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:34 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  250.986467] loop5: detected capacity change from 0 to 264192
[  250.994852] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  250.996130] EXT4-fs (loop5): group descriptors corrupted!
15:36:34 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:34 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:45 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:45 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r3)

[  261.570475] loop5: detected capacity change from 0 to 264192
[  261.578606] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (5596!=0)
[  261.579332] EXT4-fs (loop5): group descriptors corrupted!
15:36:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:45 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:45 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)

15:36:45 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  261.729643] loop5: detected capacity change from 0 to 264192
[  261.746135] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (5596!=0)
[  261.747592] EXT4-fs (loop5): group descriptors corrupted!
15:36:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r1, 0xa)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)

15:36:55 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:55 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:55 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  272.259301] loop5: detected capacity change from 0 to 264192
15:36:55 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  272.273068] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (5596!=0)
[  272.273778] EXT4-fs (loop5): group descriptors corrupted!
15:36:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:36:55 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:36:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:36:55 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:55 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

[  272.503069] loop5: detected capacity change from 0 to 264192
[  272.516941] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  272.518421] EXT4-fs (loop5): group descriptors corrupted!
15:36:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:56 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:36:56 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:36:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  272.694015] loop5: detected capacity change from 0 to 264192
[  272.703671] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  272.705170] EXT4-fs (loop5): group descriptors corrupted!
15:37:05 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:05 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:05 executing program 0:
clone3(0x0, 0x0)

15:37:05 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:05 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:37:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:05 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:05 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  282.246088] loop5: detected capacity change from 0 to 264192
[  282.259066] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  282.259753] EXT4-fs (loop5): group descriptors corrupted!
15:37:05 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:16 executing program 0:
clone3(0x0, 0x0)

15:37:16 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:16 executing program 1:
clone3(0x0, 0x0)

15:37:16 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:16 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:37:16 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:16 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  293.213534] loop5: detected capacity change from 0 to 264192
[  293.240255] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  293.241661] EXT4-fs (loop5): group descriptors corrupted!
15:37:16 executing program 0:
clone3(0x0, 0x0)

15:37:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:16 executing program 1:
clone3(0x0, 0x0)

15:37:16 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:16 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

[  293.413169] loop5: detected capacity change from 0 to 264192
[  293.434946] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  293.436280] EXT4-fs (loop5): group descriptors corrupted!
15:37:16 executing program 0:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:17 executing program 1:
clone3(0x0, 0x0)

15:37:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:27 executing program 1:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 0:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:37:27 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  304.089486] loop5: detected capacity change from 0 to 264192
[  304.110192] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (26474!=0)
[  304.111651] EXT4-fs (loop5): group descriptors corrupted!
15:37:27 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)

15:37:27 executing program 1:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:27 executing program 0:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  304.298523] loop5: detected capacity change from 0 to 264192
15:37:27 executing program 6:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

[  304.319932] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35945!=0)
[  304.321249] EXT4-fs (loop5): group descriptors corrupted!
15:37:27 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:27 executing program 1:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:37:27 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:28 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:28 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:38 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
io_setup(0xf7f, &(0x7f00000002c0))
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:38 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:37:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:38 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:38 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:38 executing program 7:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:38 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:38 executing program 4:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  314.551125] loop5: detected capacity change from 0 to 264192
[  314.574779] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35945!=0)
[  314.575579] EXT4-fs (loop5): group descriptors corrupted!
15:37:38 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:38 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:37:47 executing program 3:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:47 executing program 7:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:47 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:47 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:47 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:37:47 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:47 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  323.999900] loop5: detected capacity change from 0 to 264192
15:37:47 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

[  324.039792] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35945!=105)
[  324.041099] EXT4-fs (loop5): group descriptors corrupted!
15:37:47 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:47 executing program 3:
clone3(0x0, 0x0)

15:37:47 executing program 3:
clone3(0x0, 0x0)

15:37:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:47 executing program 3:
clone3(0x0, 0x0)

[  324.242154] loop5: detected capacity change from 0 to 264192
15:37:47 executing program 7:
clone3(0x0, 0x0)

[  324.264179] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35945!=105)
[  324.265360] EXT4-fs (loop5): group descriptors corrupted!
15:37:56 executing program 7:
clone3(0x0, 0x0)

15:37:56 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:37:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:56 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 4:
clone3(0x0, 0x0)

15:37:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 3:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 4:
clone3(0x0, 0x0)

[  332.874541] loop5: detected capacity change from 0 to 264192
[  332.881993] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35945!=105)
[  332.882829] EXT4-fs (loop5): group descriptors corrupted!
15:37:56 executing program 7:
clone3(0x0, 0x0)

15:37:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:56 executing program 4:
clone3(0x0, 0x0)

15:37:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

[  333.001431] loop5: detected capacity change from 0 to 264192
[  333.011171] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  333.011993] EXT4-fs (loop5): group descriptors corrupted!
15:37:56 executing program 2:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:37:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 3:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:37:56 executing program 4:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:37:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

[  333.126091] loop5: detected capacity change from 0 to 264192
[  333.137279] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  333.138029] EXT4-fs (loop5): group descriptors corrupted!
15:38:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:07 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:07 executing program 4:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 3:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:07 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 7:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  343.806598] loop5: detected capacity change from 0 to 264192
[  343.829613] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  343.830936] EXT4-fs (loop5): group descriptors corrupted!
15:38:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:07 executing program 4:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:07 executing program 7:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:07 executing program 3:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  344.029064] loop5: detected capacity change from 0 to 264192
[  344.049016] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  344.059835] EXT4-fs (loop5): get root inode failed
[  344.060964] EXT4-fs (loop5): mount failed
15:38:19 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:19 executing program 3:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:19 executing program 7:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:19 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:19 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:19 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:19 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  356.014083] loop5: detected capacity change from 0 to 264192
[  356.043269] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  356.055522] EXT4-fs (loop5): get root inode failed
[  356.056198] EXT4-fs (loop5): mount failed
15:38:19 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:19 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:19 executing program 7:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  356.229255] loop5: detected capacity change from 0 to 264192
[  356.252298] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  356.255499] EXT4-fs (loop5): get root inode failed
[  356.256193] EXT4-fs (loop5): mount failed
15:38:31 executing program 7:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:31 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:31 executing program 1:
clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  368.088033] loop5: detected capacity change from 0 to 264192
[  368.118451] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:38:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  368.136031] EXT4-fs (loop5): get root inode failed
[  368.136485] EXT4-fs (loop5): mount failed
15:38:31 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:31 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:31 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:43 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:43 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:43 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:43 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:43 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:43 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  379.999620] loop5: detected capacity change from 0 to 264192
[  380.030078] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  380.038103] EXT4-fs (loop5): get root inode failed
[  380.038976] EXT4-fs (loop5): mount failed
15:38:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:43 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  380.178100] loop5: detected capacity change from 0 to 264192
[  380.194864] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  380.202088] EXT4-fs (loop5): get root inode failed
[  380.203016] EXT4-fs (loop5): mount failed
15:38:43 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:43 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

[  380.410838] cgroup: fork rejected by pids controller in /syz0
15:38:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:54 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  390.639430] loop5: detected capacity change from 0 to 264192
[  390.657365] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  390.668168] EXT4-fs (loop5): get root inode failed
15:38:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

[  390.668992] EXT4-fs (loop5): mount failed
15:38:54 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:54 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x462}, 0x7}, 0x20, 0x0, 0x0)

15:38:54 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  390.851502] loop5: detected capacity change from 0 to 264192
[  390.859191] loop3: detected capacity change from 0 to 264192
[  390.877223] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  390.889066] EXT4-fs (loop5): get root inode failed
[  390.890070] EXT4-fs (loop5): mount failed
15:38:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:38:54 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
splice(r5, &(0x7f00000001c0)=0xf83, r6, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)

[  390.929913] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  390.931415] EXT4-fs (loop3): group descriptors corrupted!
15:38:54 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40c4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8281, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, &(0x7f0000000280), 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

15:38:54 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)

15:38:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:38:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  391.116895] loop5: detected capacity change from 0 to 264192
[  391.149988] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  391.164463] EXT4-fs (loop5): get root inode failed
[  391.165073] EXT4-fs (loop5): mount failed
15:39:04 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1)

15:39:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:04 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1)

15:39:04 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:39:04 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
splice(r5, &(0x7f00000001c0)=0xf83, r6, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)

15:39:04 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1)

15:39:04 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)

15:39:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  401.280641] FAULT_INJECTION: forcing a failure.
[  401.280641] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  401.281762] CPU: 1 UID: 0 PID: 5242 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.281778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.281786] Call Trace:
[  401.281790]  <TASK>
[  401.281795]  dump_stack_lvl+0xfa/0x120
[  401.281828]  should_fail_ex+0x4d7/0x5e0
[  401.281844]  _copy_from_user+0x30/0xd0
[  401.281859]  copy_clone_args_from_user+0x152/0x7a0
[  401.281874]  ? find_held_lock+0x2b/0x80
[  401.281888]  ? get_pid_task+0xfd/0x250
[  401.281903]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  401.281915]  ? perf_trace_lock+0xb5/0x5d0
[  401.281935]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.281950]  ? proc_fail_nth_write+0x97/0x220
[  401.281967]  ? find_held_lock+0x2b/0x80
[  401.281979]  ? ksys_write+0x121/0x240
[  401.281994]  ? lock_is_held_type+0x9e/0x120
[  401.282010]  __do_sys_clone3+0xa5/0x280
[  401.282024]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.282040]  ? __mutex_unlock_slowpath+0x157/0x750
[  401.282053]  ? kernel_write+0x583/0x660
[  401.282068]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  401.282083]  ? __fget_files+0x20d/0x3b0
[  401.282101]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.282118]  ? fput+0x6a/0x100
[  401.282135]  ? ksys_write+0x1a3/0x240
[  401.282149]  ? __pfx_ksys_write+0x10/0x10
[  401.282168]  do_syscall_64+0xbf/0x390
[  401.282183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.282195] RIP: 0033:0x7f07b06bcb19
[  401.282204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.282215] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.282227] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  401.282235] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.282242] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  401.282249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.282255] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  401.282272]  </TASK>
[  401.316404] loop3: detected capacity change from 0 to 264192
15:39:04 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2)

[  401.334005] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  401.334710] EXT4-fs (loop3): group descriptors corrupted!
[  401.337304] loop5: detected capacity change from 0 to 264192
[  401.341293] FAULT_INJECTION: forcing a failure.
[  401.341293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.343057] CPU: 0 UID: 0 PID: 5250 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.343088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.343101] Call Trace:
[  401.343109]  <TASK>
[  401.343118]  dump_stack_lvl+0xfa/0x120
[  401.343149]  should_fail_ex+0x4d7/0x5e0
[  401.343179]  _copy_from_user+0x30/0xd0
[  401.343206]  copy_clone_args_from_user+0x152/0x7a0
[  401.343234]  ? find_held_lock+0x2b/0x80
[  401.343259]  ? get_pid_task+0xfd/0x250
[  401.343287]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  401.343309]  ? perf_trace_lock+0xb5/0x5d0
[  401.343344]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.343373]  ? proc_fail_nth_write+0x97/0x220
[  401.343402]  ? find_held_lock+0x2b/0x80
[  401.343424]  ? ksys_write+0x121/0x240
[  401.343451]  ? lock_is_held_type+0x9e/0x120
[  401.343479]  __do_sys_clone3+0xa5/0x280
[  401.343505]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.343542]  ? __mutex_unlock_slowpath+0x157/0x750
[  401.343576]  ? kernel_write+0x583/0x660
[  401.343621]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  401.343653]  ? __fget_files+0x20d/0x3b0
[  401.343685]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.343715]  ? fput+0x6a/0x100
[  401.343754]  ? ksys_write+0x1a3/0x240
[  401.343779]  ? __pfx_ksys_write+0x10/0x10
[  401.343815]  do_syscall_64+0xbf/0x390
[  401.343843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.343865] RIP: 0033:0x7f76c876ab19
[  401.343882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.343902] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.343923] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  401.343938] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.343951] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  401.343964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.343977] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  401.344008]  </TASK>
[  401.351304] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  401.373550] FAULT_INJECTION: forcing a failure.
[  401.373550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.373792] FAULT_INJECTION: forcing a failure.
[  401.373792] name failslab, interval 1, probability 0, space 0, times 1
[  401.374507] CPU: 1 UID: 0 PID: 5253 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.374524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.374531] Call Trace:
[  401.374535]  <TASK>
[  401.374540]  dump_stack_lvl+0xfa/0x120
[  401.374558]  should_fail_ex+0x4d7/0x5e0
[  401.374574]  _copy_from_user+0x30/0xd0
[  401.374588]  copy_clone_args_from_user+0x152/0x7a0
[  401.374603]  ? find_held_lock+0x2b/0x80
[  401.374616]  ? get_pid_task+0xfd/0x250
[  401.374631]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  401.374643]  ? perf_trace_lock+0xb5/0x5d0
[  401.374664]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.374679]  ? proc_fail_nth_write+0x97/0x220
[  401.374696]  ? find_held_lock+0x2b/0x80
[  401.374708]  ? ksys_write+0x121/0x240
[  401.374728]  ? lock_is_held_type+0x9e/0x120
[  401.374744]  __do_sys_clone3+0xa5/0x280
[  401.374758]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.374775]  ? __mutex_unlock_slowpath+0x157/0x750
[  401.374788]  ? kernel_write+0x583/0x660
[  401.374803]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  401.374818]  ? __fget_files+0x20d/0x3b0
[  401.374836]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.374852]  ? fput+0x6a/0x100
[  401.374869]  ? ksys_write+0x1a3/0x240
[  401.374883]  ? __pfx_ksys_write+0x10/0x10
[  401.374902]  do_syscall_64+0xbf/0x390
[  401.374917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.374929] RIP: 0033:0x7f2c107a1b19
[  401.374938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.374949] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.374960] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  401.374968] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.374975] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  401.374982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.374989] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  401.375006]  </TASK>
[  401.400071] cgroup: fork rejected by pids controller in 
[  401.401104] CPU: 0 UID: 0 PID: 5255 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.401150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.401169] Call Trace:
[  401.401176]  <TASK>
[  401.401187]  dump_stack_lvl+0xfa/0x120
[  401.401217]  should_fail_ex+0x4d7/0x5e0
[  401.401250]  should_failslab+0xc2/0x120
[  401.401283]  kmem_cache_alloc_node_noprof+0x87/0x6b0
[  401.401324]  ? find_held_lock+0x2b/0x80
[  401.401350]  ? copy_process+0x3da/0x7410
[  401.401384]  ? copy_process+0x459/0x7410
[  401.401423]  ? copy_process+0x459/0x7410
[  401.401454]  copy_process+0x459/0x7410
[  401.401486]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.401539]  ? lock_acquire+0x15e/0x2f0
[  401.401590]  ? __might_fault+0xe0/0x190
[  401.401632]  ? __pfx_copy_process+0x10/0x10
[  401.401663]  ? __might_fault+0xe0/0x190
[  401.401692]  ? _copy_from_user+0x5b/0xd0
[  401.401729]  kernel_clone+0xea/0x7f0
[  401.401754]  ? get_pid_task+0xfd/0x250
[  401.401780]  ? __pfx_kernel_clone+0x10/0x10
[  401.401803]  ? perf_trace_lock+0xb5/0x5d0
[  401.401841]  ? find_held_lock+0x2b/0x80
[  401.401863]  ? ksys_write+0x121/0x240
[  401.401889]  ? lock_is_held_type+0x9e/0x120
[  401.401915]  __do_sys_clone3+0x1f5/0x280
[  401.401941]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.401987]  ? __fget_files+0x20d/0x3b0
[  401.402018]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.402047]  ? fput+0x6a/0x100
[  401.402078]  ? ksys_write+0x1a3/0x240
[  401.402103]  ? __pfx_ksys_write+0x10/0x10
[  401.402139]  do_syscall_64+0xbf/0x390
[  401.402165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.402187] RIP: 0033:0x7f07b06bcb19
[  401.402203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.402224] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.402244] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  401.402259] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.402272] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  401.402286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.402298] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  401.402330]  </TASK>
[  401.421869] /syz7
15:39:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  401.450406] EXT4-fs (loop5): get root inode failed
[  401.450862] EXT4-fs (loop5): mount failed
15:39:04 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2)

15:39:04 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2)

[  401.492169] loop3: detected capacity change from 0 to 264192
15:39:05 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3)

[  401.544834] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  401.546304] EXT4-fs (loop3): group descriptors corrupted!
15:39:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)

15:39:05 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212) (fail_nth: 1)
rseq(0x0, 0x0, 0x0, 0x0)

[  401.589146] loop5: detected capacity change from 0 to 264192
[  401.590484] FAULT_INJECTION: forcing a failure.
[  401.590484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.591556] CPU: 1 UID: 0 PID: 5341 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.591573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.591581] Call Trace:
[  401.591585]  <TASK>
[  401.591590]  dump_stack_lvl+0xfa/0x120
[  401.591608]  should_fail_ex+0x4d7/0x5e0
[  401.591626]  _copy_to_user+0x32/0xd0
[  401.591641]  __do_sys_newuname+0x103/0x2b0
[  401.591661]  ? __pfx___do_sys_newuname+0x10/0x10
[  401.591679]  ? find_held_lock+0x2b/0x80
[  401.591723]  ? __pfx_ksys_write+0x10/0x10
[  401.591743]  ? do_syscall_64+0x85/0x390
[  401.591760]  do_syscall_64+0xbf/0x390
[  401.591775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.591787] RIP: 0033:0x7fb49b354b19
[  401.591796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.591808] RSP: 002b:00007fb4988ca188 EFLAGS: 00000246 ORIG_RAX: 000000000000003f
[  401.591819] RAX: ffffffffffffffda RBX: 00007fb49b467f60 RCX: 00007fb49b354b19
[  401.591827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
[  401.591834] RBP: 00007fb4988ca1d0 R08: 0000000000000000 R09: 0000000000000000
[  401.591842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.591849] R13: 00007ffd480e523f R14: 00007fb4988ca300 R15: 0000000000022000
[  401.591867]  </TASK>
[  401.603534] FAULT_INJECTION: forcing a failure.
[  401.603534] name failslab, interval 1, probability 0, space 0, times 0
[  401.605465] CPU: 0 UID: 0 PID: 5352 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.605495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.605507] Call Trace:
[  401.605515]  <TASK>
[  401.605523]  dump_stack_lvl+0xfa/0x120
[  401.605554]  should_fail_ex+0x4d7/0x5e0
[  401.605585]  should_failslab+0xc2/0x120
[  401.605616]  kmem_cache_alloc_node_noprof+0x87/0x6b0
[  401.605651]  ? find_held_lock+0x2b/0x80
[  401.605676]  ? copy_process+0x3da/0x7410
[  401.605701]  ? copy_process+0x459/0x7410
[  401.605742]  ? copy_process+0x459/0x7410
[  401.605766]  copy_process+0x459/0x7410
[  401.605792]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.605830]  ? lock_acquire+0x15e/0x2f0
[  401.605858]  ? __might_fault+0xe0/0x190
[  401.605889]  ? __pfx_copy_process+0x10/0x10
[  401.605916]  ? __might_fault+0xe0/0x190
[  401.605945]  ? _copy_from_user+0x5b/0xd0
[  401.605977]  kernel_clone+0xea/0x7f0
[  401.606001]  ? get_pid_task+0xfd/0x250
[  401.606029]  ? __pfx_kernel_clone+0x10/0x10
[  401.606053]  ? perf_trace_lock+0xb5/0x5d0
[  401.606092]  ? find_held_lock+0x2b/0x80
[  401.606114]  ? ksys_write+0x121/0x240
[  401.606142]  ? lock_is_held_type+0x9e/0x120
[  401.606171]  __do_sys_clone3+0x1f5/0x280
[  401.606197]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.606245]  ? __fget_files+0x20d/0x3b0
[  401.606279]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.606309]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.606339]  ? ksys_write+0x1a3/0x240
[  401.606364]  ? __pfx_ksys_write+0x10/0x10
[  401.606403]  do_syscall_64+0xbf/0x390
[  401.606431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.606453] RIP: 0033:0x7f2c107a1b19
[  401.606470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.606491] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.606515] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  401.606541] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.606562] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  401.606581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.606596] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  401.606632]  </TASK>
[  401.642096] FAULT_INJECTION: forcing a failure.
[  401.642096] name failslab, interval 1, probability 0, space 0, times 0
[  401.643041] CPU: 1 UID: 0 PID: 5372 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  401.643057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  401.643063] Call Trace:
[  401.643067]  <TASK>
[  401.643072]  dump_stack_lvl+0xfa/0x120
[  401.643089]  should_fail_ex+0x4d7/0x5e0
[  401.643104]  should_failslab+0xc2/0x120
[  401.643122]  kmem_cache_alloc_node_noprof+0x87/0x6b0
[  401.643142]  ? find_held_lock+0x2b/0x80
[  401.643155]  ? copy_process+0x3da/0x7410
[  401.643169]  ? copy_process+0x459/0x7410
[  401.643187]  ? copy_process+0x459/0x7410
[  401.643201]  copy_process+0x459/0x7410
[  401.643215]  ? __pfx_perf_trace_lock+0x10/0x10
[  401.643236]  ? lock_acquire+0x15e/0x2f0
[  401.643251]  ? __might_fault+0xe0/0x190
[  401.643269]  ? __pfx_copy_process+0x10/0x10
[  401.643284]  ? __might_fault+0xe0/0x190
[  401.643300]  ? _copy_from_user+0x5b/0xd0
[  401.643317]  kernel_clone+0xea/0x7f0
[  401.643330]  ? get_pid_task+0xfd/0x250
[  401.643345]  ? __pfx_kernel_clone+0x10/0x10
[  401.643358]  ? perf_trace_lock+0xb5/0x5d0
[  401.643380]  ? find_held_lock+0x2b/0x80
[  401.643392]  ? ksys_write+0x121/0x240
[  401.643407]  ? lock_is_held_type+0x9e/0x120
[  401.643422]  __do_sys_clone3+0x1f5/0x280
[  401.643437]  ? __pfx___do_sys_clone3+0x10/0x10
[  401.643462]  ? __fget_files+0x20d/0x3b0
[  401.643482]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  401.643499]  ? fput+0x6a/0x100
[  401.643516]  ? ksys_write+0x1a3/0x240
[  401.643529]  ? __pfx_ksys_write+0x10/0x10
[  401.643550]  do_syscall_64+0xbf/0x390
[  401.643565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.643577] RIP: 0033:0x7f76c876ab19
[  401.643585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  401.643596] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  401.643608] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  401.643616] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  401.643623] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  401.643629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.643636] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  401.643655]  </TASK>
[  401.670165] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  401.685946] EXT4-fs (loop5): get root inode failed
[  401.686919] EXT4-fs (loop5): mount failed
[  401.773712] cgroup: fork rejected by pids controller in /syz1
15:39:17 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4)

15:39:17 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:17 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3)

15:39:17 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3)

15:39:17 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212) (fail_nth: 2)
rseq(0x0, 0x0, 0x0, 0x0)

15:39:17 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:17 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
splice(r5, &(0x7f00000001c0)=0xf83, r6, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)

15:39:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)

[  414.419670] loop5: detected capacity change from 0 to 264192
[  414.427411] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  414.429787] EXT4-fs (loop5): get root inode failed
[  414.430216] EXT4-fs (loop5): mount failed
[  414.479080] loop3: detected capacity change from 0 to 264192
15:39:18 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:18 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4)

[  414.520344] FAULT_INJECTION: forcing a failure.
[  414.520344] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  414.522509] CPU: 0 UID: 0 PID: 5401 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  414.522538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  414.522551] Call Trace:
[  414.522558]  <TASK>
[  414.522566]  dump_stack_lvl+0xfa/0x120
[  414.522596]  should_fail_ex+0x4d7/0x5e0
[  414.522625]  should_fail_alloc_page+0xe0/0x110
[  414.522657]  prepare_alloc_pages+0x1eb/0x550
[  414.522692]  __alloc_frozen_pages_noprof+0x17f/0x1f20
[  414.522733]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.522771]  ? lock_acquire+0x15e/0x2f0
[  414.522799]  ? __memcg_slab_post_alloc_hook+0x443/0x9e0
[  414.522824]  ? find_held_lock+0x2b/0x80
[  414.522846]  ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0
[  414.522871]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  414.522918]  ? __create_object+0x59/0x80
[  414.522953]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  414.522978]  ? kmem_cache_alloc_node_noprof+0x283/0x6b0
[  414.523011]  ? find_held_lock+0x2b/0x80
[  414.523034]  ? __asan_memset+0x24/0x50
[  414.523067]  __alloc_pages_noprof+0xb/0x30
[  414.523098]  copy_process+0x4e9/0x7410
[  414.523125]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.523161]  ? lock_acquire+0x15e/0x2f0
[  414.523189]  ? __might_fault+0xe0/0x190
[  414.523218]  ? __pfx_copy_process+0x10/0x10
[  414.523245]  ? __might_fault+0xe0/0x190
[  414.523274]  ? _copy_from_user+0x5b/0xd0
[  414.523305]  kernel_clone+0xea/0x7f0
[  414.523329]  ? get_pid_task+0xfd/0x250
[  414.523356]  ? __pfx_kernel_clone+0x10/0x10
[  414.523380]  ? perf_trace_lock+0xb5/0x5d0
[  414.523419]  ? find_held_lock+0x2b/0x80
[  414.523441]  ? ksys_write+0x121/0x240
[  414.523467]  ? lock_is_held_type+0x9e/0x120
[  414.523495]  __do_sys_clone3+0x1f5/0x280
[  414.523521]  ? __pfx___do_sys_clone3+0x10/0x10
[  414.523569]  ? __fget_files+0x20d/0x3b0
[  414.523602]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.523631]  ? fput+0x6a/0x100
[  414.523661]  ? ksys_write+0x1a3/0x240
[  414.523686]  ? __pfx_ksys_write+0x10/0x10
[  414.523725]  do_syscall_64+0xbf/0x390
[  414.523752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.523774] RIP: 0033:0x7f07b06bcb19
[  414.523791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  414.523811] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  414.523831] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  414.523846] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  414.523858] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  414.523871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.523883] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  414.523918]  </TASK>
[  414.532604] loop5: detected capacity change from 0 to 264192
[  414.552302] FAULT_INJECTION: forcing a failure.
[  414.552302] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  414.553279] CPU: 1 UID: 0 PID: 5407 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  414.553296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  414.553304] Call Trace:
[  414.553310]  <TASK>
[  414.553315]  dump_stack_lvl+0xfa/0x120
[  414.553335]  should_fail_ex+0x4d7/0x5e0
[  414.553352]  should_fail_alloc_page+0xe0/0x110
[  414.553372]  prepare_alloc_pages+0x1eb/0x550
[  414.553392]  __alloc_frozen_pages_noprof+0x17f/0x1f20
[  414.553411]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.553433]  ? lock_acquire+0x15e/0x2f0
[  414.553449]  ? __memcg_slab_post_alloc_hook+0x443/0x9e0
[  414.553463]  ? find_held_lock+0x2b/0x80
[  414.553476]  ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0
[  414.553489]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  414.553515]  ? __create_object+0x59/0x80
[  414.553535]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  414.553550]  ? kmem_cache_alloc_node_noprof+0x283/0x6b0
[  414.553568]  ? find_held_lock+0x2b/0x80
[  414.553581]  ? __asan_memset+0x24/0x50
[  414.553599]  __alloc_pages_noprof+0xb/0x30
[  414.553616]  copy_process+0x4e9/0x7410
[  414.553632]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.553652]  ? lock_acquire+0x15e/0x2f0
[  414.553667]  ? __might_fault+0xe0/0x190
[  414.553684]  ? __pfx_copy_process+0x10/0x10
[  414.553698]  ? __might_fault+0xe0/0x190
[  414.553714]  ? _copy_from_user+0x5b/0xd0
[  414.553736]  kernel_clone+0xea/0x7f0
[  414.553750]  ? get_pid_task+0xfd/0x250
[  414.553765]  ? __pfx_kernel_clone+0x10/0x10
[  414.553778]  ? perf_trace_lock+0xb5/0x5d0
[  414.553800]  ? find_held_lock+0x2b/0x80
[  414.553812]  ? ksys_write+0x121/0x240
[  414.553827]  ? lock_is_held_type+0x9e/0x120
[  414.553844]  __do_sys_clone3+0x1f5/0x280
[  414.553858]  ? __pfx___do_sys_clone3+0x10/0x10
[  414.553884]  ? __fget_files+0x20d/0x3b0
[  414.553903]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.553920]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.553936]  ? ksys_write+0x1a3/0x240
[  414.553950]  ? __pfx_ksys_write+0x10/0x10
[  414.553971]  do_syscall_64+0xbf/0x390
[  414.553986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.553999] RIP: 0033:0x7f76c876ab19
[  414.554008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  414.554020] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  414.554031] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  414.554039] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  414.554046] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  414.554053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.554060] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  414.554078]  </TASK>
[  414.587119] FAULT_INJECTION: forcing a failure.
[  414.587119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.588409] CPU: 1 UID: 0 PID: 5406 Comm: syz-executor.2 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  414.588425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  414.588431] Call Trace:
[  414.588435]  <TASK>
[  414.588439]  dump_stack_lvl+0xfa/0x120
[  414.588453]  should_fail_ex+0x4d7/0x5e0
[  414.588468]  _copy_to_user+0x32/0xd0
[  414.588482]  simple_read_from_buffer+0xe0/0x180
[  414.588498]  proc_fail_nth_read+0x18a/0x240
[  414.588515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.588532]  ? security_file_permission+0x22/0x90
[  414.588550]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.588566]  vfs_read+0x1eb/0xc70
[  414.588584]  ? __pfx_vfs_read+0x10/0x10
[  414.588599]  ? lock_release+0xc8/0x290
[  414.588618]  ? __fget_files+0x20d/0x3b0
[  414.588639]  ksys_read+0x121/0x240
[  414.588653]  ? __pfx_ksys_read+0x10/0x10
[  414.588674]  do_syscall_64+0xbf/0x390
[  414.588689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.588701] RIP: 0033:0x7fb49b30769c
[  414.588709] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  414.588724] RSP: 002b:00007fb4988ca170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  414.588735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb49b30769c
[  414.588743] RDX: 000000000000000f RSI: 00007fb4988ca1e0 RDI: 0000000000000004
15:39:18 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  414.588749] RBP: 00007fb4988ca1d0 R08: 0000000000000000 R09: 0000000000000000
[  414.588756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.588763] R13: 00007ffd480e523f R14: 00007fb4988ca300 R15: 0000000000022000
[  414.588782]  </TASK>
15:39:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)

[  414.638683] loop3: detected capacity change from 0 to 264192
[  414.681198] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  414.702130] EXT4-fs (loop5): get root inode failed
15:39:18 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5)

15:39:18 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:39:18 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  414.703204] EXT4-fs (loop5): mount failed
[  414.746161] loop3: detected capacity change from 0 to 264192
15:39:18 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4)

[  414.802228] FAULT_INJECTION: forcing a failure.
[  414.802228] name failslab, interval 1, probability 0, space 0, times 0
[  414.804260] CPU: 0 UID: 0 PID: 5419 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  414.804290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  414.804303] Call Trace:
[  414.804310]  <TASK>
[  414.804318]  dump_stack_lvl+0xfa/0x120
[  414.804348]  should_fail_ex+0x4d7/0x5e0
[  414.804377]  ? prepare_creds+0x2c/0x7e0
[  414.804406]  should_failslab+0xc2/0x120
[  414.804436]  kmem_cache_alloc_noprof+0x80/0x690
[  414.804482]  ? prepare_creds+0x2c/0x7e0
[  414.804508]  prepare_creds+0x2c/0x7e0
[  414.804541]  copy_creds+0x7a/0xa20
[  414.804578]  copy_process+0xf59/0x7410
[  414.804605]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.804654]  ? __pfx_copy_process+0x10/0x10
[  414.804681]  ? __might_fault+0xe0/0x190
[  414.804712]  ? _copy_from_user+0x5b/0xd0
[  414.804750]  kernel_clone+0xea/0x7f0
[  414.804775]  ? get_pid_task+0xfd/0x250
[  414.804802]  ? __pfx_kernel_clone+0x10/0x10
[  414.804826]  ? perf_trace_lock+0xb5/0x5d0
[  414.804865]  ? find_held_lock+0x2b/0x80
[  414.804898]  ? ksys_write+0x121/0x240
[  414.804924]  ? lock_is_held_type+0x9e/0x120
[  414.804953]  __do_sys_clone3+0x1f5/0x280
[  414.804979]  ? __pfx___do_sys_clone3+0x10/0x10
[  414.805026]  ? __fget_files+0x20d/0x3b0
[  414.805060]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.805089]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.805119]  ? ksys_write+0x1a3/0x240
[  414.805144]  ? __pfx_ksys_write+0x10/0x10
[  414.805182]  do_syscall_64+0xbf/0x390
[  414.805209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.805231] RIP: 0033:0x7f07b06bcb19
[  414.805248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  414.805268] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  414.805289] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  414.805303] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  414.805316] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  414.805329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.805341] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  414.805376]  </TASK>
[  414.813345] FAULT_INJECTION: forcing a failure.
[  414.813345] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  414.826882] CPU: 1 UID: 0 PID: 5422 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  414.826899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  414.826907] Call Trace:
[  414.826912]  <TASK>
[  414.826917]  dump_stack_lvl+0xfa/0x120
[  414.826937]  should_fail_ex+0x4d7/0x5e0
[  414.826955]  should_fail_alloc_page+0xe0/0x110
[  414.826974]  prepare_alloc_pages+0x1eb/0x550
[  414.826992]  __alloc_frozen_pages_noprof+0x17f/0x1f20
[  414.827011]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.827033]  ? lock_acquire+0x15e/0x2f0
[  414.827049]  ? __memcg_slab_post_alloc_hook+0x443/0x9e0
[  414.827063]  ? find_held_lock+0x2b/0x80
[  414.827075]  ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0
[  414.827089]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  414.827113]  ? __create_object+0x59/0x80
[  414.827132]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  414.827146]  ? kmem_cache_alloc_node_noprof+0x283/0x6b0
[  414.827165]  ? find_held_lock+0x2b/0x80
[  414.827177]  ? __asan_memset+0x24/0x50
[  414.827195]  __alloc_pages_noprof+0xb/0x30
[  414.827211]  copy_process+0x4e9/0x7410
[  414.827227]  ? __pfx_perf_trace_lock+0x10/0x10
[  414.827250]  ? lock_acquire+0x15e/0x2f0
[  414.827268]  ? __might_fault+0xe0/0x190
[  414.827288]  ? __pfx_copy_process+0x10/0x10
[  414.827305]  ? __might_fault+0xe0/0x190
[  414.827324]  ? _copy_from_user+0x5b/0xd0
[  414.827345]  kernel_clone+0xea/0x7f0
[  414.827358]  ? get_pid_task+0xfd/0x250
[  414.827378]  ? __pfx_kernel_clone+0x10/0x10
[  414.827394]  ? perf_trace_lock+0xb5/0x5d0
[  414.827414]  ? find_held_lock+0x2b/0x80
[  414.827426]  ? ksys_write+0x121/0x240
[  414.827442]  ? lock_is_held_type+0x9e/0x120
[  414.827458]  __do_sys_clone3+0x1f5/0x280
[  414.827472]  ? __pfx___do_sys_clone3+0x10/0x10
[  414.827495]  ? __fget_files+0x20d/0x3b0
[  414.827514]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.827531]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  414.827547]  ? ksys_write+0x1a3/0x240
[  414.827561]  ? __pfx_ksys_write+0x10/0x10
[  414.827580]  do_syscall_64+0xbf/0x390
[  414.827595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.827608] RIP: 0033:0x7f2c107a1b19
[  414.827617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  414.827629] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  414.827640] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  414.827648] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  414.827656] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  414.827663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.827670] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  414.827688]  </TASK>
15:39:29 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5)

15:39:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)

15:39:29 executing program 2:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x9, 0x7d8}, 0x5}, 0x20, 0x1, 0x0)

15:39:29 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6)

15:39:29 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
splice(r5, &(0x7f00000001c0)=0xf83, r6, &(0x7f0000000240)=0xffffffff00000001, 0x100000000, 0xc)

15:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5)

15:39:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  425.537053] FAULT_INJECTION: forcing a failure.
[  425.537053] name failslab, interval 1, probability 0, space 0, times 0
[  425.538410] CPU: 1 UID: 0 PID: 5438 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  425.538432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  425.538442] Call Trace:
[  425.538448]  <TASK>
[  425.538454]  dump_stack_lvl+0xfa/0x120
[  425.538479]  should_fail_ex+0x4d7/0x5e0
[  425.538500]  ? prepare_creds+0x2c/0x7e0
[  425.538523]  should_failslab+0xc2/0x120
[  425.538546]  kmem_cache_alloc_noprof+0x80/0x690
[  425.538581]  ? prepare_creds+0x2c/0x7e0
[  425.538601]  prepare_creds+0x2c/0x7e0
[  425.538626]  copy_creds+0x7a/0xa20
[  425.538653]  copy_process+0xf59/0x7410
[  425.538674]  ? __pfx_perf_trace_lock+0x10/0x10
[  425.538709]  ? __pfx_copy_process+0x10/0x10
[  425.538735]  ? __might_fault+0xe0/0x190
[  425.538758]  ? _copy_from_user+0x5b/0xd0
[  425.538780]  kernel_clone+0xea/0x7f0
[  425.538799]  ? get_pid_task+0xfd/0x250
[  425.538819]  ? __pfx_kernel_clone+0x10/0x10
[  425.538838]  ? perf_trace_lock+0xb5/0x5d0
[  425.538867]  ? find_held_lock+0x2b/0x80
[  425.538884]  ? ksys_write+0x121/0x240
[  425.538904]  ? lock_is_held_type+0x9e/0x120
[  425.538926]  __do_sys_clone3+0x1f5/0x280
[  425.538946]  ? __pfx___do_sys_clone3+0x10/0x10
[  425.538979]  ? __fget_files+0x20d/0x3b0
[  425.539004]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  425.539027]  ? fput+0x6a/0x100
[  425.539050]  ? ksys_write+0x1a3/0x240
[  425.539069]  ? __pfx_ksys_write+0x10/0x10
[  425.539097]  do_syscall_64+0xbf/0x390
[  425.539118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.539135] RIP: 0033:0x7f76c876ab19
[  425.539147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  425.539163] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  425.539179] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  425.539190] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  425.539200] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  425.539210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.539219] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  425.539243]  </TASK>
[  425.563957] loop3: detected capacity change from 0 to 264192
[  425.571197] FAULT_INJECTION: forcing a failure.
[  425.571197] name failslab, interval 1, probability 0, space 0, times 0
[  425.572454] CPU: 1 UID: 0 PID: 5444 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  425.572475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  425.572483] Call Trace:
[  425.572488]  <TASK>
[  425.572495]  dump_stack_lvl+0xfa/0x120
[  425.572513]  should_fail_ex+0x4d7/0x5e0
[  425.572531]  ? prepare_creds+0x2c/0x7e0
[  425.572551]  should_failslab+0xc2/0x120
[  425.572572]  kmem_cache_alloc_noprof+0x80/0x690
[  425.572605]  ? prepare_creds+0x2c/0x7e0
[  425.572626]  prepare_creds+0x2c/0x7e0
[  425.572650]  copy_creds+0x7a/0xa20
[  425.572676]  copy_process+0xf59/0x7410
[  425.572695]  ? __pfx_perf_trace_lock+0x10/0x10
[  425.572733]  ? __pfx_copy_process+0x10/0x10
[  425.572753]  ? __might_fault+0xe0/0x190
[  425.572774]  ? _copy_from_user+0x5b/0xd0
[  425.572796]  kernel_clone+0xea/0x7f0
[  425.572814]  ? get_pid_task+0xfd/0x250
[  425.572833]  ? __pfx_kernel_clone+0x10/0x10
[  425.572851]  ? perf_trace_lock+0xb5/0x5d0
[  425.572879]  ? find_held_lock+0x2b/0x80
[  425.572896]  ? ksys_write+0x121/0x240
[  425.572915]  ? lock_is_held_type+0x9e/0x120
[  425.572933]  __do_sys_clone3+0x1f5/0x280
[  425.572953]  ? __pfx___do_sys_clone3+0x10/0x10
[  425.572986]  ? __fget_files+0x20d/0x3b0
[  425.573019]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  425.573040]  ? fput+0x6a/0x100
[  425.573063]  ? ksys_write+0x1a3/0x240
[  425.573081]  ? __pfx_ksys_write+0x10/0x10
[  425.573109]  do_syscall_64+0xbf/0x390
[  425.573128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.573144] RIP: 0033:0x7f2c107a1b19
[  425.573156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  425.573171] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  425.573186] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  425.573196] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  425.573206] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  425.573215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.573224] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  425.573248]  </TASK>
[  425.585390] loop5: detected capacity change from 0 to 264192
15:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6)

[  425.685280] loop3: detected capacity change from 0 to 264192
15:39:29 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6)

[  425.697100] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  425.705614] EXT4-fs (loop5): get root inode failed
[  425.706657] EXT4-fs (loop5): mount failed
15:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffdf, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = fork()
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f0000000100), 0x1400000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x521000, 0x0)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x20, 0x12, 0x81, 0x6, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x50003, 0x8, 0x23120d83, 0x4, 0xf4, 0x1f, 0x3ff, 0x0, 0x0, 0x0, 0xf3}, r0, 0x9, r1, 0xa)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r2, r3)
r4 = fork()
r5 = syz_open_dev$vcsu(&(0x7f0000000940), 0x6, 0x60200)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x1, 0x9, 0x6, 0x0, 0x7, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x5d, 0x401}, 0x10, 0xbd1c, 0x8001, 0x6, 0x2cf8f6e7, 0xa8, 0x5, 0x0, 0x9, 0x0, 0xe000000000}, r4, 0x5, r5, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x6, 0xb2, 0x7, 0x0, 0x8, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x8, 0x2, 0x1, 0x8, 0xfc05, 0x8c, 0x3f, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r2, 0xb)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  425.798958] loop3: detected capacity change from 0 to 264192
15:39:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)

15:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r3, 0xa)
fcntl$setownex(r2, 0xf, &(0x7f0000000040))
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r4, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

15:39:29 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7)

[  425.943393] loop5: detected capacity change from 0 to 264192
[  425.954206] No source specified
15:39:29 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7)

[  425.966729] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  425.970579] EXT4-fs (loop5): get root inode failed
[  425.971144] EXT4-fs (loop5): mount failed
15:39:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

[  425.983002] cgroup: fork rejected by pids controller in /syz4
[  425.997523] FAULT_INJECTION: forcing a failure.
[  425.997523] name failslab, interval 1, probability 0, space 0, times 0
[  425.998673] CPU: 1 UID: 0 PID: 5483 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  425.998691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  425.998700] Call Trace:
[  425.998704]  <TASK>
[  425.998709]  dump_stack_lvl+0xfa/0x120
[  425.998733]  should_fail_ex+0x4d7/0x5e0
[  425.998754]  should_failslab+0xc2/0x120
[  425.998772]  __kmalloc_noprof+0xcd/0x680
[  425.998793]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  425.998809]  ? security_prepare_creds+0x101/0x160
[  425.998832]  security_prepare_creds+0x101/0x160
[  425.998852]  prepare_creds+0x579/0x7e0
[  425.998873]  copy_creds+0x7a/0xa20
[  425.998893]  copy_process+0xf59/0x7410
[  425.998910]  ? __pfx_perf_trace_lock+0x10/0x10
[  425.998937]  ? __pfx_copy_process+0x10/0x10
[  425.998952]  ? __might_fault+0xe0/0x190
[  425.998970]  ? _copy_from_user+0x5b/0xd0
[  425.998987]  kernel_clone+0xea/0x7f0
[  425.999002]  ? get_pid_task+0xfd/0x250
[  425.999018]  ? __pfx_kernel_clone+0x10/0x10
[  425.999032]  ? perf_trace_lock+0xb5/0x5d0
[  425.999054]  ? find_held_lock+0x2b/0x80
[  425.999068]  ? ksys_write+0x121/0x240
[  425.999084]  ? lock_is_held_type+0x9e/0x120
[  425.999101]  __do_sys_clone3+0x1f5/0x280
[  425.999117]  ? __pfx___do_sys_clone3+0x10/0x10
[  425.999142]  ? __fget_files+0x20d/0x3b0
[  425.999161]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  425.999180]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  425.999197]  ? ksys_write+0x1a3/0x240
[  425.999212]  ? __pfx_ksys_write+0x10/0x10
[  425.999233]  do_syscall_64+0xbf/0x390
[  425.999249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.999263] RIP: 0033:0x7f07b06bcb19
[  425.999273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  425.999285] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  425.999298] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  425.999307] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  425.999314] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  425.999322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.999330] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  425.999348]  </TASK>
15:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

15:39:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  426.044678] FAULT_INJECTION: forcing a failure.
[  426.044678] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  426.045787] CPU: 0 UID: 0 PID: 5488 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  426.045804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  426.045811] Call Trace:
[  426.045816]  <TASK>
[  426.045820]  dump_stack_lvl+0xfa/0x120
[  426.045839]  should_fail_ex+0x4d7/0x5e0
[  426.045856]  should_fail_alloc_page+0xe0/0x110
[  426.045875]  prepare_alloc_pages+0x1eb/0x550
[  426.045893]  __alloc_frozen_pages_noprof+0x17f/0x1f20
[  426.045912]  ? __pfx_perf_trace_lock+0x10/0x10
[  426.045933]  ? lock_acquire+0x15e/0x2f0
[  426.045949]  ? __memcg_slab_post_alloc_hook+0x443/0x9e0
[  426.045963]  ? find_held_lock+0x2b/0x80
[  426.045976]  ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0
[  426.045989]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  426.046013]  ? __create_object+0x59/0x80
[  426.046033]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  426.046047]  ? kmem_cache_alloc_node_noprof+0x283/0x6b0
[  426.046066]  ? find_held_lock+0x2b/0x80
[  426.046078]  ? __asan_memset+0x24/0x50
[  426.046096]  __alloc_pages_noprof+0xb/0x30
[  426.046113]  copy_process+0x4e9/0x7410
[  426.046129]  ? __pfx_perf_trace_lock+0x10/0x10
[  426.046148]  ? lock_acquire+0x15e/0x2f0
[  426.046164]  ? __might_fault+0xe0/0x190
[  426.046180]  ? __pfx_copy_process+0x10/0x10
[  426.046194]  ? __might_fault+0xe0/0x190
[  426.046209]  ? _copy_from_user+0x5b/0xd0
[  426.046226]  kernel_clone+0xea/0x7f0
[  426.046239]  ? get_pid_task+0xfd/0x250
[  426.046255]  ? __pfx_kernel_clone+0x10/0x10
[  426.046267]  ? perf_trace_lock+0xb5/0x5d0
[  426.046288]  ? find_held_lock+0x2b/0x80
[  426.046300]  ? ksys_write+0x121/0x240
[  426.046315]  ? lock_is_held_type+0x9e/0x120
[  426.046331]  __do_sys_clone3+0x1f5/0x280
[  426.046345]  ? __pfx___do_sys_clone3+0x10/0x10
[  426.046369]  ? __fget_files+0x20d/0x3b0
[  426.046387]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  426.046404]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  426.046420]  ? ksys_write+0x1a3/0x240
[  426.046434]  ? __pfx_ksys_write+0x10/0x10
[  426.046454]  do_syscall_64+0xbf/0x390
[  426.046468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.046481] RIP: 0033:0x7f76c876ab19
[  426.046490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  426.046502] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  426.046513] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  426.046521] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  426.046528] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  426.046535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.046542] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  426.046558]  </TASK>
[  426.090075] loop5: detected capacity change from 0 to 264192
15:39:29 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)

[  426.134602] No source specified
[  426.136041] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  426.149257] EXT4-fs (loop5): get root inode failed
[  426.149684] EXT4-fs (loop5): mount failed
15:39:39 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7)

15:39:39 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:39 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8)

15:39:39 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8)

15:39:39 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57c9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = dup2(r3, r4)
r6 = dup3(r2, r4, 0x80000)
io_setup(0x1ff, &(0x7f0000000080)=<r7=>0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000007d00)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @broadcast}, @sco={0x1f, @none}})
io_submit(r7, 0x1, &(0x7f0000000300)=[0x0])
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r9 = memfd_secret(0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r10 = fsmount(r5, 0x0, 0xb)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r11, &(0x7f0000000080)=""/239, 0xef, 0x5)
io_submit(0x0, 0xa, &(0x7f0000001900)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1000, r6, &(0x7f0000000240)="29f23bd3c90d2ba9a9a9ab98e64728e3cbba72eda67e8cf85af055ef5f444dc7e9b297c4bbd288ddabedadfd84a9e16cf032606a40a4be8447aefc497b14ecc5d74cb3b0f1ddc5096083526a000d7eeae5df24a9d8a67a84f25c416e01984a00683d58e853ba506fc733ab6ff0b029277d782a6b32f881a12ec57deabe07067b4c7b4ed09237cdb937d56a3d6e526916af00a840a8652082f347d7776c24a45f7974158c51de28027f3c88dc5c23a287e17455e2a7", 0xb5, 0x1, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x8, 0x101, 0xffffffffffffffff, &(0x7f00000010c0)="6d8caa", 0x3}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000001140)="49ed9f0b32e88af56f82e85eba01218c9087873b2a74aa8cb9d43ecefb5ef194508415abc02d742a774bb159bade97e8801b00d2db186157336ac14dad17e77f421b227c0a2f083456d4de99d8543f35e57835bdeb8ef047456073e17afec64df48bf0bf6f107c4e09e77ecfc7944d69b124af461be67e080466a4f38e5d96e4179fef63dc8fd658af36e577d25b4616ffe6d4f5df44454b4e5d179619be504e919473600eb9563880eb99", 0xab, 0x7ff, 0x0, 0x2}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0x5, r6, &(0x7f0000001240)="38d92b9bfaa2c1a1e2c285ce853497ba5a29d3b71d7fcb63720736907008e8ea0d8123aad452b01b2c5b0d437f220ea89e316d34e2e8c6414779aa7c196551c105f24b649f86279eb15fd6c55b418e35ee8b50c1c19b73cbf86c5c8f170c266e5acc22578ea8442b86fddca1782802ceb4447796fd6398f64a5c39e0eea20d71aa3132fee02fb309047639231ef364772a3a9c41580f8415e354445cc4a20d31ee92c20ad1f7ec7d1d6c046e71179a3c871c66fc1e72fd35335c7ea7f4d8695551", 0xc1, 0x3b2, 0x0, 0x3, r6}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0xc0, 0xffffffffffffffff, &(0x7f0000001380)="1fdce3e9675f349343a22f22c0c4603cddac5ea52a7d51e46f18a665306afbc7ca1c0b028034c04b26af88c3", 0x2c, 0x1c, 0x0, 0x1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x7f8a, 0xffffffffffffffff, &(0x7f0000001400)="12193b6384df0b0e01d04fe3dfa6ab9a3b35723075c7ffb45da8f8bd6f9e84f537605a8e818a7509e6901ed43e5c3dd2557500fa78347202eafd2b543ce665229d30039d5312555f5b41034b8b6f9381d9cace0a5e4efe8b368121f47105562badeb19267da9490c0974e90d17800235f8cd3a9c808c101396eb481236aae78a90124718e8cb09bfe67c6822792adf4c31a7ac8cd4acbee940a0da43aaf04ad9194001f0144dd0ea97de403e7e40f42d27f50fbaf09a2d120f352ee2bd13a2804520790b1d26e7d12273456451e4ca59b6d61230a420424190f345", 0xdb, 0xf9a}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x6, r3, &(0x7f0000001540)="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", 0xfb, 0x5, 0x0, 0x2, r9}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000001680)="cb48b2477993f7e61c12a04f1b8e9f365e41d3e446fbd12b2b7a1113ea33b4f4326b521cae236e9b735234e69c5f3ce10f5f84783b8f6c95017c0fa77c3590", 0x3f, 0xfffffffffffffffe, 0x0, 0x6, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x1ff, r4, &(0x7f0000001700)="b789c50ff6a829c4ad7ea528ed5f04e6adab9c9899c2e1cc372c9208e6676a6683306b88f8201ee75983124f8ab7415671eee103f64fd50036855c40f935590df6920f6a0a66947320ecbcfcd1bf227df25ff3e436a13dcb33165662d92d8646a855bda9af301779da889cdc10b7af955ab783478ab6021600e6db06ceb1fd40", 0x80, 0x7, 0x0, 0x3}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x5, 0xd1, r0, &(0x7f00000017c0)="158518bb10117d18166e72564e3aa512589a8822ac3dcb412fb5233fcc1d92cc8c1746339f589db1747bf61d91fdf71f1823caf4f6fbd4272a5b02a36db37f3cbcbd456bf9d20584cd1b4ed4ebf6898e62f585050b8c6ace74009a3f399247e54f905e49341266b11643a722fb1ccf76e577ff5ba04646efe4ed1d9dcba0225268fa5e8032e32a0cc872e1a3fc78b0769c1fc26da476a4bd7945ae8cc807607aadcee3198923eccabb12a7d526f95e47b0b429acf02b0bdb10f69b51140556b6eed5fbeacece9012d3de64ba214f680fc46b975797dba70bc882d3138b8452f7ba9b31022055483b0293605036f736f08deeb2d66348", 0xf6, 0x401, 0x0, 0x2, r11}])
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:39:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

15:39:39 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

15:39:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013b00)=ANY=[])

[  435.650588] FAULT_INJECTION: forcing a failure.
[  435.650588] name failslab, interval 1, probability 0, space 0, times 0
[  435.652782] CPU: 0 UID: 0 PID: 5516 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  435.652829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  435.652848] Call Trace:
[  435.652860]  <TASK>
[  435.652873]  dump_stack_lvl+0xfa/0x120
[  435.652916]  should_fail_ex+0x4d7/0x5e0
[  435.652962]  should_failslab+0xc2/0x120
[  435.653012]  __kmalloc_noprof+0xcd/0x680
[  435.653070]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  435.653136]  ? security_prepare_creds+0x101/0x160
[  435.653200]  security_prepare_creds+0x101/0x160
[  435.653257]  prepare_creds+0x579/0x7e0
[  435.653314]  copy_creds+0x7a/0xa20
[  435.653374]  copy_process+0xf59/0x7410
[  435.653418]  ? __pfx_perf_trace_lock+0x10/0x10
[  435.653497]  ? __pfx_copy_process+0x10/0x10
[  435.653542]  ? __might_fault+0xe0/0x190
[  435.653587]  ? _copy_from_user+0x5b/0xd0
[  435.653635]  kernel_clone+0xea/0x7f0
[  435.653675]  ? get_pid_task+0xfd/0x250
[  435.653729]  ? __pfx_kernel_clone+0x10/0x10
[  435.653769]  ? perf_trace_lock+0xb5/0x5d0
[  435.653834]  ? find_held_lock+0x2b/0x80
[  435.653871]  ? ksys_write+0x121/0x240
[  435.653915]  ? lock_is_held_type+0x9e/0x120
[  435.653959]  __do_sys_clone3+0x1f5/0x280
[  435.654003]  ? __pfx___do_sys_clone3+0x10/0x10
[  435.654081]  ? __fget_files+0x20d/0x3b0
[  435.654135]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  435.654184]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  435.654235]  ? ksys_write+0x1a3/0x240
[  435.654277]  ? __pfx_ksys_write+0x10/0x10
[  435.654340]  do_syscall_64+0xbf/0x390
[  435.654385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.654421] RIP: 0033:0x7f2c107a1b19
[  435.654446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  435.654479] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  435.654511] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  435.654534] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  435.654555] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  435.654574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.654592] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  435.654643]  </TASK>
[  435.668851] No source specified
[  435.676368] loop5: detected capacity change from 0 to 264192
[  435.708565] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:39:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

[  435.724632] EXT4-fs (loop5): get root inode failed
[  435.725418] EXT4-fs (loop5): mount failed
15:39:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:39 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:39:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  435.799222] loop3: detected capacity change from 0 to 6
[  435.805356] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
15:39:51 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:39:51 executing program 2:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x80000001, 0x4)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x220000, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001280)={&(0x7f0000000280)=""/4096, 0x1000})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x9, 0x80, 0x0, 0x0, 0x5d0b, 0x27442, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x3}, 0x1040, 0x7, 0x3, 0x6, 0x0, 0xfffffffc, 0x2, 0x0, 0x4a9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
write$binfmt_elf32(r2, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x49, 0x6, 0x6, 0x2, 0x4, 0x3, 0x3e, 0xa110, 0x341, 0x38, 0x2a4, 0x3ff, 0xa5c2, 0x20, 0x1, 0x9, 0x8a4, 0x20}, [{0x70000000, 0xfe, 0x9, 0xfffffffd, 0xfffffffc, 0x6, 0x9, 0x7}], "b698d89842041f9f94e8a2eb9a2738ad3bfadbbaf21f4c2e7762f748ee40e3c9b1466b711d004c8355e9f787dcd54a476fa6ecc891198033a5c02fe6e1a90ed4a781eaf2947aecf4b9e1b833beaec6757b67bd99b04c38492033a215e22a972afea22807d274dc063061f1caba840506c5a532de0e2b70814e6b12acc20636f59e5ca47869bb15a5e8f9c6b7cb3831a4c84ae0dd7a24e4a423c1218dbc427e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaf7)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000013c0)=""/68)
sendto$packet(0xffffffffffffffff, &(0x7f0000001340)="4e825ed1a91afe4e6c523c83711f0a9de4fdc27dd428eb582ffcbe808d", 0x1d, 0x44851, &(0x7f0000001380)={0x11, 0x7, 0x0, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1f, 0x53, 0x0, 0x86, 0x0, 0x0, 0x157d6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffeb, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1, 0xbfa, 0x3, 0x7, 0x40, 0x2, 0x1, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x7, r3, 0xa)

15:39:51 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:51 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9)

15:39:51 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8)

15:39:51 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9)

15:39:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:51 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x9, 0x7d8}, 0x5}, 0x20, 0x1, 0x0)

[  447.535627] FAULT_INJECTION: forcing a failure.
[  447.535627] name failslab, interval 1, probability 0, space 0, times 0
[  447.536572] CPU: 0 UID: 0 PID: 5552 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  447.536588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  447.536595] Call Trace:
[  447.536599]  <TASK>
[  447.536604]  dump_stack_lvl+0xfa/0x120
[  447.536622]  should_fail_ex+0x4d7/0x5e0
[  447.536637]  ? create_user_ns+0x1ea/0xd30
[  447.536656]  should_failslab+0xc2/0x120
[  447.536673]  kmem_cache_alloc_noprof+0x80/0x690
[  447.536697]  ? create_user_ns+0x1ea/0xd30
[  447.536718]  create_user_ns+0x1ea/0xd30
[  447.536736]  ? prepare_creds+0x58d/0x7e0
[  447.536755]  copy_creds+0x497/0xa20
[  447.536774]  copy_process+0xf59/0x7410
[  447.536789]  ? __pfx_perf_trace_lock+0x10/0x10
[  447.536815]  ? __pfx_copy_process+0x10/0x10
[  447.536829]  ? __might_fault+0xe0/0x190
[  447.536845]  ? _copy_from_user+0x5b/0xd0
[  447.536863]  kernel_clone+0xea/0x7f0
[  447.536876]  ? get_pid_task+0xfd/0x250
[  447.536891]  ? __pfx_kernel_clone+0x10/0x10
[  447.536904]  ? perf_trace_lock+0xb5/0x5d0
[  447.536924]  ? find_held_lock+0x2b/0x80
[  447.536936]  ? ksys_write+0x121/0x240
[  447.536952]  ? lock_is_held_type+0x9e/0x120
[  447.536967]  __do_sys_clone3+0x1f5/0x280
[  447.536981]  ? __pfx___do_sys_clone3+0x10/0x10
[  447.537005]  ? __fget_files+0x20d/0x3b0
[  447.537023]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  447.537040]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  447.537056]  ? ksys_write+0x1a3/0x240
[  447.537069]  ? __pfx_ksys_write+0x10/0x10
[  447.537089]  do_syscall_64+0xbf/0x390
[  447.537104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.537116] RIP: 0033:0x7f07b06bcb19
[  447.537125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  447.537136] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  447.537147] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  447.537155] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  447.537162] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  447.537169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.537176] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  447.537193]  </TASK>
15:39:51 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x9, 0x7d8}, 0x5}, 0x20, 0x1, 0x0)

[  447.599313] FAULT_INJECTION: forcing a failure.
[  447.599313] name failslab, interval 1, probability 0, space 0, times 0
[  447.600209] CPU: 0 UID: 0 PID: 5561 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  447.600225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  447.600231] Call Trace:
[  447.600235]  <TASK>
[  447.600240]  dump_stack_lvl+0xfa/0x120
[  447.600255]  should_fail_ex+0x4d7/0x5e0
[  447.600269]  ? create_user_ns+0x1ea/0xd30
[  447.600287]  should_failslab+0xc2/0x120
[  447.600302]  kmem_cache_alloc_noprof+0x80/0x690
[  447.600328]  ? create_user_ns+0x1ea/0xd30
[  447.600348]  create_user_ns+0x1ea/0xd30
[  447.600367]  ? prepare_creds+0x58d/0x7e0
[  447.600384]  copy_creds+0x497/0xa20
[  447.600403]  copy_process+0xf59/0x7410
[  447.600417]  ? __pfx_perf_trace_lock+0x10/0x10
[  447.600442]  ? __pfx_copy_process+0x10/0x10
[  447.600456]  ? __might_fault+0xe0/0x190
[  447.600472]  ? _copy_from_user+0x5b/0xd0
[  447.600488]  kernel_clone+0xea/0x7f0
[  447.600501]  ? get_pid_task+0xfd/0x250
[  447.600515]  ? __pfx_kernel_clone+0x10/0x10
[  447.600528]  ? perf_trace_lock+0xb5/0x5d0
[  447.600548]  ? find_held_lock+0x2b/0x80
[  447.600560]  ? ksys_write+0x121/0x240
[  447.600574]  ? lock_is_held_type+0x9e/0x120
[  447.600588]  __do_sys_clone3+0x1f5/0x280
[  447.600602]  ? __pfx___do_sys_clone3+0x10/0x10
[  447.600626]  ? __fget_files+0x20d/0x3b0
[  447.600644]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  447.600660]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  447.600676]  ? ksys_write+0x1a3/0x240
[  447.600690]  ? __pfx_ksys_write+0x10/0x10
[  447.600709]  do_syscall_64+0xbf/0x390
[  447.600728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.600739] RIP: 0033:0x7f76c876ab19
[  447.600748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  447.600759] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  447.600770] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  447.600777] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  447.600784] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  447.600791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.600798] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  447.600815]  </TASK>
[  447.605569] loop3: detected capacity change from 0 to 6
[  447.632931] loop5: detected capacity change from 0 to 264192
15:39:51 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10)

[  447.663601] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:39:51 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x9, 0x7d8}, 0x5}, 0x20, 0x1, 0x0)

[  447.674097] EXT4-fs (loop5): get root inode failed
[  447.675207] EXT4-fs (loop5): mount failed
15:39:51 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10)

[  447.713089] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
[  447.732592] FAULT_INJECTION: forcing a failure.
[  447.732592] name failslab, interval 1, probability 0, space 0, times 0
[  447.733667] CPU: 0 UID: 0 PID: 5574 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  447.733683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  447.733691] Call Trace:
[  447.733696]  <TASK>
[  447.733700]  dump_stack_lvl+0xfa/0x120
[  447.733722]  should_fail_ex+0x4d7/0x5e0
[  447.733738]  should_failslab+0xc2/0x120
[  447.733754]  __kmalloc_noprof+0xcd/0x680
[  447.733774]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  447.733788]  ? security_prepare_creds+0x101/0x160
[  447.733809]  security_prepare_creds+0x101/0x160
[  447.733827]  prepare_creds+0x579/0x7e0
[  447.733846]  copy_creds+0x7a/0xa20
[  447.733864]  copy_process+0xf59/0x7410
[  447.733880]  ? __pfx_perf_trace_lock+0x10/0x10
[  447.733905]  ? __pfx_copy_process+0x10/0x10
[  447.733919]  ? __might_fault+0xe0/0x190
[  447.733936]  ? _copy_from_user+0x5b/0xd0
[  447.733953]  kernel_clone+0xea/0x7f0
[  447.733966]  ? get_pid_task+0xfd/0x250
[  447.733980]  ? __pfx_kernel_clone+0x10/0x10
[  447.733993]  ? perf_trace_lock+0xb5/0x5d0
[  447.734013]  ? find_held_lock+0x2b/0x80
[  447.734025]  ? ksys_write+0x121/0x240
[  447.734040]  ? lock_is_held_type+0x9e/0x120
[  447.734056]  __do_sys_clone3+0x1f5/0x280
[  447.734070]  ? __pfx___do_sys_clone3+0x10/0x10
[  447.734094]  ? __fget_files+0x20d/0x3b0
[  447.734111]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  447.734128]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
15:39:51 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  447.734144]  ? ksys_write+0x1a3/0x240
[  447.734158]  ? __pfx_ksys_write+0x10/0x10
[  447.734177]  do_syscall_64+0xbf/0x390
[  447.734192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.734204] RIP: 0033:0x7f76c876ab19
[  447.734213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  447.734224] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  447.734236] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  447.734244] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  447.734251] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  447.734258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.734265] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  447.734282]  </TASK>
15:39:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:39:51 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:39:51 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  447.872970] loop5: detected capacity change from 0 to 264192
[  447.912653] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  447.917622] EXT4-fs (loop5): get root inode failed
[  447.918277] EXT4-fs (loop5): mount failed
15:40:02 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9)

15:40:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x12000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f00000000c0)=""/186)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x84000)
rseq(0x0, 0x0, 0x0, 0x0)

15:40:02 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11)

15:40:02 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
uname(&(0x7f0000000140)=""/212)

15:40:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:02 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  459.136148] FAULT_INJECTION: forcing a failure.
[  459.136148] name failslab, interval 1, probability 0, space 0, times 0
[  459.138005] CPU: 1 UID: 0 PID: 5600 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  459.138033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  459.138046] Call Trace:
[  459.138053]  <TASK>
[  459.138061]  dump_stack_lvl+0xfa/0x120
[  459.138089]  should_fail_ex+0x4d7/0x5e0
[  459.138119]  ? create_user_ns+0x1ea/0xd30
[  459.138153]  should_failslab+0xc2/0x120
[  459.138182]  kmem_cache_alloc_noprof+0x80/0x690
[  459.138225]  ? create_user_ns+0x1ea/0xd30
[  459.138255]  create_user_ns+0x1ea/0xd30
[  459.138289]  ? prepare_creds+0x58d/0x7e0
15:40:02 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11)

[  459.138322]  copy_creds+0x497/0xa20
[  459.138355]  copy_process+0xf59/0x7410
[  459.138382]  ? __pfx_perf_trace_lock+0x10/0x10
[  459.138427]  ? __pfx_copy_process+0x10/0x10
[  459.138452]  ? __might_fault+0xe0/0x190
[  459.138481]  ? _copy_from_user+0x5b/0xd0
[  459.138510]  kernel_clone+0xea/0x7f0
[  459.138534]  ? get_pid_task+0xfd/0x250
[  459.138560]  ? __pfx_kernel_clone+0x10/0x10
[  459.138584]  ? perf_trace_lock+0xb5/0x5d0
[  459.138621]  ? find_held_lock+0x2b/0x80
[  459.138642]  ? ksys_write+0x121/0x240
[  459.138668]  ? lock_is_held_type+0x9e/0x120
[  459.138694]  __do_sys_clone3+0x1f5/0x280
[  459.138727]  ? __pfx___do_sys_clone3+0x10/0x10
[  459.138771]  ? __fget_files+0x20d/0x3b0
[  459.138802]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.138831]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.138860]  ? ksys_write+0x1a3/0x240
[  459.138885]  ? __pfx_ksys_write+0x10/0x10
[  459.138920]  do_syscall_64+0xbf/0x390
[  459.138946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.138968] RIP: 0033:0x7f2c107a1b19
[  459.138984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  459.139004] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  459.139024] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  459.139038] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  459.139051] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  459.139063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.139076] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  459.139106]  </TASK>
[  459.173160] loop3: detected capacity change from 0 to 6
[  459.188950] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
[  459.201646] loop5: detected capacity change from 0 to 264192
[  459.206482] FAULT_INJECTION: forcing a failure.
[  459.206482] name failslab, interval 1, probability 0, space 0, times 0
[  459.208332] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  459.208363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  459.208376] Call Trace:
[  459.208384]  <TASK>
[  459.208392]  dump_stack_lvl+0xfa/0x120
[  459.208423]  should_fail_ex+0x4d7/0x5e0
[  459.208453]  should_failslab+0xc2/0x120
[  459.208484]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  459.208514]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  459.208538]  ? setup_userns_sysctls+0x51/0x190
[  459.208574]  kmemdup_noprof+0x2b/0x60
[  459.208606]  setup_userns_sysctls+0x51/0x190
[  459.208637]  create_user_ns+0x8f7/0xd30
[  459.208680]  copy_creds+0x497/0xa20
[  459.208724]  copy_process+0xf59/0x7410
[  459.208753]  ? __pfx_perf_trace_lock+0x10/0x10
[  459.208800]  ? __pfx_copy_process+0x10/0x10
[  459.208827]  ? __might_fault+0xe0/0x190
[  459.208857]  ? _copy_from_user+0x5b/0xd0
[  459.208889]  kernel_clone+0xea/0x7f0
[  459.208913]  ? get_pid_task+0xfd/0x250
[  459.208941]  ? __pfx_kernel_clone+0x10/0x10
[  459.208965]  ? perf_trace_lock+0xb5/0x5d0
[  459.209002]  ? find_held_lock+0x2b/0x80
[  459.209025]  ? ksys_write+0x121/0x240
[  459.209053]  ? lock_is_held_type+0x9e/0x120
[  459.209080]  __do_sys_clone3+0x1f5/0x280
[  459.209107]  ? __pfx___do_sys_clone3+0x10/0x10
[  459.209151]  ? __fget_files+0x20d/0x3b0
[  459.209183]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.209213]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.209243]  ? ksys_write+0x1a3/0x240
[  459.209268]  ? __pfx_ksys_write+0x10/0x10
[  459.209304]  do_syscall_64+0xbf/0x390
[  459.209331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.209353] RIP: 0033:0x7f07b06bcb19
[  459.209370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  459.209411] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  459.209432] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  459.209447] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  459.209459] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  459.209473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  459.209485] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  459.209517]  </TASK>
[  459.209832] FAULT_INJECTION: forcing a failure.
[  459.209832] name failslab, interval 1, probability 0, space 0, times 0
[  459.246708] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  459.246742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  459.246754] Call Trace:
[  459.246761]  <TASK>
[  459.246769]  dump_stack_lvl+0xfa/0x120
[  459.246796]  should_fail_ex+0x4d7/0x5e0
[  459.246822]  should_failslab+0xc2/0x120
[  459.246851]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  459.246877]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  459.246900]  ? setup_userns_sysctls+0x51/0x190
[  459.246931]  kmemdup_noprof+0x2b/0x60
[  459.246961]  setup_userns_sysctls+0x51/0x190
[  459.246989]  create_user_ns+0x8f7/0xd30
[  459.247028]  copy_creds+0x497/0xa20
[  459.247061]  copy_process+0xf59/0x7410
[  459.247086]  ? __pfx_perf_trace_lock+0x10/0x10
[  459.247129]  ? __pfx_copy_process+0x10/0x10
[  459.247154]  ? __might_fault+0xe0/0x190
[  459.247181]  ? _copy_from_user+0x5b/0xd0
[  459.247209]  kernel_clone+0xea/0x7f0
[  459.247232]  ? get_pid_task+0xfd/0x250
[  459.247257]  ? __pfx_kernel_clone+0x10/0x10
[  459.247279]  ? perf_trace_lock+0xb5/0x5d0
[  459.247314]  ? find_held_lock+0x2b/0x80
[  459.247335]  ? ksys_write+0x121/0x240
[  459.247360]  ? lock_is_held_type+0x9e/0x120
[  459.247384]  __do_sys_clone3+0x1f5/0x280
[  459.247409]  ? __pfx___do_sys_clone3+0x10/0x10
[  459.247450]  ? __fget_files+0x20d/0x3b0
[  459.247480]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.247508]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  459.247536]  ? ksys_write+0x1a3/0x240
[  459.247560]  ? __pfx_ksys_write+0x10/0x10
[  459.247594]  do_syscall_64+0xbf/0x390
[  459.247619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.247639] RIP: 0033:0x7f76c876ab19
[  459.247655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  459.247674] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  459.247694] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  459.247708] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  459.247720] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  459.247732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  459.247744] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  459.247773]  </TASK>
[  459.323446] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:40:02 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)

[  459.329499] EXT4-fs (loop5): get root inode failed
[  459.330242] EXT4-fs (loop5): mount failed
15:40:02 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12)

15:40:02 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x9)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0002000})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r4, &(0x7f0000000080)=""/239, 0xef, 0x5)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000240)={0x1})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x80000000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='/dev/ttyS3\x00')
rseq(0x0, 0x0, 0x0, 0x0)

15:40:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  459.451045] audit: type=1400 audit(1761320402.973:14): avc:  denied  { block_suspend } for  pid=5640 comm="syz-executor.2" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  459.458241] loop3: detected capacity change from 0 to 6
[  459.471957] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
15:40:14 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
fcntl$setownex(r1, 0xf, &(0x7f0000000040))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:14 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12)

15:40:14 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10)

15:40:14 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)

15:40:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:14 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000240)={<r1=>0x0, 0x5, 0x1027})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={r1, 0x40, 0x5, 0x1})
r2 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0xfb, 0x1, 0x6, 0x0, 0x5, 0x25202, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x4, 0x7}, 0x44081, 0x0, 0x5, 0x4, 0x9, 0x3, 0x8, 0x0, 0x40, 0x0, 0x2}, r2, 0xf, r0, 0x2)

15:40:14 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13)

[  470.616512] loop3: detected capacity change from 0 to 6
[  470.632811] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
[  470.641564] loop5: detected capacity change from 0 to 264192
15:40:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  470.680947] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  470.699267] EXT4-fs (loop5): get root inode failed
[  470.700049] EXT4-fs (loop5): mount failed
[  470.704881] FAULT_INJECTION: forcing a failure.
[  470.704881] name failslab, interval 1, probability 0, space 0, times 0
[  470.706581] CPU: 0 UID: 0 PID: 5752 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  470.706611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  470.706623] Call Trace:
[  470.706630]  <TASK>
[  470.706638]  dump_stack_lvl+0xfa/0x120
15:40:14 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  470.706668]  should_fail_ex+0x4d7/0x5e0
[  470.706696]  should_failslab+0xc2/0x120
[  470.706732]  __kmalloc_noprof+0xcd/0x680
[  470.706764]  ? __create_object+0x59/0x80
[  470.706798]  ? __register_sysctl_table+0xb5/0x16a0
[  470.706827]  __register_sysctl_table+0xb5/0x16a0
[  470.706847]  ? kasan_save_track+0x14/0x30
[  470.706875]  ? __kasan_kmalloc+0x7f/0x90
[  470.706908]  ? __pfx___register_sysctl_table+0x10/0x10
[  470.706928]  ? setup_userns_sysctls+0x51/0x190
[  470.706958]  ? __asan_memcpy+0x3d/0x60
[  470.706987]  setup_userns_sysctls+0xcb/0x190
[  470.707016]  create_user_ns+0x8f7/0xd30
[  470.707057]  copy_creds+0x497/0xa20
[  470.707092]  copy_process+0xf59/0x7410
[  470.707119]  ? __pfx_perf_trace_lock+0x10/0x10
[  470.707164]  ? __pfx_copy_process+0x10/0x10
[  470.707190]  ? __might_fault+0xe0/0x190
[  470.707219]  ? _copy_from_user+0x5b/0xd0
[  470.707248]  kernel_clone+0xea/0x7f0
[  470.707272]  ? get_pid_task+0xfd/0x250
[  470.707299]  ? __pfx_kernel_clone+0x10/0x10
[  470.707322]  ? perf_trace_lock+0xb5/0x5d0
[  470.707359]  ? find_held_lock+0x2b/0x80
[  470.707382]  ? ksys_write+0x121/0x240
[  470.707408]  ? lock_is_held_type+0x9e/0x120
[  470.707435]  __do_sys_clone3+0x1f5/0x280
[  470.707460]  ? __pfx___do_sys_clone3+0x10/0x10
[  470.707504]  ? __fget_files+0x20d/0x3b0
[  470.707536]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  470.707565]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  470.707595]  ? ksys_write+0x1a3/0x240
[  470.707619]  ? __pfx_ksys_write+0x10/0x10
[  470.707655]  do_syscall_64+0xbf/0x390
[  470.707682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.707703] RIP: 0033:0x7f07b06bcb19
[  470.707720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  470.707740] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  470.707761] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  470.707775] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  470.707788] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  470.707801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  470.707813] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  470.707844]  </TASK>
[  470.770351] loop3: detected capacity change from 0 to 6
[  470.774625] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (3 blocks)
15:40:14 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:14 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14)

15:40:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:14 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13)

15:40:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4861c1, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x205)
uname(&(0x7f0000000240)=""/8)
uname(&(0x7f0000000340)=""/170)

[  470.948404] loop5: detected capacity change from 0 to 264192
15:40:14 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x45204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6de3d003, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x1, 0x9, 0x0, 0x4, 0xcf8, 0x1, 0x0, 0x4a, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r2, 0xa)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  470.981661] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  470.996587] FAULT_INJECTION: forcing a failure.
[  470.996587] name failslab, interval 1, probability 0, space 0, times 0
[  470.997466] CPU: 1 UID: 0 PID: 5776 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  470.997482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  470.997490] Call Trace:
[  470.997494]  <TASK>
[  470.997499]  dump_stack_lvl+0xfa/0x120
[  470.997523]  should_fail_ex+0x4d7/0x5e0
[  470.997540]  should_failslab+0xc2/0x120
[  470.997557]  __kmalloc_noprof+0xcd/0x680
[  470.997574]  ? __create_object+0x59/0x80
[  470.997593]  ? __register_sysctl_table+0xb5/0x16a0
[  470.997610]  __register_sysctl_table+0xb5/0x16a0
[  470.997621]  ? kasan_save_track+0x14/0x30
[  470.997636]  ? __kasan_kmalloc+0x7f/0x90
[  470.997654]  ? __pfx___register_sysctl_table+0x10/0x10
[  470.997665]  ? setup_userns_sysctls+0x51/0x190
[  470.997683]  ? __asan_memcpy+0x3d/0x60
[  470.997698]  setup_userns_sysctls+0xcb/0x190
[  470.997718]  create_user_ns+0x8f7/0xd30
[  470.997742]  copy_creds+0x497/0xa20
[  470.997761]  copy_process+0xf59/0x7410
[  470.997776]  ? __pfx_perf_trace_lock+0x10/0x10
[  470.997801]  ? __pfx_copy_process+0x10/0x10
[  470.997816]  ? __might_fault+0xe0/0x190
[  470.997832]  ? _copy_from_user+0x5b/0xd0
[  470.997848]  kernel_clone+0xea/0x7f0
[  470.997861]  ? get_pid_task+0xfd/0x250
[  470.997877]  ? __pfx_kernel_clone+0x10/0x10
[  470.997889]  ? perf_trace_lock+0xb5/0x5d0
[  470.997910]  ? find_held_lock+0x2b/0x80
[  470.997922]  ? ksys_write+0x121/0x240
[  470.997937]  ? lock_is_held_type+0x9e/0x120
[  470.997952]  __do_sys_clone3+0x1f5/0x280
[  470.997967]  ? __pfx___do_sys_clone3+0x10/0x10
[  470.997990]  ? __fget_files+0x20d/0x3b0
[  470.998008]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  470.998025]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  470.998041]  ? ksys_write+0x1a3/0x240
[  470.998054]  ? __pfx_ksys_write+0x10/0x10
[  470.998074]  do_syscall_64+0xbf/0x390
[  470.998089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.998101] RIP: 0033:0x7f76c876ab19
[  470.998110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  470.998121] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  470.998132] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  470.998140] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  470.998147] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  470.998154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  470.998161] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  470.998177]  </TASK>
15:40:14 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11)

[  471.053693] EXT4-fs (loop5): get root inode failed
[  471.054491] EXT4-fs (loop5): mount failed
[  471.122988] FAULT_INJECTION: forcing a failure.
[  471.122988] name failslab, interval 1, probability 0, space 0, times 0
[  471.124172] CPU: 1 UID: 0 PID: 5781 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  471.124189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  471.124196] Call Trace:
[  471.124201]  <TASK>
[  471.124206]  dump_stack_lvl+0xfa/0x120
[  471.124226]  should_fail_ex+0x4d7/0x5e0
[  471.124243]  should_failslab+0xc2/0x120
[  471.124261]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  471.124277]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  471.124291]  ? setup_userns_sysctls+0x51/0x190
[  471.124312]  kmemdup_noprof+0x2b/0x60
[  471.124331]  setup_userns_sysctls+0x51/0x190
[  471.124347]  create_user_ns+0x8f7/0xd30
[  471.124371]  copy_creds+0x497/0xa20
[  471.124391]  copy_process+0xf59/0x7410
[  471.124407]  ? __pfx_perf_trace_lock+0x10/0x10
[  471.124434]  ? __pfx_copy_process+0x10/0x10
[  471.124448]  ? __might_fault+0xe0/0x190
[  471.124465]  ? _copy_from_user+0x5b/0xd0
[  471.124482]  kernel_clone+0xea/0x7f0
[  471.124496]  ? get_pid_task+0xfd/0x250
[  471.124511]  ? __pfx_kernel_clone+0x10/0x10
[  471.124524]  ? perf_trace_lock+0xb5/0x5d0
[  471.124545]  ? find_held_lock+0x2b/0x80
[  471.124557]  ? ksys_write+0x121/0x240
[  471.124572]  ? lock_is_held_type+0x9e/0x120
[  471.124587]  __do_sys_clone3+0x1f5/0x280
[  471.124602]  ? __pfx___do_sys_clone3+0x10/0x10
[  471.124627]  ? __fget_files+0x20d/0x3b0
[  471.124647]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  471.124664]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  471.124680]  ? ksys_write+0x1a3/0x240
[  471.124694]  ? __pfx_ksys_write+0x10/0x10
[  471.124719]  do_syscall_64+0xbf/0x390
[  471.124734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.124746] RIP: 0033:0x7f2c107a1b19
[  471.124756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  471.124768] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  471.124779] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  471.124787] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  471.124794] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  471.124801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  471.124808] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  471.124826]  </TASK>
15:40:27 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:27 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:27 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12)

15:40:27 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14)

15:40:27 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15)

15:40:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:27 executing program 2:
r0 = accept4(0xffffffffffffffff, &(0x7f00000012c0)=@ieee802154, &(0x7f0000001340)=0x80, 0x800)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf250900000008000b00ff07000005002a000100000005002d0001000000961b"], 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x24008094)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f00000017c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f80)={0x65c, 0x0, 0xe11, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2dc4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x4}, 0x20020880)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r7 = inotify_init()
pwrite64(r7, &(0x7f0000001400)="2a8a9f9f7382ddc6cac4cd925148c222c6", 0x11, 0x4)
uname(&(0x7f0000000140)=""/212)
uname(&(0x7f0000000080)=""/179)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001240)={{0x1, 0x1, 0x18, <r8=>r2, {0x5}}, './file0\x00'})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000001280))
uname(&(0x7f0000000240)=""/4096)
rseq(0x0, 0x0, 0x0, 0x0)

[  483.744215] FAULT_INJECTION: forcing a failure.
[  483.744215] name failslab, interval 1, probability 0, space 0, times 0
[  483.746104] CPU: 1 UID: 0 PID: 5794 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  483.746134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  483.746146] Call Trace:
[  483.746153]  <TASK>
[  483.746161]  dump_stack_lvl+0xfa/0x120
[  483.746190]  should_fail_ex+0x4d7/0x5e0
[  483.746218]  should_failslab+0xc2/0x120
[  483.746247]  __kmalloc_noprof+0xcd/0x680
[  483.746278]  ? __create_object+0x59/0x80
[  483.746312]  ? __register_sysctl_table+0xb5/0x16a0
[  483.746341]  __register_sysctl_table+0xb5/0x16a0
[  483.746361]  ? kasan_save_track+0x14/0x30
[  483.746389]  ? __kasan_kmalloc+0x7f/0x90
[  483.746421]  ? __pfx___register_sysctl_table+0x10/0x10
[  483.746442]  ? setup_userns_sysctls+0x51/0x190
[  483.746472]  ? __asan_memcpy+0x3d/0x60
[  483.746501]  setup_userns_sysctls+0xcb/0x190
[  483.746530]  create_user_ns+0x8f7/0xd30
[  483.746571]  copy_creds+0x497/0xa20
[  483.746606]  copy_process+0xf59/0x7410
[  483.746632]  ? __pfx_perf_trace_lock+0x10/0x10
[  483.746677]  ? __pfx_copy_process+0x10/0x10
[  483.746704]  ? __might_fault+0xe0/0x190
[  483.746740]  ? _copy_from_user+0x5b/0xd0
[  483.746769]  kernel_clone+0xea/0x7f0
[  483.746793]  ? get_pid_task+0xfd/0x250
[  483.746820]  ? __pfx_kernel_clone+0x10/0x10
[  483.746844]  ? perf_trace_lock+0xb5/0x5d0
[  483.746881]  ? find_held_lock+0x2b/0x80
[  483.746903]  ? ksys_write+0x121/0x240
[  483.746929]  ? lock_is_held_type+0x9e/0x120
[  483.746955]  __do_sys_clone3+0x1f5/0x280
[  483.746981]  ? __pfx___do_sys_clone3+0x10/0x10
[  483.747025]  ? __fget_files+0x20d/0x3b0
[  483.747056]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  483.747085]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  483.747114]  ? ksys_write+0x1a3/0x240
[  483.747139]  ? __pfx_ksys_write+0x10/0x10
[  483.747175]  do_syscall_64+0xbf/0x390
[  483.747202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.747224] RIP: 0033:0x7f07b06bcb19
[  483.747241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  483.747261] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  483.747281] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  483.747295] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  483.747308] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  483.747321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  483.747333] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  483.747370]  </TASK>
[  483.814502] loop3: detected capacity change from 0 to 264192
15:40:27 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

[  483.840922] loop5: detected capacity change from 0 to 264192
[  483.855810] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  483.857317] EXT4-fs (loop3): group descriptors corrupted!
[  483.875073] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  483.886996] EXT4-fs (loop5): get root inode failed
[  483.887955] EXT4-fs (loop5): mount failed
15:40:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  484.165660] loop3: detected capacity change from 0 to 5
[  484.181923] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
[  484.190388] loop5: detected capacity change from 0 to 264192
[  484.228184] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  484.240277] EXT4-fs (loop5): get root inode failed
[  484.241386] EXT4-fs (loop5): mount failed
15:40:39 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:39 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:39 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:39 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16)

15:40:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40280, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xb74a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0)
flock(r0, 0x9)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:40:39 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13)

15:40:39 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15)

15:40:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  495.891592] FAULT_INJECTION: forcing a failure.
[  495.891592] name failslab, interval 1, probability 0, space 0, times 0
[  495.892750] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  495.892766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  495.892774] Call Trace:
[  495.892778]  <TASK>
[  495.892783]  dump_stack_lvl+0xfa/0x120
[  495.892802]  should_fail_ex+0x4d7/0x5e0
[  495.892818]  should_failslab+0xc2/0x120
[  495.892835]  __kmalloc_noprof+0xcd/0x680
[  495.892852]  ? __create_object+0x59/0x80
[  495.892871]  ? __register_sysctl_table+0xb5/0x16a0
[  495.892888]  __register_sysctl_table+0xb5/0x16a0
[  495.892899]  ? kasan_save_track+0x14/0x30
[  495.892916]  ? __kasan_kmalloc+0x7f/0x90
[  495.892934]  ? __pfx___register_sysctl_table+0x10/0x10
[  495.892945]  ? setup_userns_sysctls+0x51/0x190
[  495.892963]  ? __asan_memcpy+0x3d/0x60
[  495.892979]  setup_userns_sysctls+0xcb/0x190
[  495.892995]  create_user_ns+0x8f7/0xd30
[  495.893018]  copy_creds+0x497/0xa20
[  495.893037]  copy_process+0xf59/0x7410
[  495.893052]  ? __pfx_perf_trace_lock+0x10/0x10
[  495.893078]  ? __pfx_copy_process+0x10/0x10
[  495.893092]  ? __might_fault+0xe0/0x190
[  495.893108]  ? _copy_from_user+0x5b/0xd0
[  495.893124]  kernel_clone+0xea/0x7f0
[  495.893138]  ? get_pid_task+0xfd/0x250
[  495.893153]  ? __pfx_kernel_clone+0x10/0x10
[  495.893165]  ? perf_trace_lock+0xb5/0x5d0
[  495.893186]  ? find_held_lock+0x2b/0x80
[  495.893198]  ? ksys_write+0x121/0x240
[  495.893212]  ? lock_is_held_type+0x9e/0x120
[  495.893228]  __do_sys_clone3+0x1f5/0x280
[  495.893242]  ? __pfx___do_sys_clone3+0x10/0x10
[  495.893266]  ? __fget_files+0x20d/0x3b0
[  495.893283]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  495.893300]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  495.893316]  ? ksys_write+0x1a3/0x240
[  495.893329]  ? __pfx_ksys_write+0x10/0x10
[  495.893349]  do_syscall_64+0xbf/0x390
[  495.893366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.893381] RIP: 0033:0x7f2c107a1b19
[  495.893390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  495.893401] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  495.893413] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  495.893421] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  495.893429] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  495.893436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  495.893443] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  495.893460]  </TASK>
15:40:39 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14)

[  495.963624] loop5: detected capacity change from 0 to 264192
[  495.966226] loop3: detected capacity change from 0 to 5
[  495.968987] FAULT_INJECTION: forcing a failure.
[  495.968987] name failslab, interval 1, probability 0, space 0, times 0
[  495.970853] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  495.970885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  495.970899] Call Trace:
[  495.970908]  <TASK>
[  495.970917]  dump_stack_lvl+0xfa/0x120
[  495.970949]  should_fail_ex+0x4d7/0x5e0
[  495.970982]  should_failslab+0xc2/0x120
[  495.971014]  __kmalloc_noprof+0xcd/0x680
[  495.971050]  ? __register_sysctl_table+0xd3e/0x16a0
[  495.971076]  ? lock_release+0xc8/0x290
[  495.971107]  ? __register_sysctl_table+0xd4f/0x16a0
[  495.971138]  __register_sysctl_table+0xd4f/0x16a0
[  495.971172]  ? __pfx___register_sysctl_table+0x10/0x10
[  495.971195]  ? setup_userns_sysctls+0x51/0x190
[  495.971227]  ? __asan_memcpy+0x3d/0x60
[  495.971260]  setup_userns_sysctls+0xcb/0x190
[  495.971293]  create_user_ns+0x8f7/0xd30
[  495.971339]  copy_creds+0x497/0xa20
[  495.971379]  copy_process+0xf59/0x7410
[  495.971408]  ? __pfx_perf_trace_lock+0x10/0x10
[  495.971459]  ? __pfx_copy_process+0x10/0x10
[  495.971488]  ? __might_fault+0xe0/0x190
[  495.971520]  ? _copy_from_user+0x5b/0xd0
[  495.971553]  kernel_clone+0xea/0x7f0
[  495.971580]  ? get_pid_task+0xfd/0x250
[  495.971610]  ? __pfx_kernel_clone+0x10/0x10
[  495.971636]  ? perf_trace_lock+0xb5/0x5d0
[  495.971678]  ? find_held_lock+0x2b/0x80
[  495.971702]  ? ksys_write+0x121/0x240
[  495.971740]  ? lock_is_held_type+0x9e/0x120
[  495.971769]  __do_sys_clone3+0x1f5/0x280
[  495.971798]  ? __pfx___do_sys_clone3+0x10/0x10
[  495.971847]  ? __fget_files+0x20d/0x3b0
[  495.971883]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  495.971915]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  495.971948]  ? ksys_write+0x1a3/0x240
[  495.971976]  ? __pfx_ksys_write+0x10/0x10
[  495.972017]  do_syscall_64+0xbf/0x390
[  495.972046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.972071] RIP: 0033:0x7f76c876ab19
[  495.972090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  495.972112] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  495.972135] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  495.972152] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  495.972166] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  495.972180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  495.972194] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  495.972229]  </TASK>
[  496.012852] sysctl could not get directory: /user -12
15:40:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000100)=""/213)
rseq(0x0, 0x0, 0x0, 0x0)
uname(&(0x7f0000000080)=""/109)

[  496.048528] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
15:40:39 executing program 6:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:39 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17)

[  496.091011] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:40:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1400000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=<r2=>0x0)
r3 = fork()
ptrace(0x10, r3)
ptrace$poke(0x4, r3, &(0x7f0000000100), 0x1400000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=<r4=>0x0)
clone3(&(0x7f00000004c0)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/181, 0xb5, &(0x7f0000000340)=""/167, &(0x7f0000000480)=[r1, r2, 0xffffffffffffffff, r3, r4], 0x5, {r0}}, 0x58)

[  496.110915] EXT4-fs (loop5): get root inode failed
[  496.111706] EXT4-fs (loop5): mount failed
15:40:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

[  496.166910] FAULT_INJECTION: forcing a failure.
[  496.166910] name failslab, interval 1, probability 0, space 0, times 0
[  496.168034] CPU: 0 UID: 0 PID: 5934 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  496.168051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  496.168059] Call Trace:
[  496.168064]  <TASK>
[  496.168068]  dump_stack_lvl+0xfa/0x120
[  496.168088]  should_fail_ex+0x4d7/0x5e0
[  496.168105]  should_failslab+0xc2/0x120
[  496.168122]  __kmalloc_cache_noprof+0x81/0x6b0
[  496.168141]  ? __pfx_find_ucounts+0x10/0x10
[  496.168155]  ? create_user_ns+0xa9a/0xd30
[  496.168175]  ? alloc_ucounts+0x13e/0x450
[  496.168188]  ? find_held_lock+0x2b/0x80
[  496.168203]  ? alloc_ucounts+0x13e/0x450
[  496.168216]  alloc_ucounts+0x13e/0x450
[  496.168230]  ? __pfx_alloc_ucounts+0x10/0x10
[  496.168244]  ? create_user_ns+0x143/0xd30
[  496.168266]  copy_creds+0x56e/0xa20
[  496.168286]  copy_process+0xf59/0x7410
[  496.168302]  ? __pfx_perf_trace_lock+0x10/0x10
[  496.168328]  ? __pfx_copy_process+0x10/0x10
[  496.168343]  ? __might_fault+0xe0/0x190
[  496.168361]  ? _copy_from_user+0x5b/0xd0
[  496.168378]  kernel_clone+0xea/0x7f0
[  496.168391]  ? get_pid_task+0xfd/0x250
[  496.168406]  ? __pfx_kernel_clone+0x10/0x10
[  496.168419]  ? perf_trace_lock+0xb5/0x5d0
[  496.168440]  ? find_held_lock+0x2b/0x80
[  496.168452]  ? ksys_write+0x121/0x240
[  496.168468]  ? lock_is_held_type+0x9e/0x120
[  496.168485]  __do_sys_clone3+0x1f5/0x280
[  496.168499]  ? __pfx___do_sys_clone3+0x10/0x10
[  496.168525]  ? __fget_files+0x20d/0x3b0
[  496.168544]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.168560]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.168577]  ? ksys_write+0x1a3/0x240
[  496.168590]  ? __pfx_ksys_write+0x10/0x10
[  496.168611]  do_syscall_64+0xbf/0x390
[  496.168626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.168639] RIP: 0033:0x7f07b06bcb19
[  496.168648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  496.168659] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  496.168671] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  496.168679] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  496.168685] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  496.168692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  496.168699] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  496.168722]  </TASK>
15:40:39 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16)

[  496.264617] loop3: detected capacity change from 0 to 5
15:40:39 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934eada", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  496.301237] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
15:40:39 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:39 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0xff, 0x7, 0x0, 0x8001, 0x1090, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8001, 0x21f}, 0x2000, 0x3fefa41d80, 0x3, 0x2, 0x88b, 0x2, 0x101, 0x0, 0x13, 0x0, 0x10000}, r0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:39 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15)

15:40:39 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18)

[  496.403932] loop5: detected capacity change from 0 to 264192
[  496.429854] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  496.450935] EXT4-fs (loop5): get root inode failed
[  496.451863] EXT4-fs (loop5): mount failed
[  496.458960] FAULT_INJECTION: forcing a failure.
[  496.458960] name failslab, interval 1, probability 0, space 0, times 0
[  496.461033] CPU: 1 UID: 0 PID: 5978 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  496.461068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  496.461083] Call Trace:
[  496.461091]  <TASK>
[  496.461101]  dump_stack_lvl+0xfa/0x120
[  496.461135]  should_fail_ex+0x4d7/0x5e0
[  496.461168]  should_failslab+0xc2/0x120
[  496.461203]  __kmalloc_noprof+0xcd/0x680
[  496.461242]  ? __register_sysctl_table+0xd3e/0x16a0
[  496.461270]  ? lock_release+0xc8/0x290
[  496.461303]  ? __register_sysctl_table+0xd4f/0x16a0
[  496.461336]  __register_sysctl_table+0xd4f/0x16a0
[  496.461371]  ? __pfx___register_sysctl_table+0x10/0x10
[  496.461396]  ? setup_userns_sysctls+0x51/0x190
[  496.461431]  ? __asan_memcpy+0x3d/0x60
[  496.461467]  setup_userns_sysctls+0xcb/0x190
[  496.461502]  create_user_ns+0x8f7/0xd30
[  496.461551]  copy_creds+0x497/0xa20
[  496.461592]  copy_process+0xf59/0x7410
[  496.461624]  ? __pfx_perf_trace_lock+0x10/0x10
[  496.461677]  ? __pfx_copy_process+0x10/0x10
[  496.461709]  ? __might_fault+0xe0/0x190
[  496.461751]  ? _copy_from_user+0x5b/0xd0
[  496.461785]  kernel_clone+0xea/0x7f0
[  496.461830]  ? get_pid_task+0xfd/0x250
[  496.461862]  ? __pfx_kernel_clone+0x10/0x10
[  496.461891]  ? perf_trace_lock+0xb5/0x5d0
[  496.461941]  ? find_held_lock+0x2b/0x80
[  496.461967]  ? ksys_write+0x121/0x240
[  496.461998]  ? lock_is_held_type+0x9e/0x120
[  496.462029]  __do_sys_clone3+0x1f5/0x280
[  496.462061]  ? __pfx___do_sys_clone3+0x10/0x10
[  496.462113]  ? __fget_files+0x20d/0x3b0
[  496.462150]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.462185]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.462221]  ? ksys_write+0x1a3/0x240
[  496.462251]  ? __pfx_ksys_write+0x10/0x10
[  496.462294]  do_syscall_64+0xbf/0x390
[  496.462326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.462352] RIP: 0033:0x7f2c107a1b19
[  496.462372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  496.462396] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  496.462421] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  496.462438] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  496.462454] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  496.462469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  496.462484] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  496.462520]  </TASK>
[  496.501456] sysctl could not get directory: /user -12
[  496.505775] FAULT_INJECTION: forcing a failure.
[  496.505775] name failslab, interval 1, probability 0, space 0, times 0
[  496.506782] CPU: 0 UID: 0 PID: 5983 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  496.506800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  496.506807] Call Trace:
[  496.506812]  <TASK>
[  496.506817]  dump_stack_lvl+0xfa/0x120
[  496.506838]  should_fail_ex+0x4d7/0x5e0
[  496.506855]  should_failslab+0xc2/0x120
[  496.506874]  __kmalloc_noprof+0xcd/0x680
[  496.506894]  ? __register_sysctl_table+0xd3e/0x16a0
[  496.506909]  ? lock_release+0xc8/0x290
[  496.506926]  ? __register_sysctl_table+0xd4f/0x16a0
[  496.506942]  __register_sysctl_table+0xd4f/0x16a0
[  496.506959]  ? __pfx___register_sysctl_table+0x10/0x10
[  496.506971]  ? setup_userns_sysctls+0x51/0x190
[  496.506989]  ? __asan_memcpy+0x3d/0x60
[  496.507006]  setup_userns_sysctls+0xcb/0x190
[  496.507023]  create_user_ns+0x8f7/0xd30
[  496.507047]  copy_creds+0x497/0xa20
[  496.507068]  copy_process+0xf59/0x7410
[  496.507084]  ? __pfx_perf_trace_lock+0x10/0x10
[  496.507110]  ? __pfx_copy_process+0x10/0x10
[  496.507126]  ? __might_fault+0xe0/0x190
[  496.507143]  ? _copy_from_user+0x5b/0xd0
[  496.507160]  kernel_clone+0xea/0x7f0
[  496.507174]  ? get_pid_task+0xfd/0x250
[  496.507190]  ? __pfx_kernel_clone+0x10/0x10
[  496.507204]  ? perf_trace_lock+0xb5/0x5d0
[  496.507225]  ? find_held_lock+0x2b/0x80
[  496.507238]  ? ksys_write+0x121/0x240
[  496.507255]  ? lock_is_held_type+0x9e/0x120
[  496.507272]  __do_sys_clone3+0x1f5/0x280
[  496.507287]  ? __pfx___do_sys_clone3+0x10/0x10
[  496.507312]  ? __fget_files+0x20d/0x3b0
[  496.507331]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.507348]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  496.507366]  ? ksys_write+0x1a3/0x240
[  496.507380]  ? __pfx_ksys_write+0x10/0x10
[  496.507406]  do_syscall_64+0xbf/0x390
[  496.507421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.507435] RIP: 0033:0x7f07b06bcb19
[  496.507445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  496.507457] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  496.507469] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  496.507477] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  496.507484] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  496.507492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  496.507499] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  496.507517]  </TASK>
[  496.507535] sysctl could not get directory: /user -12
15:40:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:50 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19)

15:40:50 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:50 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16)

15:40:50 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:40:50 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080))
rseq(0x0, 0x0, 0x0, 0x0)

15:40:50 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:40:50 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17)

[  507.377496] loop5: detected capacity change from 0 to 264192
[  507.397328] loop3: detected capacity change from 0 to 264192
[  507.401183] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:40:50 executing program 6:
syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

[  507.414167] FAULT_INJECTION: forcing a failure.
[  507.414167] name failslab, interval 1, probability 0, space 0, times 0
[  507.415149] CPU: 0 UID: 0 PID: 6008 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  507.415166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  507.415174] Call Trace:
[  507.415178]  <TASK>
[  507.415183]  dump_stack_lvl+0xfa/0x120
[  507.415203]  should_fail_ex+0x4d7/0x5e0
[  507.415219]  should_failslab+0xc2/0x120
[  507.415237]  __kmalloc_cache_noprof+0x81/0x6b0
[  507.415256]  ? __pfx_find_ucounts+0x10/0x10
[  507.415270]  ? create_user_ns+0xa9a/0xd30
[  507.415289]  ? alloc_ucounts+0x13e/0x450
[  507.415302]  ? find_held_lock+0x2b/0x80
[  507.415317]  ? alloc_ucounts+0x13e/0x450
[  507.415330]  alloc_ucounts+0x13e/0x450
[  507.415344]  ? __pfx_alloc_ucounts+0x10/0x10
[  507.415358]  ? create_user_ns+0x143/0xd30
[  507.415379]  copy_creds+0x56e/0xa20
[  507.415399]  copy_process+0xf59/0x7410
[  507.415414]  ? __pfx_perf_trace_lock+0x10/0x10
[  507.415439]  ? __pfx_copy_process+0x10/0x10
[  507.415453]  ? __might_fault+0xe0/0x190
[  507.415470]  ? _copy_from_user+0x5b/0xd0
[  507.415486]  kernel_clone+0xea/0x7f0
[  507.415499]  ? get_pid_task+0xfd/0x250
[  507.415514]  ? __pfx_kernel_clone+0x10/0x10
[  507.415527]  ? perf_trace_lock+0xb5/0x5d0
[  507.415547]  ? find_held_lock+0x2b/0x80
[  507.415559]  ? ksys_write+0x121/0x240
[  507.415574]  ? lock_is_held_type+0x9e/0x120
[  507.415590]  __do_sys_clone3+0x1f5/0x280
[  507.415604]  ? __pfx___do_sys_clone3+0x10/0x10
[  507.415628]  ? __fget_files+0x20d/0x3b0
[  507.415645]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  507.415662]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  507.415678]  ? ksys_write+0x1a3/0x240
[  507.415691]  ? __pfx_ksys_write+0x10/0x10
[  507.415715]  do_syscall_64+0xbf/0x390
[  507.415729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.415742] RIP: 0033:0x7f76c876ab19
[  507.415751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  507.415762] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  507.415774] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  507.415782] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  507.415789] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  507.415796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  507.415804] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  507.415821]  </TASK>
[  507.422358] EXT4-fs (loop5): get root inode failed
[  507.452801] EXT4-fs (loop5): mount failed
[  507.457513] FAULT_INJECTION: forcing a failure.
[  507.457513] name failslab, interval 1, probability 0, space 0, times 0
[  507.459726] CPU: 1 UID: 0 PID: 6010 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  507.459757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  507.459769] Call Trace:
[  507.459777]  <TASK>
[  507.459786]  dump_stack_lvl+0xfa/0x120
[  507.459816]  should_fail_ex+0x4d7/0x5e0
[  507.459845]  ? copy_fs_struct+0x49/0x350
[  507.459874]  should_failslab+0xc2/0x120
[  507.459904]  kmem_cache_alloc_noprof+0x80/0x690
[  507.459938]  ? __pfx_perf_event_init_task+0x10/0x10
[  507.459963]  ? audit_alloc+0xa3/0x780
[  507.459992]  ? copy_fs_struct+0x49/0x350
[  507.460019]  copy_fs_struct+0x49/0x350
[  507.460052]  copy_process+0x302c/0x7410
[  507.460079]  ? __pfx_perf_trace_lock+0x10/0x10
[  507.460125]  ? __pfx_copy_process+0x10/0x10
[  507.460151]  ? __might_fault+0xe0/0x190
[  507.460181]  ? _copy_from_user+0x5b/0xd0
[  507.460210]  kernel_clone+0xea/0x7f0
[  507.460235]  ? get_pid_task+0xfd/0x250
[  507.460262]  ? __pfx_kernel_clone+0x10/0x10
[  507.460285]  ? perf_trace_lock+0xb5/0x5d0
[  507.460323]  ? find_held_lock+0x2b/0x80
[  507.460345]  ? ksys_write+0x121/0x240
[  507.460370]  ? lock_is_held_type+0x9e/0x120
[  507.460398]  __do_sys_clone3+0x1f5/0x280
[  507.460424]  ? __pfx___do_sys_clone3+0x10/0x10
[  507.460468]  ? __fget_files+0x20d/0x3b0
[  507.460500]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  507.460529]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  507.460559]  ? ksys_write+0x1a3/0x240
[  507.460584]  ? __pfx_ksys_write+0x10/0x10
[  507.460620]  do_syscall_64+0xbf/0x390
[  507.460646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.460669] RIP: 0033:0x7f07b06bcb19
[  507.460686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  507.460706] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  507.460726] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  507.460741] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  507.460753] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  507.460766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  507.460778] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  507.460810]  </TASK>
[  507.500869] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0)
[  507.502221] EXT4-fs (loop3): group descriptors corrupted!
15:40:50 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17)

15:40:51 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:40:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:41:00 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18)

15:41:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:00 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:00 executing program 6:
syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

15:41:00 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:00 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20)

15:41:00 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:41:00 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18)

15:41:00 executing program 6:
syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1)

[  517.245123] loop3: detected capacity change from 0 to 4
[  517.252491] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
[  517.270698] loop5: detected capacity change from 0 to 264192
15:41:00 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:00 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, 0x0, 0x0)

[  517.310886] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  517.329963] EXT4-fs (loop5): get root inode failed
[  517.330813] EXT4-fs (loop5): mount failed
15:41:00 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19)

[  517.441113] FAULT_INJECTION: forcing a failure.
[  517.441113] name failslab, interval 1, probability 0, space 0, times 0
[  517.442183] CPU: 1 UID: 0 PID: 6058 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  517.442199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  517.442206] Call Trace:
[  517.442210]  <TASK>
[  517.442214]  dump_stack_lvl+0xfa/0x120
[  517.442233]  should_fail_ex+0x4d7/0x5e0
[  517.442248]  ? copy_fs_struct+0x49/0x350
[  517.442265]  should_failslab+0xc2/0x120
[  517.442282]  kmem_cache_alloc_noprof+0x80/0x690
[  517.442301]  ? __pfx_perf_event_init_task+0x10/0x10
[  517.442314]  ? audit_alloc+0xa3/0x780
[  517.442330]  ? copy_fs_struct+0x49/0x350
[  517.442345]  copy_fs_struct+0x49/0x350
[  517.442362]  copy_process+0x302c/0x7410
[  517.442377]  ? __pfx_perf_trace_lock+0x10/0x10
[  517.442402]  ? __pfx_copy_process+0x10/0x10
[  517.442416]  ? __might_fault+0xe0/0x190
[  517.442433]  ? _copy_from_user+0x5b/0xd0
[  517.442449]  kernel_clone+0xea/0x7f0
[  517.442462]  ? get_pid_task+0xfd/0x250
[  517.442477]  ? __pfx_kernel_clone+0x10/0x10
[  517.442490]  ? perf_trace_lock+0xb5/0x5d0
[  517.442510]  ? find_held_lock+0x2b/0x80
[  517.442522]  ? ksys_write+0x121/0x240
[  517.442537]  ? lock_is_held_type+0x9e/0x120
[  517.442553]  __do_sys_clone3+0x1f5/0x280
[  517.442567]  ? __pfx___do_sys_clone3+0x10/0x10
[  517.442590]  ? __fget_files+0x20d/0x3b0
[  517.442608]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.442624]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.442640]  ? ksys_write+0x1a3/0x240
[  517.442654]  ? __pfx_ksys_write+0x10/0x10
[  517.442673]  do_syscall_64+0xbf/0x390
[  517.442688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.442700] RIP: 0033:0x7f76c876ab19
[  517.442713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  517.442724] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  517.442736] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  517.442743] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  517.442750] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  517.442757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.442764] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  517.442781]  </TASK>
15:41:01 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, 0x0, 0x0)

15:41:01 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19)

15:41:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:01 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  517.614213] FAULT_INJECTION: forcing a failure.
[  517.614213] name failslab, interval 1, probability 0, space 0, times 0
15:41:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  517.616996] CPU: 1 UID: 0 PID: 6065 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  517.617037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  517.617056] Call Trace:
[  517.617069]  <TASK>
[  517.617080]  dump_stack_lvl+0xfa/0x120
[  517.617110]  should_fail_ex+0x4d7/0x5e0
[  517.617139]  ? copy_fs_struct+0x49/0x350
[  517.617170]  should_failslab+0xc2/0x120
[  517.617199]  kmem_cache_alloc_noprof+0x80/0x690
[  517.617235]  ? __pfx_perf_event_init_task+0x10/0x10
[  517.617262]  ? audit_alloc+0xa3/0x780
[  517.617291]  ? copy_fs_struct+0x49/0x350
[  517.617320]  copy_fs_struct+0x49/0x350
[  517.617354]  copy_process+0x302c/0x7410
[  517.617382]  ? __pfx_perf_trace_lock+0x10/0x10
[  517.617429]  ? __pfx_copy_process+0x10/0x10
[  517.617456]  ? __might_fault+0xe0/0x190
[  517.617485]  ? _copy_from_user+0x5b/0xd0
[  517.617515]  kernel_clone+0xea/0x7f0
[  517.617540]  ? get_pid_task+0xfd/0x250
[  517.617567]  ? __pfx_kernel_clone+0x10/0x10
[  517.617591]  ? perf_trace_lock+0xb5/0x5d0
[  517.617629]  ? find_held_lock+0x2b/0x80
[  517.617653]  ? ksys_write+0x121/0x240
[  517.617682]  ? lock_is_held_type+0x9e/0x120
[  517.617723]  __do_sys_clone3+0x1f5/0x280
[  517.617753]  ? __pfx___do_sys_clone3+0x10/0x10
[  517.617799]  ? __fget_files+0x20d/0x3b0
[  517.617833]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.617864]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.617899]  ? ksys_write+0x1a3/0x240
[  517.617925]  ? __pfx_ksys_write+0x10/0x10
[  517.617962]  do_syscall_64+0xbf/0x390
[  517.617989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.618016] RIP: 0033:0x7f2c107a1b19
[  517.618040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  517.618085] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  517.618108] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  517.618124] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  517.618136] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  517.618149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.618162] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  517.618193]  </TASK>
15:41:01 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20)

[  517.650564] loop3: detected capacity change from 0 to 4
[  517.661096] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
15:41:01 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21)

[  517.733211] loop5: detected capacity change from 0 to 264192
15:41:01 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, 0x0, 0x0)

[  517.780407] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  517.794354] EXT4-fs (loop5): get root inode failed
[  517.795794] EXT4-fs (loop5): mount failed
[  517.826858] FAULT_INJECTION: forcing a failure.
[  517.826858] name failslab, interval 1, probability 0, space 0, times 0
[  517.828476] CPU: 0 UID: 0 PID: 6075 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  517.828505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  517.828518] Call Trace:
[  517.828525]  <TASK>
[  517.828534]  dump_stack_lvl+0xfa/0x120
[  517.828563]  should_fail_ex+0x4d7/0x5e0
[  517.828591]  ? copy_process+0x5a54/0x7410
[  517.828617]  should_failslab+0xc2/0x120
[  517.828647]  kmem_cache_alloc_noprof+0x80/0x690
[  517.828683]  ? do_raw_spin_unlock+0x53/0x220
[  517.828710]  ? copy_process+0x5a54/0x7410
[  517.828741]  copy_process+0x5a54/0x7410
[  517.828772]  ? __pfx_perf_trace_lock+0x10/0x10
[  517.828817]  ? __pfx_copy_process+0x10/0x10
[  517.828844]  ? __might_fault+0xe0/0x190
[  517.828873]  ? _copy_from_user+0x5b/0xd0
[  517.828903]  kernel_clone+0xea/0x7f0
[  517.828927]  ? get_pid_task+0xfd/0x250
[  517.828954]  ? __pfx_kernel_clone+0x10/0x10
[  517.828978]  ? perf_trace_lock+0xb5/0x5d0
[  517.829015]  ? find_held_lock+0x2b/0x80
[  517.829037]  ? ksys_write+0x121/0x240
[  517.829064]  ? lock_is_held_type+0x9e/0x120
[  517.829091]  __do_sys_clone3+0x1f5/0x280
[  517.829117]  ? __pfx___do_sys_clone3+0x10/0x10
[  517.829161]  ? __fget_files+0x20d/0x3b0
[  517.829194]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.829223]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  517.829253]  ? ksys_write+0x1a3/0x240
[  517.829278]  ? __pfx_ksys_write+0x10/0x10
[  517.829314]  do_syscall_64+0xbf/0x390
[  517.829341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.829363] RIP: 0033:0x7f07b06bcb19
[  517.829380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  517.829400] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  517.829421] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  517.829436] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  517.829448] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  517.829461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.829473] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  517.829504]  </TASK>
15:41:13 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20)

15:41:13 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21)

15:41:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:13 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:13 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0), 0x0)

15:41:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:13 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22)

15:41:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000037c0), 0x1}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000003600)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff, @local}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r6=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000001000000200000000000000060000000000000005000000000000001f00000000000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d6470000000000b355b0c8000000007300"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
setregid(r8, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000002240)={0x11d4, 0x2b, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x113c, 0xa, 0x0, 0x1, [@generic="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", @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x8}, @generic="05e1a6a5d79e4a03885d699c319ff19f4e54aaea7454766ce94bc6f111523dab2a726e6d969170941d52d611f62d1b0ee08afe9fb332f2cc50fc9f6f72e5155a2d89", @generic="4b957ce009972784bdd42c7f814380336869c03a71e97c14fc84b18235bd96b67265000f16e77e59a32b9120b4f2ba8cbc665c4ca9ac6b5aa083761d6938a8bd91a971bf51c5be10efb79f4d46a77c45e67036c1107075accf1d6e3343f665637a5abcdb2a2b684bb7d24c1c4145cac1117af969ebb17ed03b056c1d5215b0def287dcc48a44e49cae8c7f572404444c56d394c6edcb46de2455899acdd20db4d30ea8334b2ad2bda6bb819a1c808f5efbb88f6553080de64c047f84e6d8455042302de8e489d417b1388edac344d415386d", @typed={0xe, 0x79, 0x0, 0x0, @str='&/-}-&\\/#\x00'}, @typed={0x4, 0xb}, @typed={0x4, 0x4f}]}, @generic="d83899dd57774b24722dcfaecaaa402bb74548a2c002dd1a00936c3837af9622dffd68917fa420d4496051ef201942008c9b17bd998542e7c5ccd560eead682f43d861ce17cb1bc3442528b32100c6b04e4ef50a6aee1a79033a75d201299c032293098c2d8fd7a1293b037703bd7000d3", @typed={0x8, 0x32, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x3e}]}, 0x11d4}, {&(0x7f0000003440)={0x58, 0x3e, 0x200, 0x70bd26, 0x25dfdbff, "", [@nested={0x45, 0x40, 0x0, 0x1, [@generic="4f2c82b64abb048c05b49b2da49bfebd765ac696999728550f2de4c9ac3e28533f8b0ede95", @typed={0x8, 0x1c, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x8000}]}]}, 0x58}, {&(0x7f00000034c0)={0x120, 0x28, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0xdb, 0x2c, 0x0, 0x0, @binary="40aad93656be5d67c0b4f51981d599d2a66606f3b51c578fdff965d8d63b42fbcabe7a946cf519be655eb1aaf13a7b0419acdd1817f1d6ca4f20918f35f6998b4891baf26476fca4526096bcf499efbababd58cf24b2eff6cac64deac90594a73c808c5838f7281f3218bfc79201a2d778bac3f9aa83cab2242f7670ba0d25f0f502009942f85ce155c5f2ef50b7d87142e825361a3d06b9c14e28fd7b5e1c1330cd2bc30f2b84dc510ec3f71aeb932d2b02f95b05174d14ff115c03c1fb39b0a3c6f7f2f56c10728e26bc0a796a3c1391a35a72dd0917"}, @generic="af7be2561e45cd8ea8d6611d047880e788d6", @typed={0x8, 0x82, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xa}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast1}]}, 0x120}], 0x3, &(0x7f0000003680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r8}}}], 0xe0, 0x80}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x3, "8cafe327a0fae7"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001240)={0x0, r9, "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", "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"})
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  530.136349] loop3: detected capacity change from 0 to 4
[  530.153311] FAULT_INJECTION: forcing a failure.
[  530.153311] name failslab, interval 1, probability 0, space 0, times 0
[  530.155053] CPU: 0 UID: 0 PID: 6104 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  530.155083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  530.155096] Call Trace:
[  530.155104]  <TASK>
[  530.155113]  dump_stack_lvl+0xfa/0x120
[  530.155143]  should_fail_ex+0x4d7/0x5e0
[  530.155172]  ? copy_process+0x5a54/0x7410
[  530.155198]  should_failslab+0xc2/0x120
[  530.155228]  kmem_cache_alloc_noprof+0x80/0x690
[  530.155265]  ? do_raw_spin_unlock+0x53/0x220
[  530.155293]  ? copy_process+0x5a54/0x7410
[  530.155319]  copy_process+0x5a54/0x7410
[  530.155345]  ? __pfx_perf_trace_lock+0x10/0x10
[  530.155392]  ? __pfx_copy_process+0x10/0x10
[  530.155419]  ? __might_fault+0xe0/0x190
[  530.155450]  ? _copy_from_user+0x5b/0xd0
[  530.155480]  kernel_clone+0xea/0x7f0
[  530.155506]  ? get_pid_task+0xfd/0x250
[  530.155534]  ? __pfx_kernel_clone+0x10/0x10
[  530.155558]  ? perf_trace_lock+0xb5/0x5d0
[  530.155597]  ? find_held_lock+0x2b/0x80
[  530.155620]  ? ksys_write+0x121/0x240
[  530.155647]  ? lock_is_held_type+0x9e/0x120
[  530.155675]  __do_sys_clone3+0x1f5/0x280
[  530.155702]  ? __pfx___do_sys_clone3+0x10/0x10
[  530.155755]  ? __fget_files+0x20d/0x3b0
15:41:13 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0), 0x0)

[  530.155788]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  530.155818]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  530.155849]  ? ksys_write+0x1a3/0x240
[  530.155875]  ? __pfx_ksys_write+0x10/0x10
[  530.155913]  do_syscall_64+0xbf/0x390
[  530.155941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.155964] RIP: 0033:0x7f76c876ab19
[  530.155981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  530.156002] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  530.156023] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  530.156038] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  530.156051] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  530.156064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  530.156077] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  530.156110]  </TASK>
[  530.159234] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (2 blocks)
[  530.167259] loop5: detected capacity change from 0 to 264192
15:41:13 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
close_range(r0, r2, 0x2)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r3, r4)
fsetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f00000000c0)='(\x00', 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)

15:41:13 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0), 0x0)

[  530.345211] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:41:13 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22)

15:41:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  530.361785] EXT4-fs (loop5): get root inode failed
[  530.362220] EXT4-fs (loop5): mount failed
[  530.414336] loop3: detected capacity change from 0 to 264192
[  530.429544] EXT4-fs (loop3): unsupported descriptor size 0
15:41:23 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23)

15:41:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:23 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23)

15:41:23 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:23 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

15:41:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r1 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x6, 0x20, 0x2, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb4, 0x3}, 0x0, 0x10001, 0x4365, 0x8, 0x10000, 0xe0, 0x4, 0x0, 0x3a8aad04, 0x0, 0x80000000}, r1, 0xf, 0xffffffffffffffff, 0x0)
r2 = fork()
ptrace(0x10, r2)
ptrace$poke(0x4, r2, &(0x7f0000000100), 0x1400000)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = dup2(r3, r4)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x5, 0xff, 0xd9, 0x3f, 0x0, 0x80000000, 0x8000, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x1f, 0x1}, 0x480, 0x2, 0x5e, 0x9, 0x91, 0x9, 0xffff, 0x0, 0x8, 0x0, 0xffffffffffff9748}, r2, 0x0, r3, 0xa)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/110})

15:41:23 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21)

15:41:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  540.247068] FAULT_INJECTION: forcing a failure.
[  540.247068] name failslab, interval 1, probability 0, space 0, times 0
[  540.248931] CPU: 0 UID: 0 PID: 6133 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  540.248961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  540.248973] Call Trace:
[  540.248980]  <TASK>
[  540.248988]  dump_stack_lvl+0xfa/0x120
[  540.249018]  should_fail_ex+0x4d7/0x5e0
[  540.249046]  ? create_new_namespaces+0x30/0xab0
[  540.249068]  should_failslab+0xc2/0x120
[  540.249098]  kmem_cache_alloc_noprof+0x80/0x690
[  540.249142]  ? create_new_namespaces+0x30/0xab0
[  540.249163]  create_new_namespaces+0x30/0xab0
[  540.249184]  ? security_capable+0x2f/0x90
[  540.249212]  copy_namespaces+0x45c/0x580
[  540.249237]  copy_process+0x26d4/0x7410
[  540.249264]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.249309]  ? __pfx_copy_process+0x10/0x10
[  540.249336]  ? __might_fault+0xe0/0x190
[  540.249365]  ? _copy_from_user+0x5b/0xd0
[  540.249395]  kernel_clone+0xea/0x7f0
[  540.249419]  ? get_pid_task+0xfd/0x250
[  540.249446]  ? __pfx_kernel_clone+0x10/0x10
[  540.249470]  ? perf_trace_lock+0xb5/0x5d0
[  540.249507]  ? find_held_lock+0x2b/0x80
[  540.249530]  ? ksys_write+0x121/0x240
[  540.249556]  ? lock_is_held_type+0x9e/0x120
[  540.249583]  __do_sys_clone3+0x1f5/0x280
[  540.249609]  ? __pfx___do_sys_clone3+0x10/0x10
[  540.249653]  ? __fget_files+0x20d/0x3b0
[  540.249686]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.249722]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.249752]  ? ksys_write+0x1a3/0x240
[  540.249777]  ? __pfx_ksys_write+0x10/0x10
[  540.249813]  do_syscall_64+0xbf/0x390
[  540.249839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.249862] RIP: 0033:0x7f07b06bcb19
[  540.249878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  540.249898] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.249919] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  540.249933] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  540.249946] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  540.249959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.249971] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  540.250003]  </TASK>
[  540.289495] FAULT_INJECTION: forcing a failure.
[  540.289495] name failslab, interval 1, probability 0, space 0, times 0
[  540.290510] CPU: 1 UID: 0 PID: 6138 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  540.290526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  540.290534] Call Trace:
[  540.290539]  <TASK>
[  540.290544]  dump_stack_lvl+0xfa/0x120
[  540.290563]  should_fail_ex+0x4d7/0x5e0
[  540.290579]  ? copy_process+0x5a54/0x7410
[  540.290594]  should_failslab+0xc2/0x120
[  540.290611]  kmem_cache_alloc_noprof+0x80/0x690
[  540.290632]  ? do_raw_spin_unlock+0x53/0x220
[  540.290647]  ? copy_process+0x5a54/0x7410
[  540.290660]  copy_process+0x5a54/0x7410
[  540.290674]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.290699]  ? __pfx_copy_process+0x10/0x10
[  540.290717]  ? __might_fault+0xe0/0x190
[  540.290734]  ? _copy_from_user+0x5b/0xd0
[  540.290750]  kernel_clone+0xea/0x7f0
[  540.290764]  ? get_pid_task+0xfd/0x250
[  540.290779]  ? __pfx_kernel_clone+0x10/0x10
[  540.290791]  ? perf_trace_lock+0xb5/0x5d0
[  540.290811]  ? find_held_lock+0x2b/0x80
[  540.290824]  ? ksys_write+0x121/0x240
[  540.290839]  ? lock_is_held_type+0x9e/0x120
[  540.290855]  __do_sys_clone3+0x1f5/0x280
[  540.290869]  ? __pfx___do_sys_clone3+0x10/0x10
[  540.290892]  ? __fget_files+0x20d/0x3b0
[  540.290910]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.290927]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.290943]  ? ksys_write+0x1a3/0x240
[  540.290956]  ? __pfx_ksys_write+0x10/0x10
[  540.290976]  do_syscall_64+0xbf/0x390
[  540.290991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.291003] RIP: 0033:0x7f2c107a1b19
[  540.291013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  540.291024] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.291036] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  540.291044] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  540.291051] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  540.291058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.291065] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  540.291082]  </TASK>
[  540.307190] loop3: detected capacity change from 0 to 264192
[  540.312689] loop5: detected capacity change from 0 to 264192
[  540.338857] EXT4-fs (loop3): unsupported descriptor size 0
15:41:23 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

[  540.355806] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:41:23 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22)

[  540.381570] EXT4-fs (loop5): get root inode failed
[  540.382466] EXT4-fs (loop5): mount failed
[  540.383416] FAULT_INJECTION: forcing a failure.
[  540.383416] name failslab, interval 1, probability 0, space 0, times 0
[  540.385066] CPU: 0 UID: 0 PID: 6152 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  540.385095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  540.385108] Call Trace:
[  540.385116]  <TASK>
[  540.385124]  dump_stack_lvl+0xfa/0x120
[  540.385155]  should_fail_ex+0x4d7/0x5e0
[  540.385183]  ? create_new_namespaces+0x30/0xab0
[  540.385206]  should_failslab+0xc2/0x120
[  540.385236]  kmem_cache_alloc_noprof+0x80/0x690
[  540.385281]  ? create_new_namespaces+0x30/0xab0
[  540.385302]  create_new_namespaces+0x30/0xab0
[  540.385324]  ? security_capable+0x2f/0x90
[  540.385353]  copy_namespaces+0x45c/0x580
[  540.385377]  copy_process+0x26d4/0x7410
[  540.385407]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.385453]  ? __pfx_copy_process+0x10/0x10
[  540.385480]  ? __might_fault+0xe0/0x190
[  540.385510]  ? _copy_from_user+0x5b/0xd0
[  540.385539]  kernel_clone+0xea/0x7f0
[  540.385564]  ? get_pid_task+0xfd/0x250
[  540.385591]  ? __pfx_kernel_clone+0x10/0x10
[  540.385615]  ? perf_trace_lock+0xb5/0x5d0
[  540.385653]  ? find_held_lock+0x2b/0x80
[  540.385676]  ? ksys_write+0x121/0x240
[  540.385703]  ? lock_is_held_type+0x9e/0x120
[  540.385738]  __do_sys_clone3+0x1f5/0x280
[  540.385764]  ? __pfx___do_sys_clone3+0x10/0x10
[  540.385808]  ? __fget_files+0x20d/0x3b0
[  540.385841]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.385871]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.385901]  ? ksys_write+0x1a3/0x240
[  540.385926]  ? __pfx_ksys_write+0x10/0x10
[  540.385962]  do_syscall_64+0xbf/0x390
[  540.385989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.386012] RIP: 0033:0x7f76c876ab19
[  540.386029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  540.386049] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.386070] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  540.386084] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  540.386097] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  540.386110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.386123] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  540.386154]  </TASK>
15:41:23 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x400000)
r1 = mq_open(&(0x7f00000000c0)=',)\'\',\x00', 0x2, 0x4, &(0x7f0000000100)={0x80000000, 0x800, 0x5, 0x24212dbe})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=<r6=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000001000000200000000000000060000000000000005000000000000001f00000000000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d6470000000000b355b0c8000000007300"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
setregid(r8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6, r8}}, './file0\x00'})
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:41:23 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24)

15:41:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:24 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24)

15:41:24 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:24 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1)

15:41:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00')
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x7, 0x6}}, 0x20, 0x1, 0x0)

15:41:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:24 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{}], 0x1)

15:41:24 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23)

[  540.636121] loop3: detected capacity change from 0 to 264192
[  540.648772] EXT4-fs (loop3): unsupported descriptor size 0
15:41:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  540.690964] loop5: detected capacity change from 0 to 264192
[  540.708073] FAULT_INJECTION: forcing a failure.
[  540.708073] name failslab, interval 1, probability 0, space 0, times 0
[  540.710075] CPU: 1 UID: 0 PID: 6180 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  540.710120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  540.710139] Call Trace:
[  540.710151]  <TASK>
[  540.710164]  dump_stack_lvl+0xfa/0x120
[  540.710207]  should_fail_ex+0x4d7/0x5e0
[  540.710253]  ? create_new_namespaces+0x30/0xab0
[  540.710288]  should_failslab+0xc2/0x120
[  540.710351]  kmem_cache_alloc_noprof+0x80/0x690
[  540.710421]  ? create_new_namespaces+0x30/0xab0
[  540.710454]  create_new_namespaces+0x30/0xab0
[  540.710490]  ? security_capable+0x2f/0x90
[  540.710535]  copy_namespaces+0x45c/0x580
[  540.710576]  copy_process+0x26d4/0x7410
[  540.710619]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.710697]  ? __pfx_copy_process+0x10/0x10
[  540.710751]  ? __might_fault+0xe0/0x190
[  540.710800]  ? _copy_from_user+0x5b/0xd0
[  540.710848]  kernel_clone+0xea/0x7f0
[  540.710888]  ? get_pid_task+0xfd/0x250
[  540.710933]  ? __pfx_kernel_clone+0x10/0x10
[  540.710972]  ? perf_trace_lock+0xb5/0x5d0
[  540.711036]  ? find_held_lock+0x2b/0x80
[  540.711072]  ? ksys_write+0x121/0x240
[  540.711114]  ? lock_is_held_type+0x9e/0x120
[  540.711159]  __do_sys_clone3+0x1f5/0x280
[  540.711205]  ? __pfx___do_sys_clone3+0x10/0x10
[  540.711283]  ? __fget_files+0x20d/0x3b0
[  540.711334]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.711378]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.711423]  ? ksys_write+0x1a3/0x240
[  540.711464]  ? __pfx_ksys_write+0x10/0x10
[  540.711523]  do_syscall_64+0xbf/0x390
[  540.711565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.711600] RIP: 0033:0x7f2c107a1b19
[  540.711625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  540.711656] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.711688] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  540.711708] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  540.711725] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  540.711746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.711765] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  540.711819]  </TASK>
[  540.756395] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  540.782048] EXT4-fs (loop5): get root inode failed
[  540.783919] EXT4-fs (loop5): mount failed
[  540.788693] FAULT_INJECTION: forcing a failure.
[  540.788693] name failslab, interval 1, probability 0, space 0, times 0
[  540.790914] CPU: 1 UID: 0 PID: 6186 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  540.790955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  540.790975] Call Trace:
[  540.790986]  <TASK>
[  540.790999]  dump_stack_lvl+0xfa/0x120
[  540.791039]  should_fail_ex+0x4d7/0x5e0
[  540.791082]  ? copy_utsname+0x161/0x420
[  540.791129]  should_failslab+0xc2/0x120
[  540.791171]  kmem_cache_alloc_noprof+0x80/0x690
[  540.791234]  ? copy_utsname+0x161/0x420
[  540.791279]  copy_utsname+0x161/0x420
[  540.791333]  create_new_namespaces+0x16e/0xab0
[  540.791384]  ? security_capable+0x2f/0x90
15:41:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:24 executing program 7:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:24 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25)

[  540.791445]  copy_namespaces+0x45c/0x580
[  540.791483]  copy_process+0x26d4/0x7410
[  540.791529]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.791603]  ? __pfx_copy_process+0x10/0x10
[  540.791642]  ? __might_fault+0xe0/0x190
[  540.791687]  ? _copy_from_user+0x5b/0xd0
[  540.791743]  kernel_clone+0xea/0x7f0
[  540.791784]  ? get_pid_task+0xfd/0x250
[  540.791826]  ? __pfx_kernel_clone+0x10/0x10
[  540.791866]  ? perf_trace_lock+0xb5/0x5d0
[  540.791928]  ? find_held_lock+0x2b/0x80
[  540.791968]  ? ksys_write+0x121/0x240
[  540.792013]  ? lock_is_held_type+0x9e/0x120
[  540.792054]  __do_sys_clone3+0x1f5/0x280
[  540.792091]  ? __pfx___do_sys_clone3+0x10/0x10
[  540.792153]  ? __fget_files+0x20d/0x3b0
[  540.792203]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.792248]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  540.792299]  ? ksys_write+0x1a3/0x240
[  540.792338]  ? __pfx_ksys_write+0x10/0x10
[  540.792408]  do_syscall_64+0xbf/0x390
[  540.792450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.792484] RIP: 0033:0x7f76c876ab19
[  540.792508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  540.792543] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.792571] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  540.792592] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  540.792615] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  540.792637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.792657] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  540.792702]  </TASK>
15:41:24 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{}], 0x1)

[  541.026446] loop3: detected capacity change from 0 to 264192
[  541.064423] EXT4-fs (loop3): unsupported descriptor size 0
15:41:36 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25)

15:41:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:36 executing program 7:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:36 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{}], 0x1)

15:41:36 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24)

15:41:36 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26)

15:41:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x3)
sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x7)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r2, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'batadv_slave_1\x00', @dev})

15:41:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  553.248867] loop3: detected capacity change from 0 to 264192
[  553.260254] loop5: detected capacity change from 0 to 264192
[  553.263171] EXT4-fs (loop3): unsupported descriptor size 0
[  553.275874] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  553.277099] EXT4-fs (loop5): get root inode failed
[  553.277519] EXT4-fs (loop5): mount failed
[  553.325230] FAULT_INJECTION: forcing a failure.
[  553.325230] name failslab, interval 1, probability 0, space 0, times 0
[  553.327265] CPU: 0 UID: 0 PID: 6221 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  553.327296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  553.327309] Call Trace:
[  553.327316]  <TASK>
[  553.327324]  dump_stack_lvl+0xfa/0x120
[  553.327353]  should_fail_ex+0x4d7/0x5e0
[  553.327380]  ? copy_utsname+0x161/0x420
[  553.327409]  should_failslab+0xc2/0x120
[  553.327438]  kmem_cache_alloc_noprof+0x80/0x690
[  553.327487]  ? copy_utsname+0x161/0x420
[  553.327514]  copy_utsname+0x161/0x420
[  553.327547]  create_new_namespaces+0x16e/0xab0
[  553.327570]  ? security_capable+0x2f/0x90
[  553.327598]  copy_namespaces+0x45c/0x580
[  553.327622]  copy_process+0x26d4/0x7410
[  553.327648]  ? __pfx_perf_trace_lock+0x10/0x10
[  553.327694]  ? __pfx_copy_process+0x10/0x10
[  553.327727]  ? __might_fault+0xe0/0x190
[  553.327761]  ? _copy_from_user+0x5b/0xd0
[  553.327790]  kernel_clone+0xea/0x7f0
[  553.327814]  ? get_pid_task+0xfd/0x250
[  553.327840]  ? __pfx_kernel_clone+0x10/0x10
[  553.327864]  ? perf_trace_lock+0xb5/0x5d0
[  553.327901]  ? find_held_lock+0x2b/0x80
[  553.327923]  ? ksys_write+0x121/0x240
[  553.327949]  ? lock_is_held_type+0x9e/0x120
[  553.327975]  __do_sys_clone3+0x1f5/0x280
[  553.328001]  ? __pfx___do_sys_clone3+0x10/0x10
[  553.328045]  ? __fget_files+0x20d/0x3b0
[  553.328076]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  553.328105]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  553.328134]  ? ksys_write+0x1a3/0x240
[  553.328159]  ? __pfx_ksys_write+0x10/0x10
[  553.328195]  do_syscall_64+0xbf/0x390
[  553.328222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.328244] RIP: 0033:0x7f07b06bcb19
[  553.328260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  553.328280] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  553.328301] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  553.328315] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  553.328328] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  553.328341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  553.328353] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  553.328384]  </TASK>
[  553.347538] loop3: detected capacity change from 0 to 264192
15:41:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  553.387282] EXT4-fs (loop3): unsupported descriptor size 0
15:41:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:36 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26)

[  553.466111] loop5: detected capacity change from 0 to 264192
[  553.471632] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  553.473094] EXT4-fs (loop5): get root inode failed
[  553.473517] EXT4-fs (loop5): mount failed
15:41:36 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb3", 0xf}], 0x1)

15:41:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)='\x00\x00\b\x00'/29, 0x1d, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  553.655618] loop5: detected capacity change from 0 to 264192
[  553.718041] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  553.729132] EXT4-fs (loop5): get root inode failed
[  553.732477] EXT4-fs (loop5): mount failed
15:41:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:45 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25)

15:41:45 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb3", 0xf}], 0x1)

15:41:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:45 executing program 2:
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
socketpair(0x5, 0x8000c, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00'})
r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x8001}, 0x15e67f5bc2ab8dd, 0x9, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0xde, 0x0, 0xfffffffffdfffffe}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140))
rseq(0x0, 0x0, 0x1, 0x0)
lseek(r2, 0x3, 0x3)
uname(&(0x7f0000000080)=""/132)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)

15:41:45 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27)

15:41:45 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27)

15:41:45 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  562.419434] loop5: detected capacity change from 0 to 264192
[  562.420291] loop3: detected capacity change from 0 to 264192
[  562.425642] EXT4-fs (loop3): unsupported descriptor size 0
[  562.430536] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  562.438043] EXT4-fs (loop5): get root inode failed
[  562.438614] EXT4-fs (loop5): mount failed
[  562.468619] FAULT_INJECTION: forcing a failure.
[  562.468619] name failslab, interval 1, probability 0, space 0, times 0
[  562.469562] CPU: 1 UID: 0 PID: 6269 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  562.469578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  562.469585] Call Trace:
[  562.469589]  <TASK>
[  562.469594]  dump_stack_lvl+0xfa/0x120
[  562.469613]  should_fail_ex+0x4d7/0x5e0
[  562.469629]  ? copy_utsname+0x161/0x420
[  562.469646]  should_failslab+0xc2/0x120
[  562.469662]  kmem_cache_alloc_noprof+0x80/0x690
[  562.469686]  ? copy_utsname+0x161/0x420
[  562.469700]  copy_utsname+0x161/0x420
[  562.469723]  create_new_namespaces+0x16e/0xab0
[  562.469739]  ? security_capable+0x2f/0x90
[  562.469755]  copy_namespaces+0x45c/0x580
[  562.469768]  copy_process+0x26d4/0x7410
[  562.469783]  ? __pfx_perf_trace_lock+0x10/0x10
[  562.469809]  ? __pfx_copy_process+0x10/0x10
[  562.469823]  ? __might_fault+0xe0/0x190
[  562.469839]  ? _copy_from_user+0x5b/0xd0
[  562.469855]  kernel_clone+0xea/0x7f0
[  562.469868]  ? get_pid_task+0xfd/0x250
[  562.469883]  ? __pfx_kernel_clone+0x10/0x10
[  562.469896]  ? perf_trace_lock+0xb5/0x5d0
[  562.469916]  ? find_held_lock+0x2b/0x80
[  562.469927]  ? ksys_write+0x121/0x240
[  562.469942]  ? lock_is_held_type+0x9e/0x120
[  562.469957]  __do_sys_clone3+0x1f5/0x280
[  562.469972]  ? __pfx___do_sys_clone3+0x10/0x10
[  562.469995]  ? __fget_files+0x20d/0x3b0
[  562.470012]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.470029]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.470045]  ? ksys_write+0x1a3/0x240
[  562.470058]  ? __pfx_ksys_write+0x10/0x10
[  562.470077]  do_syscall_64+0xbf/0x390
[  562.470091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.470104] RIP: 0033:0x7f2c107a1b19
[  562.470113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  562.470124] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  562.470136] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  562.470143] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  562.470150] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  562.470157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  562.470163] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  562.470180]  </TASK>
15:41:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  562.502473] FAULT_INJECTION: forcing a failure.
[  562.502473] name failslab, interval 1, probability 0, space 0, times 0
[  562.503523] CPU: 1 UID: 0 PID: 6274 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  562.503538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  562.503544] Call Trace:
[  562.503548]  <TASK>
[  562.503552]  dump_stack_lvl+0xfa/0x120
[  562.503567]  should_fail_ex+0x4d7/0x5e0
[  562.503581]  ? copy_pid_ns+0x2d8/0xc50
[  562.503592]  should_failslab+0xc2/0x120
[  562.503607]  kmem_cache_alloc_noprof+0x80/0x690
[  562.503630]  ? copy_pid_ns+0x2d8/0xc50
[  562.503640]  copy_pid_ns+0x2d8/0xc50
[  562.503651]  ? copy_utsname+0x2f1/0x420
[  562.503667]  ? __pfx_copy_pid_ns+0x10/0x10
[  562.503678]  ? find_held_lock+0x2b/0x80
[  562.503690]  ? copy_utsname+0x2f1/0x420
[  562.503710]  ? lock_release+0xc8/0x290
[  562.503726]  ? do_raw_spin_unlock+0x53/0x220
[  562.503739]  ? copy_ipcs+0xb7/0x5b0
[  562.503761]  create_new_namespaces+0x2b2/0xab0
[  562.503778]  copy_namespaces+0x45c/0x580
[  562.503791]  copy_process+0x26d4/0x7410
[  562.503804]  ? __pfx_perf_trace_lock+0x10/0x10
[  562.503828]  ? __pfx_copy_process+0x10/0x10
[  562.503842]  ? __might_fault+0xe0/0x190
[  562.503858]  ? _copy_from_user+0x5b/0xd0
[  562.503873]  kernel_clone+0xea/0x7f0
[  562.503886]  ? get_pid_task+0xfd/0x250
[  562.503900]  ? __pfx_kernel_clone+0x10/0x10
[  562.503913]  ? perf_trace_lock+0xb5/0x5d0
[  562.503933]  ? find_held_lock+0x2b/0x80
[  562.503944]  ? ksys_write+0x121/0x240
[  562.503958]  ? lock_is_held_type+0x9e/0x120
[  562.503972]  __do_sys_clone3+0x1f5/0x280
[  562.503986]  ? __pfx___do_sys_clone3+0x10/0x10
[  562.504009]  ? __fget_files+0x20d/0x3b0
[  562.504026]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.504041]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.504058]  ? ksys_write+0x1a3/0x240
[  562.504071]  ? __pfx_ksys_write+0x10/0x10
[  562.504090]  do_syscall_64+0xbf/0x390
[  562.504104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.504116] RIP: 0033:0x7f76c876ab19
[  562.504124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  562.504135] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  562.504146] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  562.504154] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  562.504161] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  562.504168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  562.504174] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  562.504191]  </TASK>
[  562.547157] FAULT_INJECTION: forcing a failure.
[  562.547157] name failslab, interval 1, probability 0, space 0, times 0
[  562.548234] CPU: 1 UID: 0 PID: 6273 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  562.548250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  562.548256] Call Trace:
[  562.548260]  <TASK>
[  562.548264]  dump_stack_lvl+0xfa/0x120
[  562.548280]  should_fail_ex+0x4d7/0x5e0
[  562.548295]  ? copy_pid_ns+0x2d8/0xc50
[  562.548306]  should_failslab+0xc2/0x120
[  562.548322]  kmem_cache_alloc_noprof+0x80/0x690
[  562.548345]  ? copy_pid_ns+0x2d8/0xc50
[  562.548355]  copy_pid_ns+0x2d8/0xc50
[  562.548366]  ? copy_utsname+0x2f1/0x420
[  562.548382]  ? __pfx_copy_pid_ns+0x10/0x10
[  562.548393]  ? find_held_lock+0x2b/0x80
[  562.548405]  ? copy_utsname+0x2f1/0x420
[  562.548420]  ? lock_release+0xc8/0x290
[  562.548436]  ? do_raw_spin_unlock+0x53/0x220
[  562.548449]  ? copy_ipcs+0xb7/0x5b0
[  562.548468]  create_new_namespaces+0x2b2/0xab0
[  562.548485]  copy_namespaces+0x45c/0x580
[  562.548498]  copy_process+0x26d4/0x7410
[  562.548512]  ? __pfx_perf_trace_lock+0x10/0x10
[  562.548535]  ? __pfx_copy_process+0x10/0x10
[  562.548549]  ? __might_fault+0xe0/0x190
[  562.548565]  ? _copy_from_user+0x5b/0xd0
[  562.548580]  kernel_clone+0xea/0x7f0
[  562.548593]  ? get_pid_task+0xfd/0x250
[  562.548608]  ? __pfx_kernel_clone+0x10/0x10
[  562.548620]  ? perf_trace_lock+0xb5/0x5d0
[  562.548640]  ? find_held_lock+0x2b/0x80
[  562.548652]  ? ksys_write+0x121/0x240
[  562.548666]  ? lock_is_held_type+0x9e/0x120
[  562.548680]  __do_sys_clone3+0x1f5/0x280
[  562.548694]  ? __pfx___do_sys_clone3+0x10/0x10
[  562.548722]  ? __fget_files+0x20d/0x3b0
[  562.548739]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.548755]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  562.548771]  ? ksys_write+0x1a3/0x240
[  562.548784]  ? __pfx_ksys_write+0x10/0x10
[  562.548804]  do_syscall_64+0xbf/0x390
[  562.548818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.548829] RIP: 0033:0x7f07b06bcb19
[  562.548838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  562.548849] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  562.548860] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  562.548868] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  562.548875] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  562.548882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  562.548888] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  562.548905]  </TASK>
15:41:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:46 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28)

15:41:46 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  562.668860] loop3: detected capacity change from 0 to 264192
15:41:46 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26)

15:41:46 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb3", 0xf}], 0x1)

15:41:46 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28)

[  562.702459] EXT4-fs (loop3): unsupported descriptor size 0
[  562.713346] loop5: detected capacity change from 0 to 264192
[  562.731997] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  562.736011] EXT4-fs (loop5): get root inode failed
[  562.736427] EXT4-fs (loop5): mount failed
15:41:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006f", 0x10, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:41:56 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
fchdir(r0)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r1, r2)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000100)={&(0x7f0000000080)=""/77, 0x4d, 0x0, 0x10001})

15:41:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29)

15:41:56 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27)

15:41:56 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7aba", 0x17}], 0x1)

15:41:56 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:41:56 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29)

15:41:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150", 0x2b, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  572.711276] FAULT_INJECTION: forcing a failure.
[  572.711276] name failslab, interval 1, probability 0, space 0, times 0
[  572.712241] CPU: 0 UID: 0 PID: 6316 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  572.712258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  572.712265] Call Trace:
[  572.712269]  <TASK>
[  572.712274]  dump_stack_lvl+0xfa/0x120
[  572.712293]  should_fail_ex+0x4d7/0x5e0
[  572.712308]  ? copy_pid_ns+0x2d8/0xc50
[  572.712320]  should_failslab+0xc2/0x120
[  572.712337]  kmem_cache_alloc_noprof+0x80/0x690
[  572.712362]  ? copy_pid_ns+0x2d8/0xc50
[  572.712372]  copy_pid_ns+0x2d8/0xc50
[  572.712384]  ? copy_utsname+0x2f1/0x420
[  572.712400]  ? __pfx_copy_pid_ns+0x10/0x10
[  572.712411]  ? find_held_lock+0x2b/0x80
[  572.712425]  ? copy_utsname+0x2f1/0x420
[  572.712440]  ? lock_release+0xc8/0x290
[  572.712457]  ? do_raw_spin_unlock+0x53/0x220
[  572.712470]  ? copy_ipcs+0xb7/0x5b0
[  572.712490]  create_new_namespaces+0x2b2/0xab0
[  572.712507]  copy_namespaces+0x45c/0x580
[  572.712520]  copy_process+0x26d4/0x7410
[  572.712535]  ? __pfx_perf_trace_lock+0x10/0x10
[  572.712560]  ? __pfx_copy_process+0x10/0x10
[  572.712574]  ? __might_fault+0xe0/0x190
[  572.712590]  ? _copy_from_user+0x5b/0xd0
[  572.712607]  kernel_clone+0xea/0x7f0
[  572.712620]  ? get_pid_task+0xfd/0x250
[  572.712635]  ? __pfx_kernel_clone+0x10/0x10
[  572.712647]  ? perf_trace_lock+0xb5/0x5d0
[  572.712667]  ? find_held_lock+0x2b/0x80
[  572.712679]  ? ksys_write+0x121/0x240
[  572.712694]  ? lock_is_held_type+0x9e/0x120
[  572.712714]  __do_sys_clone3+0x1f5/0x280
[  572.712728]  ? __pfx___do_sys_clone3+0x10/0x10
[  572.712751]  ? __fget_files+0x20d/0x3b0
[  572.712769]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.712786]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.712802]  ? ksys_write+0x1a3/0x240
[  572.712815]  ? __pfx_ksys_write+0x10/0x10
[  572.712834]  do_syscall_64+0xbf/0x390
[  572.712849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.712861] RIP: 0033:0x7f2c107a1b19
[  572.712870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.712882] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  572.712893] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  572.712901] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  572.712907] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  572.712914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  572.712921] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  572.712938]  </TASK>
[  572.732104] FAULT_INJECTION: forcing a failure.
[  572.732104] name failslab, interval 1, probability 0, space 0, times 0
[  572.732992] CPU: 0 UID: 0 PID: 6315 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  572.733007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  572.733013] Call Trace:
[  572.733016]  <TASK>
[  572.733021]  dump_stack_lvl+0xfa/0x120
[  572.733034]  should_fail_ex+0x4d7/0x5e0
[  572.733047]  should_failslab+0xc2/0x120
[  572.733062]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  572.733082]  ? register_pidns_sysctls+0x4b/0x1c0
[  572.733101]  kmemdup_noprof+0x2b/0x60
[  572.733118]  register_pidns_sysctls+0x4b/0x1c0
[  572.733133]  ? __ns_common_init+0x19a/0x220
[  572.733147]  copy_pid_ns+0x526/0xc50
[  572.733160]  ? __pfx_copy_pid_ns+0x10/0x10
[  572.733171]  ? find_held_lock+0x2b/0x80
[  572.733183]  ? copy_utsname+0x2f1/0x420
[  572.733198]  ? lock_release+0xc8/0x290
[  572.733214]  ? do_raw_spin_unlock+0x53/0x220
[  572.733227]  ? copy_ipcs+0xb7/0x5b0
[  572.733245]  create_new_namespaces+0x2b2/0xab0
[  572.733261]  copy_namespaces+0x45c/0x580
[  572.733274]  copy_process+0x26d4/0x7410
[  572.733288]  ? __pfx_perf_trace_lock+0x10/0x10
[  572.733312]  ? __pfx_copy_process+0x10/0x10
[  572.733326]  ? __might_fault+0xe0/0x190
[  572.733341]  ? _copy_from_user+0x5b/0xd0
[  572.733357]  kernel_clone+0xea/0x7f0
[  572.733370]  ? get_pid_task+0xfd/0x250
[  572.733384]  ? __pfx_kernel_clone+0x10/0x10
[  572.733397]  ? perf_trace_lock+0xb5/0x5d0
[  572.733417]  ? find_held_lock+0x2b/0x80
[  572.733429]  ? ksys_write+0x121/0x240
[  572.733442]  ? lock_is_held_type+0x9e/0x120
[  572.733456]  __do_sys_clone3+0x1f5/0x280
[  572.733470]  ? __pfx___do_sys_clone3+0x10/0x10
[  572.733494]  ? __fget_files+0x20d/0x3b0
[  572.733511]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.733526]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.733542]  ? ksys_write+0x1a3/0x240
[  572.733555]  ? __pfx_ksys_write+0x10/0x10
[  572.733575]  do_syscall_64+0xbf/0x390
[  572.733589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.733600] RIP: 0033:0x7f76c876ab19
[  572.733609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.733620] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  572.733631] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  572.733639] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  572.733645] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  572.733653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  572.733659] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  572.733676]  </TASK>
[  572.755930] loop3: detected capacity change from 0 to 264192
[  572.757681] FAULT_INJECTION: forcing a failure.
[  572.757681] name failslab, interval 1, probability 0, space 0, times 0
[  572.759542] CPU: 1 UID: 0 PID: 6319 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  572.759573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  572.759585] Call Trace:
[  572.759593]  <TASK>
[  572.759602]  dump_stack_lvl+0xfa/0x120
[  572.759633]  should_fail_ex+0x4d7/0x5e0
[  572.759663]  should_failslab+0xc2/0x120
[  572.759696]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  572.759733]  ? register_pidns_sysctls+0x4b/0x1c0
[  572.759773]  kmemdup_noprof+0x2b/0x60
[  572.759805]  register_pidns_sysctls+0x4b/0x1c0
[  572.759832]  ? __ns_common_init+0x19a/0x220
[  572.759859]  copy_pid_ns+0x526/0xc50
[  572.759886]  ? __pfx_copy_pid_ns+0x10/0x10
[  572.759906]  ? find_held_lock+0x2b/0x80
[  572.759930]  ? copy_utsname+0x2f1/0x420
[  572.759959]  ? lock_release+0xc8/0x290
[  572.759990]  ? do_raw_spin_unlock+0x53/0x220
[  572.760014]  ? copy_ipcs+0xb7/0x5b0
[  572.760051]  create_new_namespaces+0x2b2/0xab0
[  572.760084]  copy_namespaces+0x45c/0x580
[  572.760109]  copy_process+0x26d4/0x7410
[  572.760136]  ? __pfx_perf_trace_lock+0x10/0x10
[  572.760184]  ? __pfx_copy_process+0x10/0x10
[  572.760212]  ? __might_fault+0xe0/0x190
[  572.760242]  ? _copy_from_user+0x5b/0xd0
[  572.760273]  kernel_clone+0xea/0x7f0
[  572.760299]  ? get_pid_task+0xfd/0x250
[  572.760325]  ? __pfx_kernel_clone+0x10/0x10
[  572.760349]  ? perf_trace_lock+0xb5/0x5d0
[  572.760389]  ? find_held_lock+0x2b/0x80
[  572.760411]  ? ksys_write+0x121/0x240
[  572.760438]  ? lock_is_held_type+0x9e/0x120
[  572.760466]  __do_sys_clone3+0x1f5/0x280
[  572.760494]  ? __pfx___do_sys_clone3+0x10/0x10
[  572.760542]  ? __fget_files+0x20d/0x3b0
[  572.760576]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.760605]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  572.760635]  ? ksys_write+0x1a3/0x240
[  572.760660]  ? xfd_validate_state+0x55/0x180
[  572.760691]  ? __pfx_ksys_write+0x10/0x10
[  572.760730]  do_syscall_64+0xbf/0x390
[  572.760758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.760779] RIP: 0033:0x7f07b06bcb19
[  572.760797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.760816] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  572.760837] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  572.760852] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  572.760864] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  572.760877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  572.760889] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  572.760924]  </TASK>
15:41:56 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28)

[  572.818792] EXT4-fs (loop3): unsupported descriptor size 0
15:41:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30)

[  572.822704] loop5: detected capacity change from 0 to 264192
15:41:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006f", 0x10, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  572.894793] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
15:41:56 executing program 2:
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2001, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x12)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x105081, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)=0x1)
dup(r0)
rseq(0x0, 0x0, 0x0, 0x0)

[  572.924126] EXT4-fs (loop5): get root inode failed
[  572.925272] EXT4-fs (loop5): mount failed
[  572.999582] loop3: detected capacity change from 0 to 264192
[  573.018666] EXT4-fs (loop3): unsupported descriptor size 0
15:42:05 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31)

15:42:05 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006f", 0x10, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:05 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7aba", 0x17}], 0x1)

15:42:05 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29)

15:42:05 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30)

15:42:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:05 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @local}, 0x209, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000100)='bond0\x00', 0x4, 0x8, 0x20})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400, 0x130, 0x4}, 0x18)
fcntl$dupfd(r0, 0x0, r1)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

[  582.221421] loop5: detected capacity change from 0 to 264192
[  582.248288] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  582.250562] FAULT_INJECTION: forcing a failure.
[  582.250562] name failslab, interval 1, probability 0, space 0, times 0
[  582.250583] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  582.250598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  582.250605] Call Trace:
[  582.250609]  <TASK>
[  582.250613]  dump_stack_lvl+0xfa/0x120
[  582.250632]  should_fail_ex+0x4d7/0x5e0
[  582.250649]  should_failslab+0xc2/0x120
[  582.250665]  __kmalloc_noprof+0xcd/0x680
[  582.250683]  ? __create_object+0x59/0x80
[  582.250702]  ? __register_sysctl_table+0xb5/0x16a0
[  582.250724]  __register_sysctl_table+0xb5/0x16a0
[  582.250735]  ? kasan_save_track+0x14/0x30
[  582.250751]  ? __kasan_kmalloc+0x7f/0x90
[  582.250768]  ? __pfx___register_sysctl_table+0x10/0x10
[  582.250790]  ? register_pidns_sysctls+0x4b/0x1c0
[  582.250808]  ? __asan_memcpy+0x3d/0x60
[  582.250824]  register_pidns_sysctls+0x119/0x1c0
[  582.250839]  ? __ns_common_init+0x19a/0x220
[  582.250854]  copy_pid_ns+0x526/0xc50
[  582.250868]  ? __pfx_copy_pid_ns+0x10/0x10
[  582.250879]  ? find_held_lock+0x2b/0x80
[  582.250893]  ? copy_utsname+0x2f1/0x420
[  582.250909]  ? lock_release+0xc8/0x290
[  582.250925]  ? do_raw_spin_unlock+0x53/0x220
[  582.250937]  ? copy_ipcs+0xb7/0x5b0
[  582.250957]  create_new_namespaces+0x2b2/0xab0
[  582.250973]  copy_namespaces+0x45c/0x580
[  582.250986]  copy_process+0x26d4/0x7410
[  582.251000]  ? __pfx_perf_trace_lock+0x10/0x10
[  582.251024]  ? __pfx_copy_process+0x10/0x10
[  582.251038]  ? __might_fault+0xe0/0x190
[  582.251054]  ? _copy_from_user+0x5b/0xd0
[  582.251070]  kernel_clone+0xea/0x7f0
[  582.251083]  ? get_pid_task+0xfd/0x250
[  582.251097]  ? __pfx_kernel_clone+0x10/0x10
[  582.251110]  ? perf_trace_lock+0xb5/0x5d0
[  582.251130]  ? find_held_lock+0x2b/0x80
[  582.251142]  ? ksys_write+0x121/0x240
[  582.251156]  ? lock_is_held_type+0x9e/0x120
[  582.251171]  __do_sys_clone3+0x1f5/0x280
15:42:05 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32)

[  582.251185]  ? __pfx___do_sys_clone3+0x10/0x10
[  582.251208]  ? __fget_files+0x20d/0x3b0
[  582.251226]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.251242]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.251258]  ? ksys_write+0x1a3/0x240
[  582.251271]  ? __pfx_ksys_write+0x10/0x10
[  582.251291]  do_syscall_64+0xbf/0x390
[  582.251305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.251317] RIP: 0033:0x7f76c876ab19
[  582.251327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  582.251338] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  582.251349] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  582.251357] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  582.251364] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  582.251371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  582.251377] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  582.251394]  </TASK>
[  582.294101] loop3: detected capacity change from 0 to 264192
[  582.295026] EXT4-fs (loop5): get root inode failed
[  582.295049] EXT4-fs (loop5): mount failed
[  582.297538] FAULT_INJECTION: forcing a failure.
[  582.297538] name failslab, interval 1, probability 0, space 0, times 0
[  582.303027] CPU: 0 UID: 0 PID: 6365 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  582.303061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  582.303074] Call Trace:
[  582.303081]  <TASK>
[  582.303090]  dump_stack_lvl+0xfa/0x120
[  582.303122]  should_fail_ex+0x4d7/0x5e0
[  582.303154]  should_failslab+0xc2/0x120
[  582.303185]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  582.303216]  ? register_pidns_sysctls+0x4b/0x1c0
[  582.303258]  kmemdup_noprof+0x2b/0x60
[  582.303294]  register_pidns_sysctls+0x4b/0x1c0
[  582.303335]  ? __ns_common_init+0x19a/0x220
[  582.303374]  copy_pid_ns+0x526/0xc50
[  582.303402]  ? __pfx_copy_pid_ns+0x10/0x10
[  582.303424]  ? find_held_lock+0x2b/0x80
[  582.303449]  ? copy_utsname+0x2f1/0x420
[  582.303480]  ? lock_release+0xc8/0x290
[  582.303513]  ? do_raw_spin_unlock+0x53/0x220
[  582.303539]  ? copy_ipcs+0xb7/0x5b0
[  582.303578]  create_new_namespaces+0x2b2/0xab0
15:42:05 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31)

[  582.303613]  copy_namespaces+0x45c/0x580
[  582.303640]  copy_process+0x26d4/0x7410
[  582.303668]  ? __pfx_perf_trace_lock+0x10/0x10
[  582.303726]  ? __pfx_copy_process+0x10/0x10
15:42:05 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  582.303755]  ? __might_fault+0xe0/0x190
[  582.303788]  ? _copy_from_user+0x5b/0xd0
[  582.303820]  kernel_clone+0xea/0x7f0
[  582.303846]  ? get_pid_task+0xfd/0x250
[  582.303875]  ? __pfx_kernel_clone+0x10/0x10
[  582.303900]  ? perf_trace_lock+0xb5/0x5d0
[  582.303942]  ? find_held_lock+0x2b/0x80
[  582.303966]  ? ksys_write+0x121/0x240
[  582.303994]  ? lock_is_held_type+0x9e/0x120
[  582.304024]  __do_sys_clone3+0x1f5/0x280
[  582.304052]  ? __pfx___do_sys_clone3+0x10/0x10
[  582.304103]  ? __fget_files+0x20d/0x3b0
[  582.304139]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.304170]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.304202]  ? ksys_write+0x1a3/0x240
[  582.304229]  ? __pfx_ksys_write+0x10/0x10
[  582.304271]  do_syscall_64+0xbf/0x390
[  582.304299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.304323] RIP: 0033:0x7f2c107a1b19
[  582.304341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:42:05 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff)
rseq(0x0, 0x0, 0x0, 0x0)

15:42:05 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30)

15:42:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392", 0x18, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  582.304362] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  582.304384] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  582.304399] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  582.304413] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  582.304427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  582.304440] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  582.304477]  </TASK>
[  582.326962] EXT4-fs (loop3): unsupported descriptor size 0
[  582.458323] FAULT_INJECTION: forcing a failure.
[  582.458323] name failslab, interval 1, probability 0, space 0, times 0
[  582.458365] CPU: 0 UID: 0 PID: 6373 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  582.458395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  582.458408] Call Trace:
[  582.458415]  <TASK>
[  582.458424]  dump_stack_lvl+0xfa/0x120
[  582.458454]  should_fail_ex+0x4d7/0x5e0
[  582.458485]  should_failslab+0xc2/0x120
[  582.458516]  __kmalloc_noprof+0xcd/0x680
[  582.458549]  ? __create_object+0x59/0x80
[  582.458585]  ? __register_sysctl_table+0xb5/0x16a0
[  582.458617]  __register_sysctl_table+0xb5/0x16a0
[  582.458638]  ? kasan_save_track+0x14/0x30
[  582.458668]  ? __kasan_kmalloc+0x7f/0x90
[  582.458703]  ? __pfx___register_sysctl_table+0x10/0x10
[  582.458733]  ? register_pidns_sysctls+0x4b/0x1c0
[  582.458769]  ? __asan_memcpy+0x3d/0x60
[  582.458812]  register_pidns_sysctls+0x119/0x1c0
[  582.458841]  ? __ns_common_init+0x19a/0x220
[  582.458868]  copy_pid_ns+0x526/0xc50
[  582.458895]  ? __pfx_copy_pid_ns+0x10/0x10
[  582.458917]  ? find_held_lock+0x2b/0x80
[  582.458941]  ? copy_utsname+0x2f1/0x420
[  582.458971]  ? lock_release+0xc8/0x290
[  582.459003]  ? do_raw_spin_unlock+0x53/0x220
[  582.459028]  ? copy_ipcs+0xb7/0x5b0
[  582.459065]  create_new_namespaces+0x2b2/0xab0
[  582.459097]  copy_namespaces+0x45c/0x580
[  582.459123]  copy_process+0x26d4/0x7410
[  582.459151]  ? __pfx_perf_trace_lock+0x10/0x10
[  582.459201]  ? __pfx_copy_process+0x10/0x10
[  582.459242]  ? __might_fault+0xe0/0x190
[  582.459281]  ? _copy_from_user+0x5b/0xd0
[  582.459323]  kernel_clone+0xea/0x7f0
[  582.459349]  ? get_pid_task+0xfd/0x250
[  582.459376]  ? __pfx_kernel_clone+0x10/0x10
[  582.459402]  ? perf_trace_lock+0xb5/0x5d0
[  582.459442]  ? find_held_lock+0x2b/0x80
[  582.459465]  ? ksys_write+0x121/0x240
[  582.459492]  ? lock_is_held_type+0x9e/0x120
[  582.459521]  __do_sys_clone3+0x1f5/0x280
[  582.459551]  ? __pfx___do_sys_clone3+0x10/0x10
[  582.459598]  ? __fget_files+0x20d/0x3b0
[  582.459631]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.459662]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  582.459694]  ? ksys_write+0x1a3/0x240
[  582.459721]  ? __pfx_ksys_write+0x10/0x10
[  582.459759]  do_syscall_64+0xbf/0x390
[  582.459787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.459810] RIP: 0033:0x7f07b06bcb19
[  582.459828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  582.459849] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  582.459872] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  582.459887] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  582.459901] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  582.459914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  582.459928] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  582.459961]  </TASK>
[  582.551045] loop3: detected capacity change from 0 to 264192
[  582.613217] EXT4-fs (loop3): unsupported descriptor size 0
15:42:14 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32)

15:42:14 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31)

15:42:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392", 0x18, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:14 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33)

15:42:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38", 0x32, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:14 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:14 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7aba", 0x17}], 0x1)

15:42:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0xfffff7fffffffffd, 0x0)

[  590.582171] FAULT_INJECTION: forcing a failure.
[  590.582171] name failslab, interval 1, probability 0, space 0, times 0
[  590.583243] CPU: 1 UID: 0 PID: 6398 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  590.583259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  590.583266] Call Trace:
[  590.583270]  <TASK>
[  590.583275]  dump_stack_lvl+0xfa/0x120
[  590.583294]  should_fail_ex+0x4d7/0x5e0
[  590.583310]  should_failslab+0xc2/0x120
[  590.583327]  __kmalloc_noprof+0xcd/0x680
[  590.583344]  ? __register_sysctl_table+0xd3e/0x16a0
[  590.583357]  ? lock_release+0xc8/0x290
[  590.583373]  ? __register_sysctl_table+0xd4f/0x16a0
[  590.583388]  __register_sysctl_table+0xd4f/0x16a0
[  590.583404]  ? __pfx___register_sysctl_table+0x10/0x10
[  590.583415]  ? register_pidns_sysctls+0x4b/0x1c0
[  590.583433]  ? __asan_memcpy+0x3d/0x60
[  590.583449]  register_pidns_sysctls+0x119/0x1c0
[  590.583464]  ? __ns_common_init+0x19a/0x220
[  590.583479]  copy_pid_ns+0x526/0xc50
[  590.583493]  ? __pfx_copy_pid_ns+0x10/0x10
[  590.583504]  ? find_held_lock+0x2b/0x80
[  590.583515]  ? copy_utsname+0x2f1/0x420
[  590.583531]  ? lock_release+0xc8/0x290
[  590.583547]  ? do_raw_spin_unlock+0x53/0x220
[  590.583560]  ? copy_ipcs+0xb7/0x5b0
[  590.583579]  create_new_namespaces+0x2b2/0xab0
[  590.583595]  copy_namespaces+0x45c/0x580
[  590.583608]  copy_process+0x26d4/0x7410
[  590.583623]  ? __pfx_perf_trace_lock+0x10/0x10
[  590.583647]  ? __pfx_copy_process+0x10/0x10
[  590.583661]  ? __might_fault+0xe0/0x190
[  590.583677]  ? _copy_from_user+0x5b/0xd0
[  590.583693]  kernel_clone+0xea/0x7f0
[  590.583706]  ? get_pid_task+0xfd/0x250
[  590.583725]  ? __pfx_kernel_clone+0x10/0x10
[  590.583738]  ? perf_trace_lock+0xb5/0x5d0
[  590.583758]  ? find_held_lock+0x2b/0x80
[  590.583769]  ? ksys_write+0x121/0x240
[  590.583784]  ? lock_is_held_type+0x9e/0x120
[  590.583799]  __do_sys_clone3+0x1f5/0x280
[  590.583813]  ? __pfx___do_sys_clone3+0x10/0x10
[  590.583837]  ? __fget_files+0x20d/0x3b0
[  590.583854]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.583871]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.583887]  ? ksys_write+0x1a3/0x240
[  590.583901]  ? __pfx_ksys_write+0x10/0x10
[  590.583920]  do_syscall_64+0xbf/0x390
[  590.583934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.583947] RIP: 0033:0x7f76c876ab19
[  590.583956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  590.583967] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  590.583979] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  590.583987] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  590.583994] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  590.584000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  590.584007] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  590.584024]  </TASK>
[  590.606941] sysctl could not get directory: /kernel -12
[  590.623568] loop5: detected capacity change from 0 to 264192
[  590.629550] loop3: detected capacity change from 0 to 264192
[  590.634877] EXT4-fs (loop3): unsupported descriptor size 0
[  590.649622] FAULT_INJECTION: forcing a failure.
[  590.649622] name failslab, interval 1, probability 0, space 0, times 0
[  590.651383] CPU: 0 UID: 0 PID: 6407 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  590.651413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  590.651426] Call Trace:
[  590.651433]  <TASK>
[  590.651442]  dump_stack_lvl+0xfa/0x120
[  590.651472]  should_fail_ex+0x4d7/0x5e0
[  590.651502]  should_failslab+0xc2/0x120
[  590.651533]  __kmalloc_noprof+0xcd/0x680
[  590.651565]  ? __create_object+0x59/0x80
[  590.651601]  ? __register_sysctl_table+0xb5/0x16a0
[  590.651630]  __register_sysctl_table+0xb5/0x16a0
[  590.651651]  ? kasan_save_track+0x14/0x30
[  590.651679]  ? __kasan_kmalloc+0x7f/0x90
[  590.651719]  ? __pfx___register_sysctl_table+0x10/0x10
[  590.651740]  ? register_pidns_sysctls+0x4b/0x1c0
[  590.651774]  ? __asan_memcpy+0x3d/0x60
[  590.651809]  register_pidns_sysctls+0x119/0x1c0
[  590.651836]  ? __ns_common_init+0x19a/0x220
[  590.651864]  copy_pid_ns+0x526/0xc50
[  590.651890]  ? __pfx_copy_pid_ns+0x10/0x10
[  590.651910]  ? find_held_lock+0x2b/0x80
[  590.651935]  ? copy_utsname+0x2f1/0x420
[  590.651965]  ? lock_release+0xc8/0x290
[  590.651995]  ? do_raw_spin_unlock+0x53/0x220
[  590.652019]  ? copy_ipcs+0xb7/0x5b0
[  590.652055]  create_new_namespaces+0x2b2/0xab0
[  590.652085]  copy_namespaces+0x45c/0x580
[  590.652109]  copy_process+0x26d4/0x7410
[  590.652137]  ? __pfx_perf_trace_lock+0x10/0x10
[  590.652182]  ? __pfx_copy_process+0x10/0x10
[  590.652208]  ? __might_fault+0xe0/0x190
[  590.652238]  ? _copy_from_user+0x5b/0xd0
[  590.652268]  kernel_clone+0xea/0x7f0
[  590.652292]  ? get_pid_task+0xfd/0x250
[  590.652318]  ? __pfx_kernel_clone+0x10/0x10
[  590.652342]  ? perf_trace_lock+0xb5/0x5d0
[  590.652379]  ? find_held_lock+0x2b/0x80
[  590.652401]  ? ksys_write+0x121/0x240
[  590.652428]  ? lock_is_held_type+0x9e/0x120
[  590.652456]  __do_sys_clone3+0x1f5/0x280
[  590.652481]  ? __pfx___do_sys_clone3+0x10/0x10
[  590.652525]  ? __fget_files+0x20d/0x3b0
[  590.652558]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.652588]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.652617]  ? ksys_write+0x1a3/0x240
[  590.652642]  ? __pfx_ksys_write+0x10/0x10
[  590.652678]  do_syscall_64+0xbf/0x390
[  590.652705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.652727] RIP: 0033:0x7f2c107a1b19
[  590.652744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  590.652764] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  590.652785] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  590.652799] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  590.652813] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  590.652826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  590.652839] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  590.652870]  </TASK>
[  590.705215] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  590.706698] EXT4-fs (loop5): get root inode failed
[  590.707151] EXT4-fs (loop5): mount failed
[  590.709483] FAULT_INJECTION: forcing a failure.
[  590.709483] name failslab, interval 1, probability 0, space 0, times 0
[  590.710443] CPU: 1 UID: 0 PID: 6411 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  590.710460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  590.710467] Call Trace:
[  590.710471]  <TASK>
[  590.710475]  dump_stack_lvl+0xfa/0x120
[  590.710494]  should_fail_ex+0x4d7/0x5e0
[  590.710511]  should_failslab+0xc2/0x120
[  590.710528]  __kmalloc_noprof+0xcd/0x680
[  590.710546]  ? __register_sysctl_table+0xd3e/0x16a0
[  590.710559]  ? lock_release+0xc8/0x290
[  590.710575]  ? __register_sysctl_table+0xd4f/0x16a0
[  590.710590]  __register_sysctl_table+0xd4f/0x16a0
[  590.710606]  ? __pfx___register_sysctl_table+0x10/0x10
[  590.710617]  ? register_pidns_sysctls+0x4b/0x1c0
[  590.710636]  ? __asan_memcpy+0x3d/0x60
[  590.710652]  register_pidns_sysctls+0x119/0x1c0
[  590.710666]  ? __ns_common_init+0x19a/0x220
[  590.710681]  copy_pid_ns+0x526/0xc50
[  590.710695]  ? __pfx_copy_pid_ns+0x10/0x10
[  590.710710]  ? find_held_lock+0x2b/0x80
[  590.710722]  ? copy_utsname+0x2f1/0x420
[  590.710738]  ? lock_release+0xc8/0x290
[  590.710755]  ? do_raw_spin_unlock+0x53/0x220
[  590.710767]  ? copy_ipcs+0xb7/0x5b0
[  590.710787]  create_new_namespaces+0x2b2/0xab0
[  590.710803]  copy_namespaces+0x45c/0x580
[  590.710816]  copy_process+0x26d4/0x7410
[  590.710831]  ? __pfx_perf_trace_lock+0x10/0x10
[  590.710855]  ? __pfx_copy_process+0x10/0x10
[  590.710878]  ? __might_fault+0xe0/0x190
[  590.710894]  ? _copy_from_user+0x5b/0xd0
[  590.710911]  kernel_clone+0xea/0x7f0
[  590.710924]  ? get_pid_task+0xfd/0x250
[  590.710938]  ? __pfx_kernel_clone+0x10/0x10
[  590.710951]  ? perf_trace_lock+0xb5/0x5d0
[  590.710971]  ? find_held_lock+0x2b/0x80
[  590.710982]  ? ksys_write+0x121/0x240
[  590.710997]  ? lock_is_held_type+0x9e/0x120
[  590.711012]  __do_sys_clone3+0x1f5/0x280
[  590.711026]  ? __pfx___do_sys_clone3+0x10/0x10
[  590.711050]  ? __fget_files+0x20d/0x3b0
[  590.711067]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.711083]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.711099]  ? ksys_write+0x1a3/0x240
[  590.711113]  ? __pfx_ksys_write+0x10/0x10
[  590.711132]  do_syscall_64+0xbf/0x390
[  590.711147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.711159] RIP: 0033:0x7f07b06bcb19
[  590.711168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  590.711179] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  590.711191] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  590.711198] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  590.711205] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  590.711212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  590.711219] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  590.711235]  </TASK>
[  590.733252] sysctl could not get directory: /kernel -12
15:42:14 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33)

15:42:14 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b", 0x1b}], 0x1)

15:42:14 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
write$P9_RGETLOCK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f0000003701000017366911b8a4dc0bb06900000000000000200400000000", @ANYRES32, @ANYBLOB="010024"], 0x1f)
r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000240)=""/212)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1000)
rseq(0x0, 0x0, 0x0, 0x0)

15:42:14 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34)

15:42:14 executing program 7:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392", 0x18, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:14 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34)

15:42:14 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32)

15:42:14 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b", 0x1b}], 0x1)

[  590.856175] loop3: detected capacity change from 0 to 264192
15:42:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  590.881614] EXT4-fs (loop3): unsupported descriptor size 0
[  590.896057] FAULT_INJECTION: forcing a failure.
[  590.896057] name failslab, interval 1, probability 0, space 0, times 0
[  590.897041] CPU: 1 UID: 0 PID: 6428 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  590.897057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  590.897065] Call Trace:
[  590.897070]  <TASK>
[  590.897074]  dump_stack_lvl+0xfa/0x120
[  590.897093]  should_fail_ex+0x4d7/0x5e0
[  590.897114]  should_failslab+0xc2/0x120
[  590.897130]  __kmalloc_node_track_caller_noprof+0xc6/0x690
[  590.897146]  ? register_pidns_sysctls+0x4b/0x1c0
[  590.897167]  kmemdup_noprof+0x2b/0x60
[  590.897185]  register_pidns_sysctls+0x4b/0x1c0
[  590.897200]  ? __ns_common_init+0x19a/0x220
[  590.897215]  copy_pid_ns+0x526/0xc50
[  590.897229]  ? __pfx_copy_pid_ns+0x10/0x10
[  590.897242]  ? find_held_lock+0x2b/0x80
[  590.897255]  ? copy_utsname+0x2f1/0x420
[  590.897273]  ? lock_release+0xc8/0x290
[  590.897292]  ? do_raw_spin_unlock+0x53/0x220
[  590.897305]  ? copy_ipcs+0xb7/0x5b0
[  590.897325]  create_new_namespaces+0x2b2/0xab0
[  590.897342]  copy_namespaces+0x45c/0x580
[  590.897355]  copy_process+0x26d4/0x7410
[  590.897371]  ? __pfx_perf_trace_lock+0x10/0x10
[  590.897398]  ? __pfx_copy_process+0x10/0x10
[  590.897413]  ? __might_fault+0xe0/0x190
[  590.897432]  ? _copy_from_user+0x5b/0xd0
[  590.897450]  kernel_clone+0xea/0x7f0
[  590.897463]  ? get_pid_task+0xfd/0x250
[  590.897478]  ? __pfx_kernel_clone+0x10/0x10
[  590.897493]  ? perf_trace_lock+0xb5/0x5d0
[  590.897515]  ? find_held_lock+0x2b/0x80
[  590.897527]  ? ksys_write+0x121/0x240
[  590.897541]  ? lock_is_held_type+0x9e/0x120
[  590.897557]  __do_sys_clone3+0x1f5/0x280
[  590.897571]  ? __pfx___do_sys_clone3+0x10/0x10
[  590.897594]  ? __fget_files+0x20d/0x3b0
[  590.897612]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.897628]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  590.897644]  ? ksys_write+0x1a3/0x240
[  590.897657]  ? __pfx_ksys_write+0x10/0x10
[  590.897678]  do_syscall_64+0xbf/0x390
[  590.897695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.897708] RIP: 0033:0x7f2c107a1b19
[  590.897717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  590.897730] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  590.897742] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  590.897749] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  590.897756] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  590.897763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  590.897770] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  590.897787]  </TASK>
[  590.922980] loop5: detected capacity change from 0 to 264192
[  590.938805] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  590.964090] EXT4-fs (loop5): get root inode failed
[  590.964503] EXT4-fs (loop5): mount failed
15:42:25 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35)

15:42:25 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33)

15:42:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)

15:42:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7", 0x1c, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:25 executing program 7:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:25 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35)

15:42:25 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b", 0x1b}], 0x1)

15:42:25 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  602.123490] FAULT_INJECTION: forcing a failure.
[  602.123490] name failslab, interval 1, probability 0, space 0, times 0
[  602.124546] CPU: 1 UID: 0 PID: 6452 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  602.124562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  602.124570] Call Trace:
[  602.124574]  <TASK>
[  602.124578]  dump_stack_lvl+0xfa/0x120
[  602.124599]  should_fail_ex+0x4d7/0x5e0
[  602.124617]  should_failslab+0xc2/0x120
[  602.124634]  __kmalloc_cache_noprof+0x81/0x6b0
[  602.124652]  ? find_held_lock+0x2b/0x80
[  602.124666]  ? copy_cgroup_ns+0x1dd/0x6c0
[  602.124678]  ? copy_cgroup_ns+0x212/0x6c0
[  602.124693]  ? copy_cgroup_ns+0x212/0x6c0
[  602.124705]  copy_cgroup_ns+0x212/0x6c0
[  602.124723]  create_new_namespaces+0x354/0xab0
[  602.124741]  copy_namespaces+0x45c/0x580
[  602.124754]  copy_process+0x26d4/0x7410
[  602.124769]  ? __pfx_perf_trace_lock+0x10/0x10
[  602.124793]  ? __pfx_copy_process+0x10/0x10
[  602.124807]  ? __might_fault+0xe0/0x190
[  602.124824]  ? _copy_from_user+0x5b/0xd0
[  602.124840]  kernel_clone+0xea/0x7f0
[  602.124853]  ? get_pid_task+0xfd/0x250
[  602.124868]  ? __pfx_kernel_clone+0x10/0x10
[  602.124881]  ? perf_trace_lock+0xb5/0x5d0
[  602.124901]  ? find_held_lock+0x2b/0x80
[  602.124912]  ? ksys_write+0x121/0x240
[  602.124927]  ? lock_is_held_type+0x9e/0x120
[  602.124942]  __do_sys_clone3+0x1f5/0x280
[  602.124956]  ? __pfx___do_sys_clone3+0x10/0x10
[  602.124980]  ? __fget_files+0x20d/0x3b0
[  602.124997]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  602.125013]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  602.125029]  ? ksys_write+0x1a3/0x240
[  602.125042]  ? __pfx_ksys_write+0x10/0x10
[  602.125062]  do_syscall_64+0xbf/0x390
[  602.125076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.125088] RIP: 0033:0x7f76c876ab19
[  602.125098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  602.125109] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  602.125120] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  602.125128] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  602.125135] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  602.125142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  602.125148] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  602.125165]  </TASK>
[  602.170535] loop3: detected capacity change from 0 to 264192
15:42:25 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b3107", 0x1d}], 0x1)

[  602.195519] loop5: detected capacity change from 0 to 264192
[  602.198253] FAULT_INJECTION: forcing a failure.
[  602.198253] name failslab, interval 1, probability 0, space 0, times 0
[  602.199205] CPU: 1 UID: 0 PID: 6462 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  602.199221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  602.199228] Call Trace:
[  602.199232]  <TASK>
[  602.199237]  dump_stack_lvl+0xfa/0x120
[  602.199256]  should_fail_ex+0x4d7/0x5e0
[  602.199272]  should_failslab+0xc2/0x120
[  602.199289]  __kmalloc_noprof+0xcd/0x680
[  602.199307]  ? __register_sysctl_table+0xd3e/0x16a0
[  602.199320]  ? lock_release+0xc8/0x290
[  602.199337]  ? __register_sysctl_table+0xd4f/0x16a0
[  602.199351]  __register_sysctl_table+0xd4f/0x16a0
[  602.199367]  ? __pfx___register_sysctl_table+0x10/0x10
[  602.199378]  ? register_pidns_sysctls+0x4b/0x1c0
[  602.199397]  ? __asan_memcpy+0x3d/0x60
[  602.199412]  register_pidns_sysctls+0x119/0x1c0
[  602.199427]  ? __ns_common_init+0x19a/0x220
[  602.199441]  copy_pid_ns+0x526/0xc50
[  602.199455]  ? __pfx_copy_pid_ns+0x10/0x10
[  602.199466]  ? find_held_lock+0x2b/0x80
[  602.199478]  ? copy_utsname+0x2f1/0x420
[  602.199494]  ? lock_release+0xc8/0x290
[  602.199510]  ? do_raw_spin_unlock+0x53/0x220
[  602.199522]  ? copy_ipcs+0xb7/0x5b0
[  602.199542]  create_new_namespaces+0x2b2/0xab0
[  602.199558]  copy_namespaces+0x45c/0x580
[  602.199571]  copy_process+0x26d4/0x7410
[  602.199585]  ? __pfx_perf_trace_lock+0x10/0x10
[  602.199610]  ? __pfx_copy_process+0x10/0x10
[  602.199624]  ? __might_fault+0xe0/0x190
[  602.199641]  ? _copy_from_user+0x5b/0xd0
[  602.199657]  kernel_clone+0xea/0x7f0
[  602.199670]  ? get_pid_task+0xfd/0x250
[  602.199684]  ? __pfx_kernel_clone+0x10/0x10
[  602.199696]  ? perf_trace_lock+0xb5/0x5d0
[  602.199721]  ? find_held_lock+0x2b/0x80
[  602.199732]  ? ksys_write+0x121/0x240
[  602.199746]  ? lock_is_held_type+0x9e/0x120
[  602.199761]  __do_sys_clone3+0x1f5/0x280
[  602.199775]  ? __pfx___do_sys_clone3+0x10/0x10
[  602.199799]  ? __fget_files+0x20d/0x3b0
[  602.199817]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  602.199833]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  602.199849]  ? ksys_write+0x1a3/0x240
[  602.199862]  ? __pfx_ksys_write+0x10/0x10
[  602.199881]  do_syscall_64+0xbf/0x390
[  602.199896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.199908] RIP: 0033:0x7f2c107a1b19
[  602.199917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  602.199928] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  602.199940] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  602.199948] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  602.199955] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  602.199962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  602.199968] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  602.199985]  </TASK>
[  602.221385] sysctl could not get directory: /kernel -12
[  602.223746] EXT4-fs (loop3): unsupported descriptor size 0
[  602.252771] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  602.261985] EXT4-fs (loop5): get root inode failed
[  602.262804] EXT4-fs (loop5): mount failed
15:42:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x800)
rseq(0x0, 0x0, 0x0, 0x0)

15:42:25 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36)

15:42:25 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36)

15:42:36 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37)

15:42:36 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37)

15:42:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd69839", 0x36, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:36 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34)

15:42:36 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b3107", 0x1d}], 0x1)

15:42:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7", 0x1c, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:36 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00)
uname(&(0x7f0000000140)=""/212)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000}, 0x0, 0x0, r0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r4=>0x0)
uname(&(0x7f0000000380)=""/4096)
r5 = dup(r2)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x1, 0x7, 0x6c, 0xff, 0x0, 0xffffffffffffff01, 0x100, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x2, 0x200000000, 0x2, 0x5, 0x4, 0x4d, 0x80, 0x0, 0x6adb}, r4, 0x9, r5, 0x2)
dup2(r2, r3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
rseq(0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x4, 0x80, 0xa, 0x20, 0x0, 0x9, 0x44502, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x1100, 0x164800000, 0xa32, 0x5, 0x60, 0x7b35, 0x944, 0x0, 0x7d80300a, 0x0, 0xa18}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3)
dup2(r6, r7)
syncfs(r6)

15:42:36 executing program 7:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  612.833071] FAULT_INJECTION: forcing a failure.
[  612.833071] name failslab, interval 1, probability 0, space 0, times 0
[  612.834582] CPU: 1 UID: 0 PID: 6587 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  612.834608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  612.834619] Call Trace:
[  612.834626]  <TASK>
[  612.834634]  dump_stack_lvl+0xfa/0x120
[  612.834660]  should_fail_ex+0x4d7/0x5e0
[  612.834685]  should_failslab+0xc2/0x120
[  612.834717]  __kmalloc_noprof+0xcd/0x680
[  612.834747]  ? lock_release+0xc8/0x290
[  612.834772]  ? copy_net_ns+0xdb/0x690
[  612.834798]  copy_net_ns+0xdb/0x690
[  612.834820]  create_new_namespaces+0x3f6/0xab0
[  612.834848]  copy_namespaces+0x45c/0x580
[  612.834869]  copy_process+0x26d4/0x7410
[  612.834893]  ? __pfx_perf_trace_lock+0x10/0x10
[  612.834932]  ? __pfx_copy_process+0x10/0x10
[  612.834955]  ? __might_fault+0xe0/0x190
[  612.834981]  ? _copy_from_user+0x5b/0xd0
[  612.835007]  kernel_clone+0xea/0x7f0
[  612.835028]  ? get_pid_task+0xfd/0x250
[  612.835051]  ? __pfx_kernel_clone+0x10/0x10
[  612.835072]  ? perf_trace_lock+0xb5/0x5d0
[  612.835105]  ? find_held_lock+0x2b/0x80
[  612.835137]  ? ksys_write+0x121/0x240
[  612.835160]  ? lock_is_held_type+0x9e/0x120
[  612.835184]  __do_sys_clone3+0x1f5/0x280
[  612.835207]  ? __pfx___do_sys_clone3+0x10/0x10
[  612.835245]  ? __fget_files+0x20d/0x3b0
[  612.835273]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  612.835299]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  612.835325]  ? ksys_write+0x1a3/0x240
[  612.835347]  ? __pfx_ksys_write+0x10/0x10
[  612.835379]  do_syscall_64+0xbf/0x390
[  612.835401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.835421] RIP: 0033:0x7f07b06bcb19
[  612.835436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  612.835454] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  612.835472] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  612.835485] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  612.835496] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  612.835507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.835518] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  612.835545]  </TASK>
[  612.891263] loop5: detected capacity change from 0 to 264192
[  612.927153] loop3: detected capacity change from 0 to 264192
[  612.930125] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  612.942292] EXT4-fs (loop5): get root inode failed
[  612.943080] EXT4-fs (loop5): mount failed
[  612.946543] FAULT_INJECTION: forcing a failure.
[  612.946543] name failslab, interval 1, probability 0, space 0, times 0
[  612.948313] CPU: 0 UID: 0 PID: 6601 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  612.948343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  612.948355] Call Trace:
[  612.948363]  <TASK>
[  612.948371]  dump_stack_lvl+0xfa/0x120
[  612.948401]  should_fail_ex+0x4d7/0x5e0
[  612.948429]  should_failslab+0xc2/0x120
[  612.948458]  __kmalloc_noprof+0xcd/0x680
[  612.948493]  ? lock_release+0xc8/0x290
[  612.948522]  ? copy_net_ns+0xdb/0x690
[  612.948550]  copy_net_ns+0xdb/0x690
[  612.948575]  create_new_namespaces+0x3f6/0xab0
[  612.948606]  copy_namespaces+0x45c/0x580
[  612.948630]  copy_process+0x26d4/0x7410
[  612.948657]  ? __pfx_perf_trace_lock+0x10/0x10
[  612.948703]  ? __pfx_copy_process+0x10/0x10
[  612.948737]  ? __might_fault+0xe0/0x190
[  612.948766]  ? _copy_from_user+0x5b/0xd0
[  612.948795]  kernel_clone+0xea/0x7f0
[  612.948819]  ? get_pid_task+0xfd/0x250
[  612.948847]  ? __pfx_kernel_clone+0x10/0x10
[  612.948872]  ? perf_trace_lock+0xb5/0x5d0
[  612.948910]  ? find_held_lock+0x2b/0x80
[  612.948934]  ? ksys_write+0x121/0x240
[  612.948962]  ? lock_is_held_type+0x9e/0x120
[  612.948991]  __do_sys_clone3+0x1f5/0x280
[  612.949022]  ? __pfx___do_sys_clone3+0x10/0x10
[  612.949067]  ? __fget_files+0x20d/0x3b0
[  612.949099]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  612.949129]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  612.949161]  ? ksys_write+0x1a3/0x240
[  612.949186]  ? __pfx_ksys_write+0x10/0x10
[  612.949223]  do_syscall_64+0xbf/0x390
[  612.949251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.949274] RIP: 0033:0x7f76c876ab19
[  612.949293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  612.949314] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  612.949336] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  612.949352] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  612.949366] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  612.949379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.949392] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  612.949425]  </TASK>
[  613.008596] EXT4-fs (loop3): unsupported descriptor size 0
15:42:36 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38)

15:42:36 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35)

15:42:36 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b3107", 0x1d}], 0x1)

15:42:36 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x40040)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000240)=""/225, 0xe1})
pwrite64(r1, &(0x7f0000000540)="253c18771a6ccd36d4cbd426c705b3508f0b781be3d7fe453006ce28b13860e16033b809e961ba4f14041b4c869d26d75e072634d3f7dd0b50340be2b0c2d3f94db2c72daf3d292d40f2de0affd86a0dfd493a92768b0f8d348807639d83b516e154cbf94bccb7c14aa15502a2bf01970c6a104b2c226923257b3f887ba3e5e8ac2f0381003a90c46b13991426b0f38b386d016f078f14aaff4308b734531e02978ad31c83b842208e0bfc56b94c3392e9ced74d546b0db4a22375acb5b99e7f7c088836374ac8cf4bb0d9c9ebb6e3ed4e012f85b4843e0b5074640ef1223a76b5d938d77409864ce39626a8caa77f46c0830708893673896e7d3bd76663ee6bf26c0c0b8cfa991d3e75fc3740ea94d95d56c78a82fdbd599fc41d11052761d883f2e689676446dac6a34371c8aac43e6e466590d706b4c26f92c8ceec8e46806ecda1923828beb1c3c9d526270fb6267dee6496f475f5a87138c95f1bd9fca6609f6a7d38bba6bab69976c81c779727f0dfb74488cfab67e92fc04048c4b510b73a108d02e2277fda04c30e2f8ed42804d65e2952", 0x195, 0x3)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3086, 0x5}, 0x0, 0x100, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x0)
dup2(r2, r3)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = creat(&(0x7f0000000440)='./file0\x00', 0x100)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r6, r7)
io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0xc, 0x1, r2, &(0x7f0000000340)="af7553102c9521408376ce9779033c02e274ca639b987332c7b5885433bca906bc7f2c259a15b679b954b843d896ebfc485eaa339c0396caaeaba825c157a03069a10a840ff2e9a789014894b8b6ca2f748bdbfc3a578d0d8883", 0x5a, 0xfffffffffffffffd, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000400)="67679d96", 0x4, 0x1, 0x0, 0x1, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x800, r7, &(0x7f00000004c0)="c2fb0b59edb813dc7178edb17683a0a6494f3c24b52748aade4f47465e0af0706b9d4d01f89b79edc6310c6b8784c604d4f8003ccf8b83f4d168f68d7b5bd37bf49840fdf45c6fdb5bb0f7", 0x4b, 0x9, 0x0, 0x0, r1}])

15:42:36 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38)

[  613.140602] FAULT_INJECTION: forcing a failure.
[  613.140602] name failslab, interval 1, probability 0, space 0, times 0
[  613.142256] CPU: 0 UID: 0 PID: 6610 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  613.142286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  613.142298] Call Trace:
[  613.142306]  <TASK>
[  613.142314]  dump_stack_lvl+0xfa/0x120
[  613.142344]  should_fail_ex+0x4d7/0x5e0
[  613.142373]  should_failslab+0xc2/0x120
[  613.142403]  __kmalloc_cache_noprof+0x81/0x6b0
[  613.142436]  ? find_held_lock+0x2b/0x80
[  613.142460]  ? copy_cgroup_ns+0x1dd/0x6c0
[  613.142483]  ? copy_cgroup_ns+0x212/0x6c0
[  613.142511]  ? copy_cgroup_ns+0x212/0x6c0
[  613.142532]  copy_cgroup_ns+0x212/0x6c0
[  613.142559]  create_new_namespaces+0x354/0xab0
[  613.142590]  copy_namespaces+0x45c/0x580
[  613.142615]  copy_process+0x26d4/0x7410
[  613.142641]  ? __pfx_perf_trace_lock+0x10/0x10
[  613.142686]  ? __pfx_copy_process+0x10/0x10
[  613.142720]  ? __might_fault+0xe0/0x190
[  613.142750]  ? _copy_from_user+0x5b/0xd0
[  613.142779]  kernel_clone+0xea/0x7f0
[  613.142804]  ? get_pid_task+0xfd/0x250
[  613.142830]  ? __pfx_kernel_clone+0x10/0x10
[  613.142854]  ? perf_trace_lock+0xb5/0x5d0
[  613.142891]  ? find_held_lock+0x2b/0x80
[  613.142913]  ? ksys_write+0x121/0x240
[  613.142940]  ? lock_is_held_type+0x9e/0x120
[  613.142966]  __do_sys_clone3+0x1f5/0x280
[  613.142992]  ? __pfx___do_sys_clone3+0x10/0x10
[  613.143036]  ? __fget_files+0x20d/0x3b0
[  613.143068]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  613.143097]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
15:42:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  613.143142]  ? ksys_write+0x1a3/0x240
[  613.143167]  ? __pfx_ksys_write+0x10/0x10
[  613.143203]  do_syscall_64+0xbf/0x390
[  613.143229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.143251] RIP: 0033:0x7f2c107a1b19
[  613.143268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  613.143288] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  613.143309] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  613.143323] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  613.143336] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  613.143349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  613.143361] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  613.143392]  </TASK>
15:42:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7", 0x1c, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:36 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39)

[  613.223368] loop3: detected capacity change from 0 to 264192
[  613.242789] EXT4-fs (loop3): unsupported descriptor size 0
[  613.246254] loop5: detected capacity change from 0 to 264192
[  613.273234] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  613.284966] EXT4-fs (loop5): get root inode failed
[  613.285914] EXT4-fs (loop5): mount failed
15:42:36 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36)

15:42:36 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  613.348099] FAULT_INJECTION: forcing a failure.
[  613.348099] name failslab, interval 1, probability 0, space 0, times 0
[  613.349312] CPU: 1 UID: 0 PID: 6626 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  613.349330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  613.349338] Call Trace:
[  613.349343]  <TASK>
[  613.349348]  dump_stack_lvl+0xfa/0x120
[  613.349368]  should_fail_ex+0x4d7/0x5e0
[  613.349386]  ? copy_net_ns+0x121/0x690
[  613.349400]  should_failslab+0xc2/0x120
[  613.349420]  kmem_cache_alloc_noprof+0x80/0x690
[  613.349447]  ? copy_net_ns+0x121/0x690
[  613.349459]  copy_net_ns+0x121/0x690
[  613.349475]  create_new_namespaces+0x3f6/0xab0
[  613.349495]  copy_namespaces+0x45c/0x580
[  613.349509]  copy_process+0x26d4/0x7410
[  613.349526]  ? __pfx_perf_trace_lock+0x10/0x10
[  613.349555]  ? __pfx_copy_process+0x10/0x10
[  613.349571]  ? __might_fault+0xe0/0x190
[  613.349589]  ? _copy_from_user+0x5b/0xd0
[  613.349608]  kernel_clone+0xea/0x7f0
[  613.349622]  ? get_pid_task+0xfd/0x250
[  613.349639]  ? __pfx_kernel_clone+0x10/0x10
[  613.349653]  ? perf_trace_lock+0xb5/0x5d0
[  613.349676]  ? find_held_lock+0x2b/0x80
[  613.349690]  ? ksys_write+0x121/0x240
[  613.349712]  ? lock_is_held_type+0x9e/0x120
[  613.349729]  __do_sys_clone3+0x1f5/0x280
[  613.349745]  ? __pfx___do_sys_clone3+0x10/0x10
[  613.349774]  ? __fget_files+0x20d/0x3b0
[  613.349797]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  613.349815]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  613.349834]  ? ksys_write+0x1a3/0x240
[  613.349849]  ? __pfx_ksys_write+0x10/0x10
[  613.349871]  do_syscall_64+0xbf/0x390
[  613.349887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.349901] RIP: 0033:0x7f07b06bcb19
[  613.349912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  613.349924] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  613.349937] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  613.349946] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  613.349954] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  613.349962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  613.349969] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  613.349988]  </TASK>
15:42:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fork()
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup2(r2, r3)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x1, 0x9, 0x0, 0x0, 0x26, 0x80508, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x2, 0x5}, 0x4000, 0x28a, 0x3, 0x2, 0xc1, 0xffff, 0x1f, 0x0, 0x3ff, 0x0, 0x265}, r1, 0xf, r2, 0x1)
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1400000)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9800, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000}, 0x461, 0x401, 0x8, 0x3, 0x7, 0x7fff, 0x1, 0x0, 0x8001, 0x0, 0x8}, r1, 0xe, r0, 0x6)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r5 = fsmount(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00', @dev})
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0))

15:42:46 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37)

15:42:46 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1400000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=<r2=>0x0)
r3 = fork()
ptrace(0x10, r3)
ptrace$poke(0x4, r3, &(0x7f0000000100), 0x1400000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=<r4=>0x0)
clone3(&(0x7f00000004c0)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/181, 0xb5, &(0x7f0000000340)=""/167, &(0x7f0000000480)=[r1, r2, 0xffffffffffffffff, r3, r4], 0x5, {r0}}, 0x58)

15:42:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b70100", 0x1e, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:46 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40)

15:42:46 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39)

[  622.788144] FAULT_INJECTION: forcing a failure.
[  622.788144] name failslab, interval 1, probability 0, space 0, times 0
[  622.790352] CPU: 0 UID: 0 PID: 6647 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  622.790386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  622.790401] Call Trace:
[  622.790409]  <TASK>
[  622.790419]  dump_stack_lvl+0xfa/0x120
[  622.790453]  should_fail_ex+0x4d7/0x5e0
[  622.790486]  should_failslab+0xc2/0x120
[  622.790521]  __kmalloc_noprof+0xcd/0x680
[  622.790562]  ? lock_release+0xc8/0x290
[  622.790596]  ? copy_net_ns+0xdb/0x690
[  622.790630]  copy_net_ns+0xdb/0x690
[  622.790660]  create_new_namespaces+0x3f6/0xab0
[  622.790697]  copy_namespaces+0x45c/0x580
[  622.790734]  copy_process+0x26d4/0x7410
[  622.790767]  ? __pfx_perf_trace_lock+0x10/0x10
[  622.790820]  ? __pfx_copy_process+0x10/0x10
[  622.790852]  ? __might_fault+0xe0/0x190
[  622.790887]  ? _copy_from_user+0x5b/0xd0
[  622.790922]  kernel_clone+0xea/0x7f0
[  622.790951]  ? get_pid_task+0xfd/0x250
[  622.790983]  ? __pfx_kernel_clone+0x10/0x10
[  622.791012]  ? perf_trace_lock+0xb5/0x5d0
[  622.791057]  ? find_held_lock+0x2b/0x80
[  622.791084]  ? ksys_write+0x121/0x240
[  622.791115]  ? lock_is_held_type+0x9e/0x120
[  622.791146]  __do_sys_clone3+0x1f5/0x280
[  622.791178]  ? __pfx___do_sys_clone3+0x10/0x10
[  622.791244]  ? __fget_files+0x20d/0x3b0
[  622.791282]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  622.791317]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  622.791353]  ? ksys_write+0x1a3/0x240
[  622.791383]  ? __pfx_ksys_write+0x10/0x10
[  622.791427]  do_syscall_64+0xbf/0x390
[  622.791459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.791484] RIP: 0033:0x7f2c107a1b19
[  622.791504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  622.791528] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  622.791552] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  622.791570] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  622.791585] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  622.791600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  622.791615] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  622.791652]  </TASK>
[  622.794316] loop5: detected capacity change from 0 to 264192
[  622.813174] FAULT_INJECTION: forcing a failure.
[  622.813174] name failslab, interval 1, probability 0, space 0, times 0
[  622.814193] CPU: 1 UID: 0 PID: 6655 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  622.814208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  622.814214] Call Trace:
[  622.814218]  <TASK>
[  622.814222]  dump_stack_lvl+0xfa/0x120
[  622.814236]  should_fail_ex+0x4d7/0x5e0
[  622.814251]  ? copy_net_ns+0x121/0x690
[  622.814262]  should_failslab+0xc2/0x120
[  622.814278]  kmem_cache_alloc_noprof+0x80/0x690
[  622.814301]  ? copy_net_ns+0x121/0x690
[  622.814312]  copy_net_ns+0x121/0x690
[  622.814326]  create_new_namespaces+0x3f6/0xab0
[  622.814342]  copy_namespaces+0x45c/0x580
[  622.814355]  copy_process+0x26d4/0x7410
[  622.814369]  ? __pfx_perf_trace_lock+0x10/0x10
[  622.814394]  ? __pfx_copy_process+0x10/0x10
[  622.814408]  ? __might_fault+0xe0/0x190
[  622.814424]  ? _copy_from_user+0x5b/0xd0
** 1 printk messages dropped **
[  622.814452]  ? get_pid_task+0xfd/0x250
[  622.814467]  ? __pfx_kernel_clone+0x10/0x10
[  622.814480]  ? perf_trace_lock+0xb5/0x5d0
[  622.814500]  ? find_held_lock+0x2b/0x80
[  622.814511]  ? ksys_write+0x121/0x240
[  622.814525]  ? lock_is_held_type+0x9e/0x120
[  622.814540]  __do_sys_clone3+0x1f5/0x280
[  622.814554]  ? __pfx___do_sys_clone3+0x10/0x10
[  622.814577]  ? __fget_files+0x20d/0x3b0
[  622.814594]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  622.814610]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  622.814626]  ? ksys_write+0x1a3/0x240
[  622.814640]  ? __pfx_ksys_write+0x10/0x10
[  622.814659]  do_syscall_64+0xbf/0x390
[  622.814674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.814685] RIP: 0033:0x7f76c876ab19
[  622.814694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  622.814710] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  622.814721] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
[  622.814729] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  622.814736] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  622.814743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  622.814750] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  622.814767]  </TASK>
[  622.816426] loop3: detected capacity change from 0 to 264192
[  622.816820] ------------[ cut here ]------------
[  622.830763] EXT4-fs (loop3): unsupported descriptor size 0
[  622.831313] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#1: in:imklog/175
[  622.831340] Modules linked in:
[  622.835621] CPU: 1 UID: 0 PID: 175 Comm: in:imklog Not tainted 6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  622.836440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  622.837124] RIP: 0010:get_data+0x364/0x400
[  622.837480] Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 37 89 5b 00 e9 a9 fe ff ff e8 fd b6 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 ec b6 1e 00 90 0f 0b 90 45 31
[  622.838971] RSP: 0018:ffff88801574f768 EFLAGS: 00010293
[  622.839416] RAX: 0000000000000000 RBX: ffff88801574f880 RCX: ffffffff81555256
[  622.840010] RDX: ffff888017720000 RSI: ffffffff81555423 RDI: 0000000000000006
[  622.840584] RBP: ffff88801574f848 R08: 0000000000001100 R09: 0000009102a229ea
[  622.841180] R10: 0000000000000000 R11: 000019ff82000018 R12: ffffffff85d30690
[  622.841773] R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000
[  622.842352] FS:  00007fa08bd90700(0000) GS:ffff8880e54f4000(0000) knlGS:0000000000000000
[  622.843027] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  622.844058] CR2: 00007fd114039fe8 CR3: 00000000160d5000 CR4: 0000000000350ef0
[  622.845724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  622.847317] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  622.850408] Call Trace:
[  622.852074]  <TASK>
[  622.852276]  _prb_read_valid+0x2f3/0x830
[  622.852616]  ? __pfx__prb_read_valid+0x10/0x10
[  622.853138]  ? __mutex_lock+0x166/0x1020
[  622.853475]  ? syslog_print+0x328/0x5c0
[  622.853824]  ? __pfx___mutex_lock+0x10/0x10
[  622.854175]  ? find_held_lock+0x2b/0x80
[  622.854500]  prb_read_valid+0x78/0xa0
[  622.854834]  ? __pfx_prb_read_valid+0x10/0x10
[  622.855213]  syslog_print+0x37c/0x5c0
[  622.855537]  ? __pfx_syslog_print+0x10/0x10
[  622.855911]  ? __pfx_autoremove_wake_function+0x10/0x10
[  622.856354]  ? avc_has_perm_noaudit+0x59/0x3d0
[  622.856747]  ? find_held_lock+0x2b/0x80
[  622.857070]  ? avc_has_perm_noaudit+0x11b/0x3d0
[  622.857451]  do_syslog.part.0+0x20b/0x5b0
[  622.857815]  ? __pfx_do_syslog.part.0+0x10/0x10
[  622.858202]  ? avc_has_perm+0x12b/0x1d0
[  622.858530]  ? __pfx_avc_has_perm+0x10/0x10
[  622.858912]  do_syslog+0xcd/0x110
[  622.859201]  kmsg_read+0x8e/0xc0
[  622.859492]  ? __pfx_kmsg_read+0x10/0x10
[  622.859840]  proc_reg_read+0x120/0x310
[  622.860159]  ? __pfx_proc_reg_read+0x10/0x10
[  622.860516]  vfs_read+0x1eb/0xc70
[  622.860822]  ? __pfx_vfs_read+0x10/0x10
[  622.861150]  ? lock_release+0xc8/0x290
[  622.861473]  ? __fget_files+0x20d/0x3b0
[  622.861823]  ksys_read+0x121/0x240
[  622.862119]  ? __pfx_ksys_read+0x10/0x10
[  622.862458]  do_syscall_64+0xbf/0x390
[  622.862793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.863208] RIP: 0033:0x7fa08c7d308c
[  622.863514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf fc ff ff 48
[  622.864966] RSP: 002b:00007fa08bd6f4d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  622.865570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa08c7d308c
[  622.866154] RDX: 0000000000001fa0 RSI: 00007fa08bd6fd00 RDI: 0000000000000005
[  622.866737] RBP: 000055906a39f4c0 R08: 0000000000000000 R09: 000055906a39be88
[  622.867311] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007fa08bd6fd00
[  622.867898] R13: 0000000000001fa0 R14: 00007fa08bd6fd00 R15: 00007fa08bd707ad
[  622.868477]  </TASK>
[  622.868670] irq event stamp: 20317
[  622.868972] hardirqs last  enabled at (20327): [<ffffffff81543798>] __up_console_sem+0x78/0x80
[  622.869661] hardirqs last disabled at (20334): [<ffffffff8154377d>] __up_console_sem+0x5d/0x80
[  622.870363] softirqs last  enabled at (19976): [<ffffffff813bc05c>] handle_softirqs+0x50c/0x770
[  622.871074] softirqs last disabled at (19935): [<ffffffff813bc3f4>] __irq_exit_rcu+0xc4/0x100
[  622.871776] ---[ end trace 0000000000000000 ]---
15:42:46 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  622.888543] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  622.909801] EXT4-fs (loop5): get root inode failed
[  622.910610] EXT4-fs (loop5): mount failed
15:42:46 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40)

15:42:46 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38)

15:42:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b70100", 0x1e, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

[  623.078417] loop3: detected capacity change from 0 to 264192
[  623.088743] EXT4-fs (loop3): unsupported descriptor size 0
15:42:56 executing program 0:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41)

15:42:56 executing program 4:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39)

15:42:56 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:42:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="0000080000000000000000000000000000000000000000000000000000000000c137ff0f8e18319ed12150cd739e90e17e38dfd6983934ea", 0x38, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:56 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41)

15:42:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b70100", 0x1e, 0x4e0}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])

15:42:56 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
rseq(0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
copy_file_range(r4, 0x0, r2, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={<r5=>0x0})
r6 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x2, r6, 0xa0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff, 0x7, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={r5, 0x0, r0, 0x8, 0x80000})
r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x33ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x3448, 0x0, 0x0, 0x5c7a19c642cc1ff0}, 0x0, 0x10, 0xffffffffffffffff, 0xa)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r7, r8)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x81, 0x7, 0xe6, 0x4, 0x0, 0xfffffffffffffffa, 0x402a0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xd7f2, 0x8}, 0x17045, 0x7ff, 0xff, 0xb, 0x24, 0x4, 0x1, 0x0, 0x1f, 0x0, 0x3}, r1, 0x9, r7, 0xc)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x6)

15:42:56 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x9)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0002000})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
pread64(r4, &(0x7f0000000080)=""/239, 0xef, 0x5)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000240)={0x1})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
uname(&(0x7f0000000140)=""/212)
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(r5, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x80000000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='/dev/ttyS3\x00')
rseq(0x0, 0x0, 0x0, 0x0)

[  632.620525] loop3: detected capacity change from 0 to 264192
[  632.622381] loop5: detected capacity change from 0 to 264192
[  632.625172] FAULT_INJECTION: forcing a failure.
[  632.625172] name failslab, interval 1, probability 0, space 0, times 0
[  632.626113] CPU: 1 UID: 0 PID: 6697 Comm: syz-executor.1 Tainted: G        W           6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  632.626135] Tainted: [W]=WARN
[  632.626139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  632.626147] Call Trace:
[  632.626152]  <TASK>
[  632.626157]  dump_stack_lvl+0xfa/0x120
[  632.626178]  should_fail_ex+0x4d7/0x5e0
[  632.626195]  should_failslab+0xc2/0x120
[  632.626213]  __kmalloc_cache_noprof+0x81/0x6b0
[  632.626233]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  632.626249]  ? kmem_cache_alloc_noprof+0x270/0x690
[  632.626269]  ? copy_net_ns+0x16f/0x690
[  632.626286]  ? copy_net_ns+0x16f/0x690
[  632.626298]  copy_net_ns+0x16f/0x690
[  632.626312]  create_new_namespaces+0x3f6/0xab0
[  632.626330]  copy_namespaces+0x45c/0x580
[  632.626344]  copy_process+0x26d4/0x7410
[  632.626360]  ? __pfx_perf_trace_lock+0x10/0x10
[  632.626387]  ? __pfx_copy_process+0x10/0x10
[  632.626402]  ? __might_fault+0xe0/0x190
[  632.626419]  ? _copy_from_user+0x5b/0xd0
[  632.626437]  kernel_clone+0xea/0x7f0
[  632.626451]  ? get_pid_task+0xfd/0x250
[  632.626467]  ? __pfx_kernel_clone+0x10/0x10
[  632.626480]  ? perf_trace_lock+0xb5/0x5d0
[  632.626502]  ? find_held_lock+0x2b/0x80
[  632.626515]  ? ksys_write+0x121/0x240
[  632.626531]  ? lock_is_held_type+0x9e/0x120
[  632.626548]  __do_sys_clone3+0x1f5/0x280
[  632.626563]  ? __pfx___do_sys_clone3+0x10/0x10
[  632.626588]  ? __fget_files+0x20d/0x3b0
[  632.626606]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.626624]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.626641]  ? ksys_write+0x1a3/0x240
[  632.626656]  ? __pfx_ksys_write+0x10/0x10
[  632.626677]  do_syscall_64+0xbf/0x390
[  632.626692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.626710] RIP: 0033:0x7f07b06bcb19
[  632.626720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  632.626733] RSP: 002b:00007f07adc32188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  632.626745] RAX: ffffffffffffffda RBX: 00007f07b07cff60 RCX: 00007f07b06bcb19
[  632.626754] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  632.626761] RBP: 00007f07adc321d0 R08: 0000000000000000 R09: 0000000000000000
[  632.626769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  632.626777] R13: 00007ffd7a01658f R14: 00007f07adc32300 R15: 0000000000022000
[  632.626794]  </TASK>
[  632.647100] EXT4-fs (loop3): unsupported descriptor size 0
[  632.651327] FAULT_INJECTION: forcing a failure.
[  632.651327] name failslab, interval 1, probability 0, space 0, times 0
[  632.653198] CPU: 0 UID: 0 PID: 6699 Comm: syz-executor.0 Tainted: G        W           6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  632.653235] Tainted: [W]=WARN
[  632.653242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  632.653255] Call Trace:
[  632.653264]  <TASK>
[  632.653273]  dump_stack_lvl+0xfa/0x120
[  632.653304]  should_fail_ex+0x4d7/0x5e0
[  632.653333]  should_failslab+0xc2/0x120
[  632.653364]  __kmalloc_cache_noprof+0x81/0x6b0
[  632.653397]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  632.653424]  ? kmem_cache_alloc_noprof+0x270/0x690
[  632.653459]  ? copy_net_ns+0x16f/0x690
[  632.653487]  ? copy_net_ns+0x16f/0x690
[  632.653508]  copy_net_ns+0x16f/0x690
[  632.653533]  create_new_namespaces+0x3f6/0xab0
[  632.653573]  copy_namespaces+0x45c/0x580
[  632.653611]  copy_process+0x26d4/0x7410
[  632.653641]  ? __pfx_perf_trace_lock+0x10/0x10
[  632.653688]  ? __pfx_copy_process+0x10/0x10
[  632.653722]  ? __might_fault+0xe0/0x190
[  632.653752]  ? _copy_from_user+0x5b/0xd0
[  632.653781]  kernel_clone+0xea/0x7f0
[  632.653806]  ? get_pid_task+0xfd/0x250
[  632.653833]  ? __pfx_kernel_clone+0x10/0x10
[  632.653856]  ? perf_trace_lock+0xb5/0x5d0
[  632.653894]  ? find_held_lock+0x2b/0x80
[  632.653916]  ? ksys_write+0x121/0x240
[  632.653943]  ? lock_is_held_type+0x9e/0x120
[  632.653970]  __do_sys_clone3+0x1f5/0x280
[  632.653996]  ? __pfx___do_sys_clone3+0x10/0x10
[  632.654040]  ? __fget_files+0x20d/0x3b0
[  632.654073]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.654102]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.654132]  ? ksys_write+0x1a3/0x240
[  632.654157]  ? __pfx_ksys_write+0x10/0x10
[  632.654193]  do_syscall_64+0xbf/0x390
[  632.654219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.654243] RIP: 0033:0x7f76c876ab19
[  632.654260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  632.654282] RSP: 002b:00007f76c5ce0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  632.654303] RAX: ffffffffffffffda RBX: 00007f76c887df60 RCX: 00007f76c876ab19
15:42:56 executing program 1:
clone3(&(0x7f0000005880)={0x77b04d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42)

[  632.654318] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  632.654331] RBP: 00007f76c5ce01d0 R08: 0000000000000000 R09: 0000000000000000
[  632.654344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  632.654357] R13: 00007ffc81140b2f R14: 00007f76c5ce0300 R15: 0000000000022000
[  632.654388]  </TASK>
[  632.693258] FAULT_INJECTION: forcing a failure.
[  632.693258] name failslab, interval 1, probability 0, space 0, times 0
[  632.695054] CPU: 0 UID: 0 PID: 6700 Comm: syz-executor.4 Tainted: G        W           6.18.0-rc2-next-20251024 #1 PREEMPT(voluntary) 
[  632.695090] Tainted: [W]=WARN
[  632.695098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  632.695111] Call Trace:
[  632.695118]  <TASK>
[  632.695127]  dump_stack_lvl+0xfa/0x120
[  632.695156]  should_fail_ex+0x4d7/0x5e0
[  632.695184]  ? copy_net_ns+0x121/0x690
[  632.695206]  should_failslab+0xc2/0x120
[  632.695235]  kmem_cache_alloc_noprof+0x80/0x690
[  632.695281]  ? copy_net_ns+0x121/0x690
[  632.695301]  copy_net_ns+0x121/0x690
[  632.695326]  create_new_namespaces+0x3f6/0xab0
[  632.695373]  copy_namespaces+0x45c/0x580
[  632.695407]  copy_process+0x26d4/0x7410
[  632.695445]  ? __pfx_perf_trace_lock+0x10/0x10
[  632.695509]  ? __pfx_copy_process+0x10/0x10
[  632.695549]  ? __might_fault+0xe0/0x190
[  632.695591]  ? _copy_from_user+0x5b/0xd0
[  632.695638]  kernel_clone+0xea/0x7f0
[  632.695674]  ? get_pid_task+0xfd/0x250
[  632.695726]  ? __pfx_kernel_clone+0x10/0x10
[  632.695763]  ? perf_trace_lock+0xb5/0x5d0
[  632.695822]  ? find_held_lock+0x2b/0x80
[  632.695857]  ? ksys_write+0x121/0x240
[  632.695900]  ? lock_is_held_type+0x9e/0x120
[  632.695942]  __do_sys_clone3+0x1f5/0x280
[  632.695985]  ? __pfx___do_sys_clone3+0x10/0x10
[  632.696056]  ? __fget_files+0x20d/0x3b0
[  632.696108]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.696153]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  632.696202]  ? ksys_write+0x1a3/0x240
[  632.696241]  ? __pfx_ksys_write+0x10/0x10
[  632.696294]  do_syscall_64+0xbf/0x390
[  632.696334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.696367] RIP: 0033:0x7f2c107a1b19
[  632.696393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  632.696425] RSP: 002b:00007f2c0dd17188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  632.696456] RAX: ffffffffffffffda RBX: 00007f2c108b4f60 RCX: 00007f2c107a1b19
[  632.696478] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
[  632.696499] RBP: 00007f2c0dd171d0 R08: 0000000000000000 R09: 0000000000000000
[  632.696518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  632.696535] R13: 00007fff97bc019f R14: 00007f2c0dd17300 R15: 0000000000022000
[  632.696582]  </TASK>
[  632.741763] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz-executor.5: iget: special inode unallocated
[  632.750296] EXT4-fs (loop5): get root inode failed
[  632.750747] EXT4-fs (loop5): mount failed
15:42:56 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31074b", 0x1e}], 0x1) (fail_nth: 1)

15:42:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f}, {0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000013b00)=ANY=[])


VM DIAGNOSIS:
15:42:46  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000009 RCX=ffffffff8136f593 RDX=ffff888017a00000
RSI=ffffffff8136f5bb RDI=0000000000000006 RBP=000000004f9c8770 RSP=ffff88801dce7790
R8 =0000000064efb453 R9 =ffff88806c2e6080 R10=0000000000080000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000800 R14=ffff88804f9c8770 R15=ffffea00013e7200
RIP=ffffffff8136f871 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e53f4000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7de97ed040 CR3=000000000bcd8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82904a85 RDI=ffffffff8890d660 RBP=ffffffff8890d620 RSP=ffff88801574f018
R8 =0000000000000000 R9 =ffffed1001515046 R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=0000000000000010 R14=ffffffff8890d620 R15=ffffffff82904a70
RIP=ffffffff82904add RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa08bd90700 00000000 00000000
GS =0000 ffff8880e54f4000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd114039fe8 CR3=00000000160d5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000