0x10001)

[ 1700.455697] loop6: detected capacity change from 0 to 512
[ 1700.459410] FAULT_INJECTION: forcing a failure.
[ 1700.459410] name failslab, interval 1, probability 0, space 0, times 0
[ 1700.460746] CPU: 1 PID: 11158 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1700.461776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1700.462971] Call Trace:
[ 1700.463245]  <TASK>
[ 1700.463483]  dump_stack_lvl+0x8b/0xb3
[ 1700.463897]  should_fail.cold+0x5/0xa
[ 1700.464325]  ? create_object.isra.0+0x3a/0xa20
[ 1700.464817]  should_failslab+0x5/0x10
[ 1700.465229]  kmem_cache_alloc+0x69/0x490
[ 1700.465676]  create_object.isra.0+0x3a/0xa20
[ 1700.466133]  ? kasan_unpoison+0x23/0x50
[ 1700.466567]  kmem_cache_alloc+0x244/0x490
[ 1700.467007]  __alloc_file+0x21/0x240
[ 1700.467410]  alloc_empty_file+0x6d/0x170
[ 1700.467847]  path_openat+0xe1/0x28a0
[ 1700.468262]  ? path_lookupat+0x850/0x850
[ 1700.468701]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1700.469266]  ? lock_is_held_type+0xd7/0x130
[ 1700.469739]  do_filp_open+0x1aa/0x400
[ 1700.470140]  ? may_open_dev+0xf0/0xf0
[ 1700.470555]  ? lock_release+0x3b2/0x6f0
[ 1700.470971]  ? alloc_fd+0x2f0/0x670
[ 1700.471356]  ? lock_downgrade+0x6d0/0x6d0
[ 1700.471792]  ? rwlock_bug.part.0+0x90/0x90
[ 1700.472230]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1700.472809]  ? _find_next_bit+0x1e5/0x260
[ 1700.473260]  ? _raw_spin_unlock+0x24/0x40
[ 1700.473702]  ? alloc_fd+0x2f0/0x670
[ 1700.474083]  do_sys_openat2+0x16d/0x4d0
[ 1700.474499]  ? build_open_flags+0x6f0/0x6f0
[ 1700.474959]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1700.475534]  __x64_sys_openat+0x13f/0x1f0
[ 1700.475964]  ? __x64_sys_open+0x1c0/0x1c0
[ 1700.476411]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1700.476953]  do_syscall_64+0x3b/0x90
[ 1700.477346]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1700.477906] RIP: 0033:0x7f1f6d94ea04
[ 1700.478289] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1700.480180] RSP: 002b:00007f1f6af10ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1700.480966] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d94ea04
[ 1700.481745] RDX: 0000000000000002 RSI: 00007f1f6af11000 RDI: 00000000ffffff9c
[ 1700.482491] RBP: 00007f1f6af11000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1700.483249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1700.483981] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1700.484737]  </TASK>
[ 1700.487251] loop4: detected capacity change from 0 to 512
[ 1700.488672] EXT4-fs: Ignoring removed nobh option
[ 1700.500695] EXT4-fs (loop6): corrupt root inode, run e2fsck
[ 1700.501435] EXT4-fs (loop6): mount failed
[ 1700.523949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1714.247474] FAULT_INJECTION: forcing a failure.
[ 1714.247474] name failslab, interval 1, probability 0, space 0, times 0
[ 1714.250251] CPU: 1 PID: 11175 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1714.252175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1714.254438] Call Trace:
[ 1714.254957]  <TASK>
[ 1714.255404]  dump_stack_lvl+0x8b/0xb3
[ 1714.256227]  should_fail.cold+0x5/0xa
[ 1714.257002]  ? security_file_alloc+0x34/0x170
[ 1714.257923]  should_failslab+0x5/0x10
[ 1714.258700]  kmem_cache_alloc+0x69/0x490
[ 1714.259528]  security_file_alloc+0x34/0x170
[ 1714.260403]  __alloc_file+0xb6/0x240
[ 1714.261154]  alloc_empty_file+0x6d/0x170
[ 1714.262006]  path_openat+0xe1/0x28a0
[ 1714.262774]  ? path_lookupat+0x850/0x850
[ 1714.263592]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1714.264658]  ? lock_is_held_type+0xd7/0x130
[ 1714.265526]  do_filp_open+0x1aa/0x400
[ 1714.266292]  ? may_open_dev+0xf0/0xf0
[ 1714.267051]  ? lock_release+0x3b2/0x6f0
[ 1714.267845]  ? alloc_fd+0x2f0/0x670
[ 1714.268579]  ? lock_downgrade+0x6d0/0x6d0
[ 1714.269426]  ? rwlock_bug.part.0+0x90/0x90
[ 1714.270297]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1714.271412]  ? _find_next_bit+0x1e5/0x260
[ 1714.272248]  ? _raw_spin_unlock+0x24/0x40
[ 1714.273104]  ? alloc_fd+0x2f0/0x670
[ 1714.273865]  do_sys_openat2+0x16d/0x4d0
[ 1714.274668]  ? build_open_flags+0x6f0/0x6f0
[ 1714.275555]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1714.276677]  __x64_sys_openat+0x13f/0x1f0
[ 1714.277521]  ? __x64_sys_open+0x1c0/0x1c0
[ 1714.278380]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1714.279437]  do_syscall_64+0x3b/0x90
[ 1714.280198]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1714.281237] RIP: 0033:0x7f1f6d94ea04
19:47:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f0000000000000400", 0x1c, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:47:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000003c0), 0x10)
sync()
sync()

19:47:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 26)

19:47:55 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:47:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 27)

19:47:55 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x12, 0x0, 0x0, 0x0)

19:47:55 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xcddc93e0}, 0x0)

19:47:55 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10)
read(r1, &(0x7f0000000040)=""/117, 0x75)

[ 1714.281985] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
19:47:55 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x109100, 0x80)
sendfile(r1, r2, 0x0, 0x2000004000db8a)
read(r0, &(0x7f0000000040)=""/117, 0x75)

[ 1714.286000] RSP: 002b:00007f1f6af10ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1714.287617] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d94ea04
[ 1714.289023] RDX: 0000000000000002 RSI: 00007f1f6af11000 RDI: 00000000ffffff9c
[ 1714.290440] RBP: 00007f1f6af11000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1714.291846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1714.293252] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1714.294758]  </TASK>
[ 1714.296394] FAULT_INJECTION: forcing a failure.
[ 1714.296394] name failslab, interval 1, probability 0, space 0, times 0
[ 1714.298617] CPU: 1 PID: 11177 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1714.300512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1714.302759] Call Trace:
[ 1714.303266]  <TASK>
[ 1714.303709]  dump_stack_lvl+0x8b/0xb3
[ 1714.304476]  should_fail.cold+0x5/0xa
[ 1714.305237]  ? create_object.isra.0+0x3a/0xa20
[ 1714.306163]  should_failslab+0x5/0x10
[ 1714.306927]  kmem_cache_alloc+0x69/0x490
[ 1714.307748]  create_object.isra.0+0x3a/0xa20
[ 1714.308619]  ? kasan_unpoison+0x23/0x50
[ 1714.309409]  kmem_cache_alloc+0x244/0x490
[ 1714.310259]  security_file_alloc+0x34/0x170
[ 1714.311125]  __alloc_file+0xb6/0x240
[ 1714.311877]  alloc_empty_file+0x6d/0x170
[ 1714.312696]  path_openat+0xe1/0x28a0
[ 1714.313460]  ? path_lookupat+0x850/0x850
[ 1714.314278]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1714.315326]  ? lock_is_held_type+0xd7/0x130
[ 1714.316183]  do_filp_open+0x1aa/0x400
[ 1714.316935]  ? may_open_dev+0xf0/0xf0
[ 1714.317690]  ? lock_release+0x3b2/0x6f0
[ 1714.318499]  ? alloc_fd+0x2f0/0x670
[ 1714.319216]  ? lock_downgrade+0x6d0/0x6d0
[ 1714.320041]  ? rwlock_bug.part.0+0x90/0x90
[ 1714.320887]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1714.321985]  ? _find_next_bit+0x1e5/0x260
[ 1714.322812]  ? _raw_spin_unlock+0x24/0x40
[ 1714.323640]  ? alloc_fd+0x2f0/0x670
[ 1714.324373]  do_sys_openat2+0x16d/0x4d0
[ 1714.325163]  ? build_open_flags+0x6f0/0x6f0
[ 1714.326050]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1714.327149]  __x64_sys_openat+0x13f/0x1f0
[ 1714.327970]  ? __x64_sys_open+0x1c0/0x1c0
[ 1714.328799]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1714.329805]  do_syscall_64+0x3b/0x90
[ 1714.330579]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1714.331591] RIP: 0033:0x7f1bc91d9a04
[ 1714.332318] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1714.335983] RSP: 002b:00007f1bc679bed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1714.337490] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc91d9a04
[ 1714.338928] RDX: 0000000000000002 RSI: 00007f1bc679c000 RDI: 00000000ffffff9c
[ 1714.340356] RBP: 00007f1bc679c000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1714.341775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1714.343192] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1714.344624]  </TASK>
[ 1714.376448] loop6: detected capacity change from 0 to 512
[ 1714.408978] EXT4-fs (loop6): corrupt root inode, run e2fsck
[ 1714.411567] EXT4-fs (loop6): mount failed
19:47:55 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xe093dccd}, 0x0)

[ 1714.486661] loop5: detected capacity change from 0 to 512
19:47:55 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1714.559839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:48:13 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)="c0fb81cffd7d3b181686ce8757a97ecf689b49af43c200648d998a3365e8924626aca67e13398b8f58c0a0c8dd6cf4be6727c407dc12bc69617d6b231c621061e4cb22fc568019b9ac60325d8f83a29cdfd9303294854ecfb433cc83eee9acce286e787c287a036b95557f483f5b967cfcbc575140c64dbfc2a38fef8649e82152e3b463e92d2d", 0x87}, {&(0x7f0000000200)="685e0f764a2797cc6c546e0d", 0xc}, {&(0x7f0000000240)="04d49c1ac3e1f70491cf42e7d42e79", 0xf}, {&(0x7f0000000280)="762fe1056c6c90f4f95fe237b8b181f508637f05c477090390bc912346e450953d697f3a977d827735c1a15191a4eb94d7b8a19d25240b4e37b02ab200599ddabd8fae6faea77044abed45f409510eb517ec8edb3d", 0x55}, {&(0x7f0000000300)="53f0b15242f2ff22f009cb820c0224c7d4bfe4c7e3cfff1be3d2cdb4093ead629f4e414ed9ad8e527d6fde7a0d571aca5ec40bdfe04f2fe7504bee1183acde83d5ced5c2c7b76000d34f463dc82e0cbae441d72104f9b5df08cbff03c98092cb3cbf1a69677672d383a7e574162802fb97a4ddae63b5dd7a6b36cca8e2d9f3", 0x7f}, {&(0x7f0000000380)="dc755ff7cd4973fe37fed74947a5bc11596e5988af4edf2502e2e75427c1ad51df1d27fe38fbb4fd3243055b1ff7c0aae17228e679", 0x35}], 0x6, 0x8, 0x40)
read(r1, &(0x7f0000000040)=""/117, 0x75)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff})
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000100)=0x1)

19:48:13 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f0000000000000400", 0x1c, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:13 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x22000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000200)={0x100000006})
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="ba1156674be8e184b028ef3a178150e2669a509a11a4ce6ee95d789c519388447711c0f802a7925c6baf3c110c70a241ba8ccc03aefb8b331e4203f95fd418ae3c7c8b37828a437638f1aa8717e0a506ea344bb0cc87504f1299f3d46f2cb0b66ebbbb92c8824df30f931f9117a16f71a36e2d174a4fcaef6df7e7ba6d0d9323bb17e1c013993924fcc8f8bc28f92c9abb323afea55331df5cc457f0d033cf9bd8e508cd58fd912adde7774b814f201254fff2f4bb35bd7fcdf9bff4e70f031f295c32f891f929c9f95e2b", 0xcb}, 0x1, 0x0, 0x0, 0x20000014}, 0x2000080)
sync()
r4 = fcntl$dupfd(r1, 0x0, r0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum, 0x0, @desc3})

19:48:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:48:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 27)

19:48:13 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x18, 0x0, 0x0, 0x0)

19:48:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 28)

19:48:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[ 1732.970686] FAULT_INJECTION: forcing a failure.
[ 1732.970686] name failslab, interval 1, probability 0, space 0, times 0
[ 1732.971404] FAULT_INJECTION: forcing a failure.
[ 1732.971404] name failslab, interval 1, probability 0, space 0, times 0
[ 1732.973016] CPU: 1 PID: 11225 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1732.976962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1732.979170] Call Trace:
[ 1732.979664]  <TASK>
[ 1732.980100]  dump_stack_lvl+0x8b/0xb3
[ 1732.980870]  should_fail.cold+0x5/0xa
[ 1732.981631]  ? security_file_alloc+0x34/0x170
[ 1732.982541]  should_failslab+0x5/0x10
[ 1732.983287]  kmem_cache_alloc+0x69/0x490
[ 1732.984094]  security_file_alloc+0x34/0x170
[ 1732.984949]  __alloc_file+0xb6/0x240
[ 1732.985692]  alloc_empty_file+0x6d/0x170
[ 1732.986510]  path_openat+0xe1/0x28a0
[ 1732.987269]  ? path_lookupat+0x850/0x850
[ 1732.988077]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1732.989123]  ? lock_is_held_type+0xd7/0x130
[ 1732.989982]  do_filp_open+0x1aa/0x400
[ 1732.990738]  ? may_open_dev+0xf0/0xf0
[ 1732.991487]  ? lock_release+0x3b2/0x6f0
[ 1732.992272]  ? alloc_fd+0x2f0/0x670
[ 1732.992990]  ? lock_downgrade+0x6d0/0x6d0
[ 1732.993811]  ? rwlock_bug.part.0+0x90/0x90
[ 1732.994665]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1732.995747]  ? _find_next_bit+0x1e5/0x260
[ 1732.996566]  ? _raw_spin_unlock+0x24/0x40
[ 1732.997391]  ? alloc_fd+0x2f0/0x670
[ 1732.998125]  do_sys_openat2+0x16d/0x4d0
[ 1732.998915]  ? build_open_flags+0x6f0/0x6f0
[ 1732.999773]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1733.000863]  __x64_sys_openat+0x13f/0x1f0
[ 1733.001684]  ? __x64_sys_open+0x1c0/0x1c0
[ 1733.002523]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1733.003541]  do_syscall_64+0x3b/0x90
[ 1733.004282]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1733.005289] RIP: 0033:0x7f1f6d94ea04
[ 1733.006017] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1733.009597] RSP: 002b:00007f1f6af10ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1733.011085] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d94ea04
[ 1733.012476] RDX: 0000000000000002 RSI: 00007f1f6af11000 RDI: 00000000ffffff9c
[ 1733.013863] RBP: 00007f1f6af11000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1733.015275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1733.016665] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1733.018082]  </TASK>
[ 1733.018543] CPU: 0 PID: 11218 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1733.020442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1733.022656] Call Trace:
[ 1733.023157]  <TASK>
[ 1733.023594]  dump_stack_lvl+0x8b/0xb3
[ 1733.024354]  should_fail.cold+0x5/0xa
[ 1733.025110]  ? alloc_workqueue+0x914/0xeb0
[ 1733.025951]  should_failslab+0x5/0x10
[ 1733.026712]  __kmalloc+0x72/0x440
[ 1733.027404]  alloc_workqueue+0x914/0xeb0
[ 1733.028205]  ? do_raw_spin_unlock+0x4f/0x210
[ 1733.029086]  ? _raw_spin_unlock+0x24/0x40
[ 1733.029910]  ? bd_prepare_to_claim+0x164/0x300
[ 1733.030817]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1733.031812]  ? __fget_files+0x28d/0x470
[ 1733.032608]  ? loop_configure+0x62b/0x1950
[ 1733.033443]  loop_configure+0x6ec/0x1950
[ 1733.034262]  ? putname+0xfe/0x140
[ 1733.034962]  lo_ioctl+0x7c5/0x18b0
[ 1733.035661]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1733.036607]  ? loop_set_status_old+0x1b0/0x1b0
[ 1733.037506]  ? avc_ss_reset+0x180/0x180
[ 1733.038302]  ? __lock_acquire+0xbac/0x6120
[ 1733.039196]  ? selinux_inode_getsecctx+0x90/0x90
[ 1733.040139]  ? loop_set_status_old+0x1b0/0x1b0
[ 1733.041037]  blkdev_ioctl+0x362/0x7f0
[ 1733.041783]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1733.042722]  ? __x64_sys_ioctl+0x97/0x210
[ 1733.043536]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1733.044613]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1733.045542]  __x64_sys_ioctl+0x196/0x210
[ 1733.046348]  do_syscall_64+0x3b/0x90
[ 1733.047087]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1733.048090] RIP: 0033:0x7f1bc92268d7
[ 1733.048811] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1733.052391] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1733.053867] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1733.055255] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1733.056638] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1733.058019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1733.059407] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1733.060814]  </TASK>
[ 1733.070529] loop6: detected capacity change from 0 to 512
19:48:14 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:48:14 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
pread64(r1, &(0x7f0000000100)=""/251, 0xfb, 0xffff)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r0, 0x0, 0xdb8a)
read(r2, &(0x7f0000000040)=""/117, 0x75)

19:48:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0)

[ 1733.165926] EXT4-fs (loop6): corrupt root inode, run e2fsck
[ 1733.167445] EXT4-fs (loop6): mount failed
19:48:31 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1e, 0x0, 0x0, 0x0)

[ 1750.129873] FAULT_INJECTION: forcing a failure.
[ 1750.129873] name failslab, interval 1, probability 0, space 0, times 0
[ 1750.131212] CPU: 0 PID: 11251 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1750.132244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1750.133459] Call Trace:
[ 1750.133730]  <TASK>
[ 1750.133968]  dump_stack_lvl+0x8b/0xb3
[ 1750.134392]  should_fail.cold+0x5/0xa
[ 1750.134801]  ? alloc_workqueue+0x914/0xeb0
[ 1750.135256]  should_failslab+0x5/0x10
[ 1750.135679]  __kmalloc+0x72/0x440
[ 1750.136065]  alloc_workqueue+0x914/0xeb0
[ 1750.136499]  ? do_raw_spin_unlock+0x4f/0x210
[ 1750.136981]  ? _raw_spin_unlock+0x24/0x40
[ 1750.137434]  ? bd_prepare_to_claim+0x164/0x300
[ 1750.137921]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1750.138492]  ? __fget_files+0x28d/0x470
[ 1750.138940]  ? loop_configure+0x62b/0x1950
19:48:31 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0)

19:48:31 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4feff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:48:31 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:31 executing program 2:
sync()
sync()
sync()
sync()

19:48:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 29)

19:48:31 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup(r0)
sendfile(r2, r0, 0x0, 0x9)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:48:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 28)

[ 1750.139409]  loop_configure+0x6ec/0x1950
[ 1750.140022]  ? putname+0xfe/0x140
[ 1750.140420]  lo_ioctl+0x7c5/0x18b0
[ 1750.140810]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1750.141349]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.141849]  ? avc_ss_reset+0x180/0x180
[ 1750.142286]  ? __lock_acquire+0xbac/0x6120
[ 1750.142791]  ? selinux_inode_getsecctx+0x90/0x90
[ 1750.143327]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.143828]  blkdev_ioctl+0x362/0x7f0
[ 1750.144247]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.144744]  ? __x64_sys_ioctl+0x97/0x210
[ 1750.145204]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1750.145810]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.146337]  __x64_sys_ioctl+0x196/0x210
[ 1750.146799]  do_syscall_64+0x3b/0x90
[ 1750.147219]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1750.147790] RIP: 0033:0x7f1f6d99b8d7
[ 1750.148193] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1750.150223] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1750.151072] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1750.151862] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1750.152643] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1750.153420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1750.154213] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1750.155018]  </TASK>
[ 1750.159811] loop6: detected capacity change from 0 to 512
[ 1750.171519] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 1750.173332] EXT4-fs (loop6): get root inode failed
[ 1750.173866] EXT4-fs (loop6): mount failed
[ 1750.196298] FAULT_INJECTION: forcing a failure.
[ 1750.196298] name failslab, interval 1, probability 0, space 0, times 0
[ 1750.197520] CPU: 0 PID: 11261 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1750.198560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1750.199761] Call Trace:
[ 1750.200049]  <TASK>
[ 1750.200299]  dump_stack_lvl+0x8b/0xb3
[ 1750.200723]  should_fail.cold+0x5/0xa
[ 1750.201142]  ? create_object.isra.0+0x3a/0xa20
[ 1750.201633]  should_failslab+0x5/0x10
[ 1750.202037]  kmem_cache_alloc+0x69/0x490
[ 1750.202477]  create_object.isra.0+0x3a/0xa20
[ 1750.202941]  ? kasan_unpoison+0x23/0x50
[ 1750.203379]  __kmalloc+0x25b/0x440
[ 1750.203778]  alloc_workqueue+0x914/0xeb0
[ 1750.204218]  ? do_raw_spin_unlock+0x4f/0x210
[ 1750.204697]  ? _raw_spin_unlock+0x24/0x40
[ 1750.205135]  ? bd_prepare_to_claim+0x164/0x300
[ 1750.205623]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1750.206181]  ? __fget_files+0x28d/0x470
[ 1750.206649]  ? loop_configure+0x62b/0x1950
[ 1750.207207]  loop_configure+0x6ec/0x1950
[ 1750.207671]  ? putname+0xfe/0x140
[ 1750.208066]  lo_ioctl+0x7c5/0x18b0
[ 1750.208473]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1750.209018]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.209527]  ? avc_ss_reset+0x180/0x180
[ 1750.209970]  ? __lock_acquire+0xbac/0x6120
[ 1750.210495]  ? selinux_inode_getsecctx+0x90/0x90
[ 1750.211033]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.211539]  blkdev_ioctl+0x362/0x7f0
[ 1750.211961]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.212489]  ? __x64_sys_ioctl+0x97/0x210
[ 1750.212960]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1750.213564]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.214088]  __x64_sys_ioctl+0x196/0x210
[ 1750.214545]  do_syscall_64+0x3b/0x90
[ 1750.214969]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1750.215537] RIP: 0033:0x7f1bc92268d7
[ 1750.215926] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1750.217934] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1750.218776] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1750.219530] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1750.220329] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1750.221078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1750.221856] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1750.222635]  </TASK>
19:48:31 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 29)

[ 1750.294956] loop6: detected capacity change from 0 to 512
[ 1750.305084] FAULT_INJECTION: forcing a failure.
[ 1750.305084] name failslab, interval 1, probability 0, space 0, times 0
[ 1750.307494] CPU: 0 PID: 11271 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1750.309551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1750.311837] Call Trace:
[ 1750.312352]  <TASK>
[ 1750.312800]  dump_stack_lvl+0x8b/0xb3
[ 1750.313576]  should_fail.cold+0x5/0xa
[ 1750.314348]  ? create_object.isra.0+0x3a/0xa20
[ 1750.315272]  should_failslab+0x5/0x10
[ 1750.316024]  kmem_cache_alloc+0x69/0x490
[ 1750.316840]  create_object.isra.0+0x3a/0xa20
[ 1750.317709]  ? kasan_unpoison+0x23/0x50
[ 1750.318513]  __kmalloc+0x25b/0x440
[ 1750.319229]  alloc_workqueue+0x914/0xeb0
[ 1750.320038]  ? do_raw_spin_unlock+0x4f/0x210
[ 1750.320919]  ? _raw_spin_unlock+0x24/0x40
[ 1750.321754]  ? bd_prepare_to_claim+0x164/0x300
[ 1750.322676]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1750.323684]  ? __fget_files+0x28d/0x470
[ 1750.324482]  ? loop_configure+0x62b/0x1950
[ 1750.325329]  loop_configure+0x6ec/0x1950
[ 1750.326144]  ? putname+0xfe/0x140
[ 1750.326860]  lo_ioctl+0x7c5/0x18b0
[ 1750.327570]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1750.328531]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.329445]  ? avc_ss_reset+0x180/0x180
[ 1750.330252]  ? __lock_acquire+0xbac/0x6120
[ 1750.331166]  ? selinux_inode_getsecctx+0x90/0x90
[ 1750.332124]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.332909] loop5: detected capacity change from 0 to 512
[ 1750.333035]  blkdev_ioctl+0x362/0x7f0
[ 1750.334895]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.335835]  ? __x64_sys_ioctl+0x97/0x210
[ 1750.336667]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1750.337758]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.338709]  __x64_sys_ioctl+0x196/0x210
[ 1750.339521]  do_syscall_64+0x3b/0x90
[ 1750.340276]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1750.341298] RIP: 0033:0x7f1f6d99b8d7
[ 1750.342025] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1750.345653] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1750.347157] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1750.348562] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1750.349963] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1750.351381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1750.352785] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1750.354213]  </TASK>
19:48:31 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0)

19:48:31 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4fffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1750.383655] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 1750.390654] EXT4-fs (loop6): get root inode failed
[ 1750.391847] EXT4-fs (loop6): mount failed
[ 1750.416832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:48:31 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 30)

19:48:31 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8800000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:48:31 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x24, 0x0, 0x0, 0x0)

[ 1750.601846] loop6: detected capacity change from 0 to 512
[ 1750.602589] FAULT_INJECTION: forcing a failure.
[ 1750.602589] name failslab, interval 1, probability 0, space 0, times 0
[ 1750.605346] CPU: 1 PID: 11287 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1750.607280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1750.609541] Call Trace:
[ 1750.610057]  <TASK>
[ 1750.610529]  dump_stack_lvl+0x8b/0xb3
[ 1750.611307]  should_fail.cold+0x5/0xa
[ 1750.612078]  ? create_object.isra.0+0x3a/0xa20
[ 1750.612988]  should_failslab+0x5/0x10
[ 1750.613745]  kmem_cache_alloc+0x69/0x490
[ 1750.614584]  create_object.isra.0+0x3a/0xa20
[ 1750.615456]  ? kasan_unpoison+0x23/0x50
[ 1750.616253]  __kmalloc+0x25b/0x440
[ 1750.616970]  alloc_workqueue+0x914/0xeb0
[ 1750.617796]  ? do_raw_spin_unlock+0x4f/0x210
[ 1750.618697]  ? _raw_spin_unlock+0x24/0x40
[ 1750.619544]  ? bd_prepare_to_claim+0x164/0x300
[ 1750.620428]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1750.621444]  ? __fget_files+0x28d/0x470
[ 1750.622255]  ? loop_configure+0x62b/0x1950
[ 1750.623128]  loop_configure+0x6ec/0x1950
[ 1750.623960]  ? putname+0xfe/0x140
[ 1750.624683]  lo_ioctl+0x7c5/0x18b0
[ 1750.625402]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1750.626399]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.627330]  ? avc_ss_reset+0x180/0x180
[ 1750.628137]  ? __lock_acquire+0xbac/0x6120
[ 1750.629030]  ? selinux_inode_getsecctx+0x90/0x90
[ 1750.630004]  ? loop_set_status_old+0x1b0/0x1b0
[ 1750.630936]  blkdev_ioctl+0x362/0x7f0
[ 1750.631701]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.632649]  ? __x64_sys_ioctl+0x97/0x210
[ 1750.633485]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1750.634599]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1750.635551]  __x64_sys_ioctl+0x196/0x210
[ 1750.636371]  do_syscall_64+0x3b/0x90
[ 1750.637125]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1750.638156] RIP: 0033:0x7f1bc92268d7
[ 1750.638915] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1750.642351] loop4: detected capacity change from 0 to 512
[ 1750.642565] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1750.645177] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1750.646618] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1750.648036] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1750.649453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1750.650878] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1750.652322]  </TASK>
[ 1750.656425] EXT4-fs: Ignoring removed nobh option
[ 1750.668324] loop5: detected capacity change from 0 to 512
[ 1750.671857] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 1750.676518] EXT4-fs (loop6): get root inode failed
[ 1750.677574] EXT4-fs (loop6): mount failed
[ 1750.733803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1750.779050] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:48:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:48:48 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0)

19:48:48 executing program 2:
sync()
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x1555c2, 0x100)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

19:48:48 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:48 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2a, 0x0, 0x0, 0x0)

19:48:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 30)

19:48:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 31)

19:48:48 executing program 0:
r0 = getpid()
r1 = getpid()
syz_open_procfs(r1, &(0x7f0000000040)='status\x00')
tgkill(r1, r0, 0x1e)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00')
r3 = fcntl$getown(r2, 0x9)
r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/fib_triestat\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80)
r6 = socket$netlink(0x10, 0x3, 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r6, &(0x7f00000002c0)={r7, r8, 0x3f62})
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendfile(r10, r4, 0x0, 0xdb8a)
read(r9, &(0x7f0000000040)=""/117, 0x75)
pwritev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="a90570927dfb676538f0fd8ceaa42c65c3a22aa47f019eabbc7de10f0379a64d28c79ea403e78f9bf38a2f7be4638c5ab9bdb9bb9c7e73de3d0c3b46f7fe435857c20f02480cc4ab872d365145aacefec3b0dcb8627def388ac73c37b14ace6b65c9410fffbf7ef70001a5396c392c9ac2ce810fd1306d062356a558d72b8a10099dfb1a10f245d6dd62f166d60e99e2a26b43fb3d2a121ababb0ddd62c79fc2c0", 0xa1}, {&(0x7f0000000180)="329faed25bcabbea9da9016c74d39c1f3bad4d077d66c2a222bbf43c5404aec3dcdf4a3a177739839c2d6319dcb860042ebf0cdea6ba109c1a61025ab7878a5221541f01d055efa4c566fe402b3141a7b94d2169c5", 0x55}], 0x2, 0x8001, 0x1)

[ 1767.093596] FAULT_INJECTION: forcing a failure.
[ 1767.093596] name failslab, interval 1, probability 0, space 0, times 0
[ 1767.095938] CPU: 1 PID: 11311 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1767.097848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1767.100130] Call Trace:
[ 1767.100643]  <TASK>
[ 1767.101087]  dump_stack_lvl+0x8b/0xb3
[ 1767.101866]  should_fail.cold+0x5/0xa
[ 1767.102643]  ? create_object.isra.0+0x3a/0xa20
[ 1767.103558]  should_failslab+0x5/0x10
[ 1767.104329]  kmem_cache_alloc+0x69/0x490
[ 1767.105152]  create_object.isra.0+0x3a/0xa20
[ 1767.106026]  ? kasan_unpoison+0x23/0x50
[ 1767.106840]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1767.107778]  alloc_workqueue_attrs+0x38/0x80
[ 1767.108670]  alloc_workqueue+0x939/0xeb0
[ 1767.109491]  ? do_raw_spin_unlock+0x4f/0x210
[ 1767.110374]  ? _raw_spin_unlock+0x24/0x40
[ 1767.111239]  ? bd_prepare_to_claim+0x164/0x300
[ 1767.112155]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1767.113165]  ? __fget_files+0x28d/0x470
[ 1767.113314] loop6: detected capacity change from 0 to 512
[ 1767.113965]  ? loop_configure+0x62b/0x1950
[ 1767.114003]  loop_configure+0x6ec/0x1950
[ 1767.116753]  ? putname+0xfe/0x140
[ 1767.117465]  lo_ioctl+0x7c5/0x18b0
[ 1767.118179]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1767.119154]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.119160] FAULT_INJECTION: forcing a failure.
[ 1767.119160] name failslab, interval 1, probability 0, space 0, times 0
[ 1767.120064]  ? avc_ss_reset+0x180/0x180
[ 1767.120104]  ? __lock_acquire+0xbac/0x6120
[ 1767.123940]  ? selinux_inode_getsecctx+0x90/0x90
[ 1767.124951]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.125870]  blkdev_ioctl+0x362/0x7f0
[ 1767.126656]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.127596]  ? __x64_sys_ioctl+0x97/0x210
[ 1767.128421]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1767.129513]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.130455]  __x64_sys_ioctl+0x196/0x210
[ 1767.131279]  do_syscall_64+0x3b/0x90
[ 1767.132027]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1767.133045] RIP: 0033:0x7f1bc92268d7
[ 1767.133793] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1767.137421] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1767.139015] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1767.140425] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1767.141827] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1767.143237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1767.144643] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1767.146071]  </TASK>
[ 1767.146533] CPU: 0 PID: 11319 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1767.148465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1767.150710] Call Trace:
[ 1767.151219]  <TASK>
[ 1767.151662]  dump_stack_lvl+0x8b/0xb3
[ 1767.152437]  should_fail.cold+0x5/0xa
[ 1767.153202]  ? alloc_workqueue_attrs+0x38/0x80
[ 1767.154124]  should_failslab+0x5/0x10
[ 1767.154902]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1767.155821]  alloc_workqueue_attrs+0x38/0x80
[ 1767.156701]  alloc_workqueue+0x939/0xeb0
[ 1767.157513]  ? do_raw_spin_unlock+0x4f/0x210
[ 1767.158393]  ? _raw_spin_unlock+0x24/0x40
[ 1767.159235]  ? bd_prepare_to_claim+0x164/0x300
[ 1767.160140]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1767.161146]  ? __fget_files+0x28d/0x470
[ 1767.161945]  ? loop_configure+0x62b/0x1950
[ 1767.162836]  loop_configure+0x6ec/0x1950
[ 1767.163656]  ? putname+0xfe/0x140
[ 1767.164381]  lo_ioctl+0x7c5/0x18b0
[ 1767.165092]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1767.166078]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.167004]  ? avc_ss_reset+0x180/0x180
[ 1767.167806]  ? __lock_acquire+0xbac/0x6120
[ 1767.169001]  ? selinux_inode_getsecctx+0x90/0x90
[ 1767.169964]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.170898]  blkdev_ioctl+0x362/0x7f0
[ 1767.171660]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.172599]  ? __x64_sys_ioctl+0x97/0x210
[ 1767.173426]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1767.174521]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.175471]  __x64_sys_ioctl+0x196/0x210
[ 1767.176286]  do_syscall_64+0x3b/0x90
[ 1767.177045]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1767.178067] RIP: 0033:0x7f1f6d99b8d7
[ 1767.178833] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1767.182458] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1767.184010] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1767.185416] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1767.186828] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1767.188234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1767.189635] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1767.191072]  </TASK>
19:48:48 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x1f, 0x2, 0x81, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x700, 0x1, 0x7ff}})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="05860dce625e"}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x16, 0x0, 0x5, 0x40, 0x0, 0x7e6f, 0x14810, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x200, 0x80000000}, 0x0, 0x1, 0x0, 0x0, 0x76e, 0xcf800000, 0x3f, 0x0, 0x7, 0x0, 0x80000001}, r1, 0x10, 0xffffffffffffffff, 0x6)
copy_file_range(r4, &(0x7f0000000380)=0x7, r2, 0x0, 0x7, 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x75)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x2000})

[ 1767.238914] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1767.241069] EXT4-fs (loop6): group descriptors corrupted!
[ 1767.262293] loop5: detected capacity change from 0 to 512
19:48:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1767.336384] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:48:48 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0)

19:48:48 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:48:48 executing program 2:
sync()
sync()
sync()

19:48:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1767.484608] loop6: detected capacity change from 0 to 512
[ 1767.498310] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1767.500243] EXT4-fs (loop6): group descriptors corrupted!
19:48:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 32)

19:48:48 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:48:48 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x30, 0x0, 0x0, 0x0)

19:48:48 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1767.688724] loop6: detected capacity change from 0 to 512
[ 1767.704735] FAULT_INJECTION: forcing a failure.
[ 1767.704735] name failslab, interval 1, probability 0, space 0, times 0
[ 1767.707259] CPU: 1 PID: 11355 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1767.709289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1767.711660] Call Trace:
[ 1767.712214]  <TASK>
[ 1767.712678]  dump_stack_lvl+0x8b/0xb3
[ 1767.713498]  should_fail.cold+0x5/0xa
[ 1767.714323]  ? create_object.isra.0+0x3a/0xa20
[ 1767.715302]  should_failslab+0x5/0x10
[ 1767.716103]  kmem_cache_alloc+0x69/0x490
[ 1767.716965]  create_object.isra.0+0x3a/0xa20
[ 1767.717891]  ? kasan_unpoison+0x23/0x50
[ 1767.718740]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1767.719739]  alloc_workqueue_attrs+0x38/0x80
[ 1767.720669]  alloc_workqueue+0x939/0xeb0
[ 1767.721535]  ? do_raw_spin_unlock+0x4f/0x210
[ 1767.722465]  ? _raw_spin_unlock+0x24/0x40
[ 1767.723361]  ? bd_prepare_to_claim+0x164/0x300
[ 1767.724331]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1767.725405]  ? __fget_files+0x28d/0x470
[ 1767.726261]  ? loop_configure+0x62b/0x1950
[ 1767.727199]  loop_configure+0x6ec/0x1950
[ 1767.728077]  ? putname+0xfe/0x140
[ 1767.728827]  lo_ioctl+0x7c5/0x18b0
[ 1767.729583]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1767.730596]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.731581]  ? avc_ss_reset+0x180/0x180
[ 1767.732440]  ? __lock_acquire+0xbac/0x6120
[ 1767.733403]  ? selinux_inode_getsecctx+0x90/0x90
[ 1767.734424]  ? loop_set_status_old+0x1b0/0x1b0
[ 1767.735409]  blkdev_ioctl+0x362/0x7f0
[ 1767.736224]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.737221]  ? __x64_sys_ioctl+0x97/0x210
[ 1767.738103]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1767.739298]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1767.740309]  __x64_sys_ioctl+0x196/0x210
[ 1767.741177]  do_syscall_64+0x3b/0x90
[ 1767.741974]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1767.743079] RIP: 0033:0x7f1bc92268d7
[ 1767.743869] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1767.747767] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1767.749381] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1767.750920] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1767.752403] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1767.753877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1767.755356] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1767.756869]  </TASK>
[ 1767.765518] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1767.767459] EXT4-fs (loop6): group descriptors corrupted!
[ 1767.842099] loop5: detected capacity change from 0 to 512
[ 1767.856135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:49:03 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

19:49:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 33)

19:49:03 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:49:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 31)

19:49:03 executing program 2:
sync()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0)
sync()
sync()
sync()

19:49:03 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:49:03 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x36, 0x0, 0x0, 0x0)

19:49:03 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/117, 0x75)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x180c0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
close_range(r0, r2, 0x0)

[ 1782.839996] FAULT_INJECTION: forcing a failure.
[ 1782.839996] name failslab, interval 1, probability 0, space 0, times 0
[ 1782.841287] CPU: 0 PID: 11368 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1782.842348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1782.843633] Call Trace:
[ 1782.843916]  <TASK>
[ 1782.844163]  dump_stack_lvl+0x8b/0xb3
[ 1782.844590]  should_fail.cold+0x5/0xa
[ 1782.845012]  ? create_object.isra.0+0x3a/0xa20
[ 1782.845521]  should_failslab+0x5/0x10
[ 1782.845942]  kmem_cache_alloc+0x69/0x490
[ 1782.846395]  create_object.isra.0+0x3a/0xa20
[ 1782.846884]  ? kasan_unpoison+0x23/0x50
[ 1782.847323]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1782.847833]  alloc_workqueue_attrs+0x38/0x80
[ 1782.848315]  alloc_workqueue+0x939/0xeb0
[ 1782.848745]  ? do_raw_spin_unlock+0x4f/0x210
[ 1782.849238]  ? _raw_spin_unlock+0x24/0x40
[ 1782.849706]  ? bd_prepare_to_claim+0x164/0x300
[ 1782.850373]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1782.850950]  ? __fget_files+0x28d/0x470
[ 1782.851391]  ? loop_configure+0x62b/0x1950
[ 1782.851869]  loop_configure+0x6ec/0x1950
[ 1782.852338]  lo_ioctl+0x7c5/0x18b0
[ 1782.852733]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1782.853281]  ? loop_set_status_old+0x1b0/0x1b0
[ 1782.853752]  ? avc_ss_reset+0x180/0x180
[ 1782.854194]  ? __lock_acquire+0xbac/0x6120
[ 1782.854703]  ? selinux_inode_getsecctx+0x90/0x90
[ 1782.855237]  ? loop_set_status_old+0x1b0/0x1b0
[ 1782.855736]  blkdev_ioctl+0x362/0x7f0
[ 1782.856161]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1782.856688]  ? __x64_sys_ioctl+0x97/0x210
[ 1782.857144]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1782.857754]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1782.858286]  __x64_sys_ioctl+0x196/0x210
[ 1782.858711]  do_syscall_64+0x3b/0x90
[ 1782.859143]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1782.859718] RIP: 0033:0x7f1f6d99b8d7
[ 1782.860098] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1782.862125] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1782.862984] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1782.863723] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1782.864496] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1782.865267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1782.866045] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1782.866844]  </TASK>
19:49:03 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1782.889777] loop6: detected capacity change from 0 to 512
[ 1782.891566] loop4: detected capacity change from 0 to 512
[ 1782.892878] FAULT_INJECTION: forcing a failure.
[ 1782.892878] name failslab, interval 1, probability 0, space 0, times 0
[ 1782.893996] EXT4-fs: Ignoring removed nobh option
[ 1782.895285] CPU: 1 PID: 11376 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1782.897534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1782.899809] Call Trace:
[ 1782.900323]  <TASK>
[ 1782.900765]  dump_stack_lvl+0x8b/0xb3
[ 1782.901540]  should_fail.cold+0x5/0xa
[ 1782.902315]  ? create_object.isra.0+0x3a/0xa20
[ 1782.903231]  should_failslab+0x5/0x10
[ 1782.903988]  kmem_cache_alloc+0x69/0x490
[ 1782.904807]  create_object.isra.0+0x3a/0xa20
[ 1782.905678]  ? kasan_unpoison+0x23/0x50
[ 1782.906468]  __kmalloc_track_caller+0x25e/0x420
[ 1782.907406]  ? kasprintf+0xbb/0xf0
[ 1782.908124]  kvasprintf+0xb5/0x150
[ 1782.908840]  ? bust_spinlocks+0xe0/0xe0
[ 1782.909636]  ? preempt_count_add+0x74/0x140
[ 1782.910496]  ? __is_module_percpu_address+0x237/0x300
[ 1782.911547]  kasprintf+0xbb/0xf0
[ 1782.912227]  ? kvasprintf_const+0x190/0x190
[ 1782.913104]  ? save_trace+0xd00/0xd00
[ 1782.913860]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 1782.914821]  alloc_workqueue+0x408/0xeb0
[ 1782.915655]  ? do_raw_spin_unlock+0x4f/0x210
[ 1782.916538]  ? _raw_spin_unlock+0x24/0x40
[ 1782.917377]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1782.918394]  ? __fget_files+0x28d/0x470
[ 1782.919206]  ? loop_configure+0x62b/0x1950
[ 1782.920054]  loop_configure+0x6ec/0x1950
[ 1782.920876]  ? putname+0xfe/0x140
[ 1782.921581]  lo_ioctl+0x7c5/0x18b0
[ 1782.922304]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1782.923266]  ? loop_set_status_old+0x1b0/0x1b0
[ 1782.924169]  ? avc_ss_reset+0x180/0x180
[ 1782.924960]  ? __lock_acquire+0xbac/0x6120
[ 1782.925859]  ? selinux_inode_getsecctx+0x90/0x90
[ 1782.926814]  ? loop_set_status_old+0x1b0/0x1b0
[ 1782.927746]  blkdev_ioctl+0x362/0x7f0
[ 1782.928495]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1782.929426]  ? __x64_sys_ioctl+0x97/0x210
[ 1782.930247]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1782.931349]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1782.932286]  __x64_sys_ioctl+0x196/0x210
[ 1782.933091]  do_syscall_64+0x3b/0x90
[ 1782.933833]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1782.934844] RIP: 0033:0x7f1bc92268d7
[ 1782.935577] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1782.939228] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1782.940725] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1782.942118] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1782.943525] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1782.944921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1782.946317] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1782.947750]  </TASK>
[ 1782.961611] loop5: detected capacity change from 0 to 512
[ 1782.991005] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1782.992603] EXT4-fs (loop6): group descriptors corrupted!
[ 1783.038826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1783.170799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1797.497142] FAULT_INJECTION: forcing a failure.
[ 1797.497142] name failslab, interval 1, probability 0, space 0, times 0
[ 1797.498895] CPU: 1 PID: 11405 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1797.499112] FAULT_INJECTION: forcing a failure.
[ 1797.499112] name failslab, interval 1, probability 0, space 0, times 0
[ 1797.499900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1797.499926] Call Trace:
[ 1797.499931]  <TASK>
[ 1797.499936]  dump_stack_lvl+0x8b/0xb3
[ 1797.504295]  should_fail.cold+0x5/0xa
[ 1797.504694]  ? apply_wqattrs_prepare+0xab/0x880
[ 1797.505193]  should_failslab+0x5/0x10
[ 1797.505588]  __kmalloc+0x72/0x440
[ 1797.505947]  ? lock_is_held_type+0xd7/0x130
[ 1797.506407]  apply_wqattrs_prepare+0xab/0x880
[ 1797.506888]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1797.507442]  alloc_workqueue+0xb1a/0xeb0
[ 1797.507868]  ? do_raw_spin_unlock+0x4f/0x210
[ 1797.508337]  ? _raw_spin_unlock+0x24/0x40
[ 1797.508781]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1797.509314]  ? __fget_files+0x28d/0x470
[ 1797.509734]  ? loop_configure+0x62b/0x1950
[ 1797.510180]  loop_configure+0x6ec/0x1950
[ 1797.510614]  ? putname+0xfe/0x140
[ 1797.510986]  lo_ioctl+0x7c5/0x18b0
[ 1797.511368]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1797.511876]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.512371]  ? avc_ss_reset+0x180/0x180
[ 1797.512826]  ? __lock_acquire+0xbac/0x6120
[ 1797.513319]  ? selinux_inode_getsecctx+0x90/0x90
[ 1797.513836]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.514329]  blkdev_ioctl+0x362/0x7f0
[ 1797.514737]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.515265]  ? __x64_sys_ioctl+0x97/0x210
[ 1797.515708]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1797.516295]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.516801]  __x64_sys_ioctl+0x196/0x210
[ 1797.517241]  do_syscall_64+0x3b/0x90
[ 1797.517641]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1797.518197] RIP: 0033:0x7f1bc92268d7
[ 1797.518593] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1797.520550] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1797.521357] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1797.522101] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1797.522844] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1797.523602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1797.524367] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1797.525143]  </TASK>
[ 1797.525391] CPU: 0 PID: 11406 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1797.527429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1797.529787] Call Trace:
[ 1797.530335]  <TASK>
[ 1797.530804]  dump_stack_lvl+0x8b/0xb3
[ 1797.531783]  should_fail.cold+0x5/0xa
[ 1797.532592]  ? create_object.isra.0+0x3a/0xa20
[ 1797.533545]  should_failslab+0x5/0x10
[ 1797.534342]  kmem_cache_alloc+0x69/0x490
[ 1797.535213]  create_object.isra.0+0x3a/0xa20
[ 1797.536132]  ? kasan_unpoison+0x23/0x50
19:49:18 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:49:18 executing program 2:
sync()
sync()
sync()

19:49:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 32)

19:49:18 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:49:18 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0)

19:49:18 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x0, @local}})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r0, 0x0, 0xdb8a)
read(r2, &(0x7f0000000040)=""/117, 0x75)

19:49:18 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 34)

19:49:18 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3c, 0x0, 0x0, 0x0)

[ 1797.536968]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1797.538227]  alloc_workqueue_attrs+0x38/0x80
[ 1797.539310]  alloc_workqueue+0x939/0xeb0
[ 1797.540272]  ? do_raw_spin_unlock+0x4f/0x210
[ 1797.541308]  ? _raw_spin_unlock+0x24/0x40
[ 1797.542289]  ? bd_prepare_to_claim+0x164/0x300
[ 1797.543370]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1797.544560]  ? __fget_files+0x28d/0x470
[ 1797.545502]  ? loop_configure+0x62b/0x1950
[ 1797.546504]  loop_configure+0x6ec/0x1950
[ 1797.547478]  ? putname+0xfe/0x140
[ 1797.548316]  lo_ioctl+0x7c5/0x18b0
[ 1797.549155]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1797.550285]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.551388]  ? avc_ss_reset+0x180/0x180
[ 1797.552312]  ? __lock_acquire+0xbac/0x6120
[ 1797.553263]  ? selinux_inode_getsecctx+0x90/0x90
[ 1797.554277]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.555241]  blkdev_ioctl+0x362/0x7f0
[ 1797.556041]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.557022]  ? __x64_sys_ioctl+0x97/0x210
[ 1797.557890]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1797.559046]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.560063]  __x64_sys_ioctl+0x196/0x210
[ 1797.560926]  do_syscall_64+0x3b/0x90
[ 1797.561716]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1797.562799] RIP: 0033:0x7f1f6d99b8d7
[ 1797.563577] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1797.567421] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1797.569008] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1797.570501] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1797.572003] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1797.573495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1797.574974] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1797.576531]  </TASK>
[ 1797.583366] loop4: detected capacity change from 0 to 512
[ 1797.584764] EXT4-fs: Ignoring removed nobh option
19:49:18 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="060000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1797.626394] loop6: detected capacity change from 0 to 512
[ 1797.655827] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1797.657908] EXT4-fs (loop6): group descriptors corrupted!
[ 1797.658425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:49:18 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 35)

19:49:18 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'sit0\x00', <r5=>0x0, 0x0, 0x96, 0x90, 0x9, 0x20, @private2, @private0, 0x7, 0x80, 0x0, 0x80}})
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'sit0\x00', <r9=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev, r9}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r10=>0x0, 0x29, 0x7f, 0x3, 0x3, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x7800, 0x6, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl2\x00', <r11=>0x0, 0x8000, 0x91, 0x1, 0xf601, {{0x12, 0x4, 0x2, 0x22, 0x48, 0x65, 0x0, 0x86, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0x9, [@rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x94, 0x0, 0xd, [0x400, 0x3, 0x6, 0x5, 0x5, 0x0]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r12=>0x0, 0x2f, 0x8, 0x5, 0x6, 0x50, @local, @mcast1, 0x80, 0x80, 0x20, 0x6}})
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000005c0)={@remote, <r13=>0x0}, &(0x7f0000000600)=0x14)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000640)={0x664, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x25, 0x1f, 0x7}, {0x6, 0x81, 0x0, 0x7fff}, {0x13, 0x2, 0x6b, 0xfff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3cbb}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x40004000}, 0x8000000)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:49:18 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="070000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1797.745724] FAULT_INJECTION: forcing a failure.
[ 1797.745724] name failslab, interval 1, probability 0, space 0, times 0
[ 1797.748203] CPU: 0 PID: 11429 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1797.750128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1797.752403] Call Trace:
[ 1797.752912]  <TASK>
[ 1797.753357]  dump_stack_lvl+0x8b/0xb3
[ 1797.754140]  should_fail.cold+0x5/0xa
[ 1797.754900]  ? create_object.isra.0+0x3a/0xa20
[ 1797.755833]  should_failslab+0x5/0x10
[ 1797.756588]  kmem_cache_alloc+0x69/0x490
[ 1797.757406]  create_object.isra.0+0x3a/0xa20
[ 1797.758271]  ? kasan_unpoison+0x23/0x50
[ 1797.759080]  __kmalloc+0x25b/0x440
[ 1797.759800]  apply_wqattrs_prepare+0xab/0x880
19:49:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 33)

[ 1797.760723]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1797.761811]  alloc_workqueue+0xb1a/0xeb0
[ 1797.762622]  ? do_raw_spin_unlock+0x4f/0x210
[ 1797.763517]  ? _raw_spin_unlock+0x24/0x40
[ 1797.764365]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1797.765367]  ? __fget_files+0x28d/0x470
[ 1797.766171]  ? loop_configure+0x62b/0x1950
[ 1797.767016]  loop_configure+0x6ec/0x1950
[ 1797.767853]  ? putname+0xfe/0x140
[ 1797.768569]  lo_ioctl+0x7c5/0x18b0
[ 1797.769279]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1797.770233]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.771165]  ? avc_ss_reset+0x180/0x180
19:49:18 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x60, 0x0, 0x0, 0x0)

[ 1797.771961]  ? __lock_acquire+0xbac/0x6120
[ 1797.772912]  ? selinux_inode_getsecctx+0x90/0x90
[ 1797.773868]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.774785]  blkdev_ioctl+0x362/0x7f0
[ 1797.775549]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.776480]  ? __x64_sys_ioctl+0x97/0x210
[ 1797.777302]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1797.778389]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.779348]  __x64_sys_ioctl+0x196/0x210
[ 1797.780160]  do_syscall_64+0x3b/0x90
[ 1797.780923]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1797.781939] RIP: 0033:0x7f1bc92268d7
[ 1797.782669] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1797.786326] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1797.787815] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1797.789215] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1797.790619] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1797.792036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1797.793464] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1797.794901]  </TASK>
19:49:18 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0)

19:49:18 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xf0, 0x0, 0x0, 0x0)

[ 1797.869107] loop5: detected capacity change from 0 to 512
[ 1797.942300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1797.965109] FAULT_INJECTION: forcing a failure.
[ 1797.965109] name failslab, interval 1, probability 0, space 0, times 0
[ 1797.966667] CPU: 1 PID: 11447 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1797.967924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1797.969408] Call Trace:
[ 1797.969754]  <TASK>
[ 1797.969994]  dump_stack_lvl+0x8b/0xb3
[ 1797.970511]  should_fail.cold+0x5/0xa
[ 1797.971040]  ? create_object.isra.0+0x3a/0xa20
[ 1797.971688]  should_failslab+0x5/0x10
[ 1797.972095]  kmem_cache_alloc+0x69/0x490
[ 1797.972634]  create_object.isra.0+0x3a/0xa20
[ 1797.973134]  ? kasan_unpoison+0x23/0x50
[ 1797.973655]  __kmalloc_track_caller+0x25e/0x420
[ 1797.974288]  ? kasprintf+0xbb/0xf0
[ 1797.974832]  kvasprintf+0xb5/0x150
[ 1797.975231]  ? bust_spinlocks+0xe0/0xe0
[ 1797.975782]  ? preempt_count_add+0x74/0x140
[ 1797.976370]  ? __is_module_percpu_address+0x237/0x300
[ 1797.977047]  kasprintf+0xbb/0xf0
[ 1797.977454]  ? kvasprintf_const+0x190/0x190
[ 1797.978008]  ? save_trace+0xd00/0xd00
[ 1797.978421]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 1797.978934]  alloc_workqueue+0x408/0xeb0
[ 1797.979370]  ? do_raw_spin_unlock+0x4f/0x210
[ 1797.979836]  ? _raw_spin_unlock+0x24/0x40
[ 1797.980283]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1797.980822]  ? __fget_files+0x28d/0x470
[ 1797.981245]  ? loop_configure+0x62b/0x1950
[ 1797.981698]  loop_configure+0x6ec/0x1950
[ 1797.982132]  ? putname+0xfe/0x140
[ 1797.982502]  lo_ioctl+0x7c5/0x18b0
[ 1797.982880]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1797.983405]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.983896]  ? avc_ss_reset+0x180/0x180
[ 1797.984317]  ? __lock_acquire+0xbac/0x6120
[ 1797.984810]  ? selinux_inode_getsecctx+0x90/0x90
[ 1797.985310]  ? loop_set_status_old+0x1b0/0x1b0
[ 1797.985793]  blkdev_ioctl+0x362/0x7f0
[ 1797.986192]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.986690]  ? __x64_sys_ioctl+0x97/0x210
[ 1797.987130]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1797.987712]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1797.988207]  __x64_sys_ioctl+0x196/0x210
[ 1797.988631]  do_syscall_64+0x3b/0x90
[ 1797.989023]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1797.989563] RIP: 0033:0x7f1f6d99b8d7
[ 1797.989946] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1797.991868] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1797.992641] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1797.993393] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1797.994135] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1797.994881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1797.995625] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1797.996382]  </TASK>
[ 1798.067849] loop4: detected capacity change from 0 to 512
[ 1798.074621] EXT4-fs: Ignoring removed nobh option
[ 1798.092471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1798.374090] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:49:32 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:49:32 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1ad, 0x0, 0x0, 0x0)

19:49:32 executing program 2:
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xc002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
fallocate(r0, 0x2, 0x8001, 0x4)

19:49:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 34)

19:49:32 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/128, 0x80)

19:49:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="080000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1811.570668] loop6: detected capacity change from 0 to 512
19:49:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 36)

19:49:32 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0)

[ 1811.583380] FAULT_INJECTION: forcing a failure.
[ 1811.583380] name failslab, interval 1, probability 0, space 0, times 0
[ 1811.586219] CPU: 0 PID: 11464 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1811.588521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1811.591223] Call Trace:
[ 1811.591850]  <TASK>
[ 1811.592397]  dump_stack_lvl+0x8b/0xb3
[ 1811.593345]  should_fail.cold+0x5/0xa
[ 1811.594279]  ? alloc_workqueue_attrs+0x38/0x80
[ 1811.595377]  should_failslab+0x5/0x10
[ 1811.596265]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1811.597347]  alloc_workqueue_attrs+0x38/0x80
[ 1811.598380]  apply_wqattrs_prepare+0xb3/0x880
[ 1811.599465]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1811.600657]  alloc_workqueue+0xb1a/0xeb0
[ 1811.601612]  ? do_raw_spin_unlock+0x4f/0x210
[ 1811.602648]  ? _raw_spin_unlock+0x24/0x40
[ 1811.603639]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1811.604815]  ? __fget_files+0x28d/0x470
[ 1811.605754]  ? loop_configure+0x62b/0x1950
[ 1811.606757]  loop_configure+0x6ec/0x1950
[ 1811.607719]  ? putname+0xfe/0x140
[ 1811.608574]  lo_ioctl+0x7c5/0x18b0
[ 1811.609409]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1811.610558]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.611621]  ? avc_ss_reset+0x180/0x180
[ 1811.612557]  ? lock_is_held_type+0xd7/0x130
[ 1811.613554]  ? irqentry_enter+0x26/0x50
[ 1811.614490]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1811.615757]  ? lockdep_hardirqs_on+0x79/0x100
[ 1811.616789]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1811.618062]  ? do_vfs_ioctl+0x1433/0x1630
19:49:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="300000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1811.619081]  ? selinux_inode_getsecctx+0x90/0x90
[ 1811.620322]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.621396]  blkdev_ioctl+0x362/0x7f0
19:49:32 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x500, 0x0, 0x0, 0x0)

[ 1811.622282]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.623414]  ? __x64_sys_ioctl+0x97/0x210
[ 1811.624376]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1811.625655]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.626758]  __x64_sys_ioctl+0x196/0x210
[ 1811.627731]  do_syscall_64+0x3b/0x90
[ 1811.628766]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1811.629986] RIP: 0033:0x7f1bc92268d7
[ 1811.630828] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1811.635954] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1811.637681] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1811.639336] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1811.640954] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1811.642566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1811.644210] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1811.645854]  </TASK>
[ 1811.661424] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1811.662448] EXT4-fs (loop6): group descriptors corrupted!
19:49:32 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x600, 0x0, 0x0, 0x0)

[ 1811.739600] FAULT_INJECTION: forcing a failure.
[ 1811.739600] name failslab, interval 1, probability 0, space 0, times 0
[ 1811.740872] CPU: 1 PID: 11474 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1811.741894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1811.743089] Call Trace:
[ 1811.743364]  <TASK>
[ 1811.743603]  dump_stack_lvl+0x8b/0xb3
[ 1811.744023]  should_fail.cold+0x5/0xa
[ 1811.744427]  ? apply_wqattrs_prepare+0xab/0x880
[ 1811.744929]  should_failslab+0x5/0x10
[ 1811.745335]  __kmalloc+0x72/0x440
[ 1811.745700]  ? lock_is_held_type+0xd7/0x130
[ 1811.746164]  apply_wqattrs_prepare+0xab/0x880
[ 1811.746660]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1811.747208]  alloc_workqueue+0xb1a/0xeb0
[ 1811.747647]  ? do_raw_spin_unlock+0x4f/0x210
[ 1811.748125]  ? _raw_spin_unlock+0x24/0x40
[ 1811.748578]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1811.749136]  ? __fget_files+0x28d/0x470
[ 1811.749577]  ? loop_configure+0x62b/0x1950
[ 1811.750056]  loop_configure+0x6ec/0x1950
[ 1811.750520]  ? putname+0xfe/0x140
[ 1811.750911]  lo_ioctl+0x7c5/0x18b0
[ 1811.751324]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1811.751862]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.752369]  ? avc_ss_reset+0x180/0x180
[ 1811.752810]  ? __lock_acquire+0xbac/0x6120
[ 1811.753310]  ? selinux_inode_getsecctx+0x90/0x90
[ 1811.753840]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.754349]  blkdev_ioctl+0x362/0x7f0
[ 1811.754768]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.755294]  ? __x64_sys_ioctl+0x97/0x210
[ 1811.755760]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1811.756362]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.756874]  __x64_sys_ioctl+0x196/0x210
[ 1811.757308]  do_syscall_64+0x3b/0x90
[ 1811.757704]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1811.758253] RIP: 0033:0x7f1f6d99b8d7
[ 1811.758639] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1811.760561] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1811.761359] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1811.762094] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1811.762834] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1811.763591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1811.764325] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1811.765079]  </TASK>
19:49:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007f00000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:49:32 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:49:32 executing program 0:
unlink(&(0x7f0000000140)='./file1\x00')
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pread64(r1, &(0x7f0000000f40)=""/4096, 0x1000, 0x34)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @mcast1, 0x9}, 0x1c)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r0, 0x0, 0xdb8a)
read(r2, &(0x7f0000000040)=""/117, 0x75)

19:49:32 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0)

19:49:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 37)

19:49:32 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
sync()
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'net\x00'}, {0x20, 'net\x00'}, {0x20, '#'}, {0x20, '.'}, {0x20, 'net\x00'}, {0x20, 'net\x00'}, {0x20, '[-]@'}, {0x20, '.l)'}, {0x20, '$'}], 0xa, "a09b5944517a514d02984f0f80950b01be8da8a39ce44eb3fd90cca73c030bf212758731b9c365aec76733792174fe6898554460b02597aad585a655ffce85c36df8092357d452ba449abf544865e1"}, 0x7d)

19:49:32 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc00, 0x0, 0x0, 0x0)

[ 1811.839601] FAULT_INJECTION: forcing a failure.
[ 1811.839601] name failslab, interval 1, probability 0, space 0, times 0
[ 1811.840830] CPU: 1 PID: 11492 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1811.841838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1811.843045] Call Trace:
[ 1811.843321]  <TASK>
[ 1811.843573]  dump_stack_lvl+0x8b/0xb3
[ 1811.843986]  should_fail.cold+0x5/0xa
[ 1811.844393]  ? create_object.isra.0+0x3a/0xa20
[ 1811.844869]  should_failslab+0x5/0x10
[ 1811.845271]  kmem_cache_alloc+0x69/0x490
[ 1811.845706]  create_object.isra.0+0x3a/0xa20
[ 1811.846174]  ? kasan_unpoison+0x23/0x50
[ 1811.846596]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1811.847087]  alloc_workqueue_attrs+0x38/0x80
[ 1811.847559]  apply_wqattrs_prepare+0xb3/0x880
[ 1811.848044]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1811.848582]  alloc_workqueue+0xb1a/0xeb0
[ 1811.849010]  ? do_raw_spin_unlock+0x4f/0x210
[ 1811.849475]  ? _raw_spin_unlock+0x24/0x40
[ 1811.849924]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1811.850455]  ? __fget_files+0x28d/0x470
[ 1811.850874]  ? loop_configure+0x62b/0x1950
[ 1811.851344]  loop_configure+0x6ec/0x1950
[ 1811.851776]  ? putname+0xfe/0x140
[ 1811.852151]  lo_ioctl+0x7c5/0x18b0
[ 1811.852524]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1811.853038]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.853519]  ? avc_ss_reset+0x180/0x180
[ 1811.853943]  ? __lock_acquire+0xbac/0x6120
[ 1811.854432]  ? selinux_inode_getsecctx+0x90/0x90
[ 1811.854936]  ? loop_set_status_old+0x1b0/0x1b0
[ 1811.855422]  blkdev_ioctl+0x362/0x7f0
[ 1811.855821]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.856313]  ? __x64_sys_ioctl+0x97/0x210
[ 1811.856750]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1811.857323]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1811.857826]  __x64_sys_ioctl+0x196/0x210
[ 1811.858260]  do_syscall_64+0x3b/0x90
[ 1811.858659]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1811.859196] RIP: 0033:0x7f1bc92268d7
[ 1811.859603] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1811.861511] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1811.862302] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1811.863040] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1811.863791] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1811.864543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1811.865284] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1811.866038]  </TASK>
[ 1811.873120] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:49:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 35)

19:49:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200200008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:49:32 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xcc0, 0x0, 0x0, 0x0)

19:49:32 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0)

[ 1811.997228] loop5: detected capacity change from 0 to 512
19:49:32 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
fchdir(r1)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r0, 0x0, 0xdb8a)
read(r2, &(0x7f0000000040)=""/117, 0x75)

[ 1812.015982] FAULT_INJECTION: forcing a failure.
[ 1812.015982] name failslab, interval 1, probability 0, space 0, times 0
[ 1812.016626] loop6: detected capacity change from 0 to 512
[ 1812.017324] CPU: 1 PID: 11511 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1812.019648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1812.020861] Call Trace:
[ 1812.021135]  <TASK>
[ 1812.021380]  dump_stack_lvl+0x8b/0xb3
[ 1812.021798]  should_fail.cold+0x5/0xa
[ 1812.022220]  ? create_object.isra.0+0x3a/0xa20
[ 1812.022721]  should_failslab+0x5/0x10
[ 1812.023123]  kmem_cache_alloc+0x69/0x490
[ 1812.023576]  create_object.isra.0+0x3a/0xa20
[ 1812.024045]  ? kasan_unpoison+0x23/0x50
[ 1812.024474]  __kmalloc+0x25b/0x440
[ 1812.024859]  apply_wqattrs_prepare+0xab/0x880
[ 1812.025354]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1812.025900]  alloc_workqueue+0xb1a/0xeb0
[ 1812.026344]  ? do_raw_spin_unlock+0x4f/0x210
[ 1812.026836]  ? _raw_spin_unlock+0x24/0x40
[ 1812.027321]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1812.027869]  ? __fget_files+0x28d/0x470
[ 1812.028312]  ? loop_configure+0x62b/0x1950
[ 1812.028780]  loop_configure+0x6ec/0x1950
[ 1812.029231]  ? putname+0xfe/0x140
[ 1812.029621]  lo_ioctl+0x7c5/0x18b0
[ 1812.030007]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1812.030543]  ? loop_set_status_old+0x1b0/0x1b0
[ 1812.031043]  ? avc_ss_reset+0x180/0x180
[ 1812.031501]  ? __lock_acquire+0xbac/0x6120
[ 1812.032003]  ? selinux_inode_getsecctx+0x90/0x90
[ 1812.032536]  ? loop_set_status_old+0x1b0/0x1b0
[ 1812.033043]  blkdev_ioctl+0x362/0x7f0
[ 1812.033467]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1812.033983]  ? __x64_sys_ioctl+0x97/0x210
[ 1812.034440]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1812.035048]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1812.035583]  __x64_sys_ioctl+0x196/0x210
[ 1812.036027]  do_syscall_64+0x3b/0x90
[ 1812.036443]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1812.037006] RIP: 0033:0x7f1f6d99b8d7
[ 1812.037415] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1812.039414] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1812.040232] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1812.040996] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1812.041767] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1812.042507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1812.043279] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1812.044084]  </TASK>
[ 1812.065707] loop4: detected capacity change from 0 to 512
[ 1812.071866] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1812.073918] EXT4-fs (loop6): group descriptors corrupted!
19:49:33 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200300008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1812.094136] EXT4-fs: Ignoring removed nobh option
[ 1812.120769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:49:33 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x8000000000000000}, 0x0)

19:49:33 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200400008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1812.178965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:49:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 38)

19:49:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 36)

19:49:47 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0x97)
read(r1, &(0x7f0000000040)=""/117, 0x75)

[ 1826.259678] FAULT_INJECTION: forcing a failure.
[ 1826.259678] name failslab, interval 1, probability 0, space 0, times 0
19:49:47 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

[ 1826.261969] CPU: 0 PID: 11541 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1826.263968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1826.266201] Call Trace:
[ 1826.266715]  <TASK>
[ 1826.267156]  dump_stack_lvl+0x8b/0xb3
[ 1826.267962]  should_fail.cold+0x5/0xa
[ 1826.268724]  ? apply_wqattrs_prepare+0xab/0x880
[ 1826.269659]  should_failslab+0x5/0x10
[ 1826.270411]  __kmalloc+0x72/0x440
19:49:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200500008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1826.271100]  ? lock_is_held_type+0xd7/0x130
[ 1826.272004]  apply_wqattrs_prepare+0xab/0x880
[ 1826.272919]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1826.273933]  alloc_workqueue+0xb1a/0xeb0
[ 1826.274747]  ? do_raw_spin_unlock+0x4f/0x210
[ 1826.275632]  ? _raw_spin_unlock+0x24/0x40
[ 1826.276470]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1826.277481]  ? __fget_files+0x28d/0x470
[ 1826.278277]  ? loop_configure+0x62b/0x1950
[ 1826.279122]  loop_configure+0x6ec/0x1950
[ 1826.279957]  ? putname+0xfe/0x140
[ 1826.280667]  lo_ioctl+0x7c5/0x18b0
[ 1826.281381]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1826.282342]  ? loop_set_status_old+0x1b0/0x1b0
[ 1826.283254]  ? avc_ss_reset+0x180/0x180
[ 1826.284066]  ? __lock_acquire+0xbac/0x6120
[ 1826.284978]  ? selinux_inode_getsecctx+0x90/0x90
[ 1826.285942]  ? loop_set_status_old+0x1b0/0x1b0
[ 1826.286857]  blkdev_ioctl+0x362/0x7f0
[ 1826.287637]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1826.288584]  ? __x64_sys_ioctl+0x97/0x210
[ 1826.289424]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1826.290524]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1826.291476]  __x64_sys_ioctl+0x196/0x210
[ 1826.292314]  do_syscall_64+0x3b/0x90
[ 1826.293079]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1826.294104] RIP: 0033:0x7f1f6d99b8d7
[ 1826.294841] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1826.298544] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1826.300064] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1826.301503] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1826.302918] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1826.304340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1826.305746] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1826.307186]  </TASK>
19:49:47 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1200, 0x0, 0x0, 0x0)

19:49:47 executing program 2:
sync()
sync()

19:49:47 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:49:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200600008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:49:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200700008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1826.340002] loop6: detected capacity change from 0 to 512
[ 1826.342483] FAULT_INJECTION: forcing a failure.
[ 1826.342483] name failslab, interval 1, probability 0, space 0, times 0
[ 1826.344917] CPU: 0 PID: 11554 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1826.346872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1826.349103] Call Trace:
[ 1826.349609]  <TASK>
[ 1826.350052]  dump_stack_lvl+0x8b/0xb3
[ 1826.350822]  should_fail.cold+0x5/0xa
[ 1826.351593]  ? alloc_workqueue_attrs+0x38/0x80
[ 1826.352507]  should_failslab+0x5/0x10
[ 1826.353260]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1826.354180]  alloc_workqueue_attrs+0x38/0x80
[ 1826.355057]  apply_wqattrs_prepare+0xbb/0x880
[ 1826.355992]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1826.357022]  alloc_workqueue+0xb1a/0xeb0
[ 1826.357835]  ? do_raw_spin_unlock+0x4f/0x210
[ 1826.358716]  ? _raw_spin_unlock+0x24/0x40
[ 1826.359563]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1826.360568]  ? __fget_files+0x28d/0x470
[ 1826.361367]  ? loop_configure+0x62b/0x1950
[ 1826.362208]  loop_configure+0x6ec/0x1950
[ 1826.363021]  ? putname+0xfe/0x140
19:49:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200800008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1826.363750]  lo_ioctl+0x7c5/0x18b0
[ 1826.364542]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1826.365501]  ? loop_set_status_old+0x1b0/0x1b0
[ 1826.366414]  ? avc_ss_reset+0x180/0x180
[ 1826.367215]  ? __lock_acquire+0xbac/0x6120
[ 1826.368134]  ? selinux_inode_getsecctx+0x90/0x90
[ 1826.369089]  ? loop_set_status_old+0x1b0/0x1b0
[ 1826.370003]  blkdev_ioctl+0x362/0x7f0
[ 1826.370756]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1826.371713]  ? __x64_sys_ioctl+0x97/0x210
[ 1826.372536]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1826.373624]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1826.374565]  __x64_sys_ioctl+0x196/0x210
[ 1826.375373]  do_syscall_64+0x3b/0x90
[ 1826.376136]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1826.377151] RIP: 0033:0x7f1bc92268d7
[ 1826.377881] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1826.381512] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1826.383011] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1826.384437] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1826.385842] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1826.387243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1826.388652] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1826.390088]  </TASK>
19:49:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201800008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1826.420082] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1826.422023] EXT4-fs (loop6): group descriptors corrupted!
19:49:47 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0)

19:50:01 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xcddc93e000000000}, 0x0)

19:50:01 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1800, 0x0, 0x0, 0x0)

19:50:01 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201c00008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 39)

19:50:01 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, 0xffffffffffffffff, 0x0, 0xdb8a)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:50:01 executing program 2:
sync()
sync()

19:50:01 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:50:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 37)

[ 1840.985899] FAULT_INJECTION: forcing a failure.
[ 1840.985899] name failslab, interval 1, probability 0, space 0, times 0
[ 1840.987234] CPU: 0 PID: 11586 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1840.988286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1840.989503] Call Trace:
[ 1840.989775]  <TASK>
[ 1840.990018]  dump_stack_lvl+0x8b/0xb3
[ 1840.990436]  should_fail.cold+0x5/0xa
[ 1840.990850]  ? alloc_workqueue_attrs+0x38/0x80
[ 1840.991348]  should_failslab+0x5/0x10
[ 1840.991780]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1840.992288]  alloc_workqueue_attrs+0x38/0x80
[ 1840.992763]  apply_wqattrs_prepare+0xbb/0x880
[ 1840.993274]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1840.993828]  alloc_workqueue+0xb1a/0xeb0
[ 1840.994278]  ? do_raw_spin_unlock+0x4f/0x210
[ 1840.994758]  ? _raw_spin_unlock+0x24/0x40
[ 1840.995224]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1840.995783]  ? __fget_files+0x28d/0x470
[ 1840.996234]  ? loop_configure+0x62b/0x1950
[ 1840.996691]  loop_configure+0x6ec/0x1950
[ 1840.997139]  ? putname+0xfe/0x140
[ 1840.997527]  lo_ioctl+0x7c5/0x18b0
[ 1840.997910]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1840.998447]  ? loop_set_status_old+0x1b0/0x1b0
[ 1840.998951]  ? avc_ss_reset+0x180/0x180
[ 1840.999379]  ? __lock_acquire+0xbac/0x6120
[ 1840.999879]  ? selinux_inode_getsecctx+0x90/0x90
[ 1841.000404]  ? loop_set_status_old+0x1b0/0x1b0
[ 1841.000901]  blkdev_ioctl+0x362/0x7f0
[ 1841.001320]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1841.001828]  ? __x64_sys_ioctl+0x97/0x210
[ 1841.002279]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1841.002878]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1841.003398]  __x64_sys_ioctl+0x196/0x210
[ 1841.003844]  do_syscall_64+0x3b/0x90
[ 1841.004253]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1841.004804] RIP: 0033:0x7f1bc92268d7
[ 1841.005202] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1841.007187] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1841.008021] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1841.008783] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1841.009548] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1841.010315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1841.011081] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1841.011869]  </TASK>
[ 1841.014937] loop6: detected capacity change from 0 to 512
[ 1841.018021] FAULT_INJECTION: forcing a failure.
19:50:01 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="206800008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1841.018021] name failslab, interval 1, probability 0, space 0, times 0
[ 1841.020603] CPU: 1 PID: 11593 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1841.022705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1841.025167] Call Trace:
[ 1841.025720]  <TASK>
[ 1841.026203]  dump_stack_lvl+0x8b/0xb3
[ 1841.027041]  should_fail.cold+0x5/0xa
[ 1841.027877]  ? create_object.isra.0+0x3a/0xa20
[ 1841.028859]  should_failslab+0x5/0x10
[ 1841.029675]  kmem_cache_alloc+0x69/0x490
[ 1841.030559]  create_object.isra.0+0x3a/0xa20
[ 1841.031502]  ? kasan_unpoison+0x23/0x50
[ 1841.032379]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1841.033391]  alloc_workqueue_attrs+0x38/0x80
[ 1841.034340]  apply_wqattrs_prepare+0xb3/0x880
[ 1841.035330]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1841.036438]  alloc_workqueue+0xb1a/0xeb0
[ 1841.037322]  ? do_raw_spin_unlock+0x4f/0x210
[ 1841.038260]  ? _raw_spin_unlock+0x24/0x40
[ 1841.039175]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1841.040258]  ? __fget_files+0x28d/0x470
[ 1841.041129]  ? loop_configure+0x62b/0x1950
[ 1841.042029]  loop_configure+0x6ec/0x1950
[ 1841.042927]  ? putname+0xfe/0x140
[ 1841.043678]  lo_ioctl+0x7c5/0x18b0
[ 1841.044457]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1841.045482]  ? loop_set_status_old+0x1b0/0x1b0
[ 1841.046481]  ? avc_ss_reset+0x180/0x180
[ 1841.047332]  ? __lock_acquire+0xbac/0x6120
[ 1841.048332]  ? selinux_inode_getsecctx+0x90/0x90
[ 1841.049350]  ? loop_set_status_old+0x1b0/0x1b0
[ 1841.050349]  blkdev_ioctl+0x362/0x7f0
[ 1841.051151]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1841.052188]  ? __x64_sys_ioctl+0x97/0x210
[ 1841.053079]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1841.054246]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1841.055277]  __x64_sys_ioctl+0x196/0x210
[ 1841.056165]  do_syscall_64+0x3b/0x90
[ 1841.056977]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1841.058045] RIP: 0033:0x7f1f6d99b8d7
[ 1841.058838] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1841.062719] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1841.064354] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1841.065876] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1841.067399] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1841.068921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1841.070437] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1841.071999]  </TASK>
[ 1841.103055] loop4: detected capacity change from 0 to 512
[ 1841.106113] EXT4-fs: Ignoring removed nobh option
[ 1841.162944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1841.180711] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1841.182710] EXT4-fs (loop6): group descriptors corrupted!
19:50:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 40)

19:50:15 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fe00008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:15 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/117, 0x75)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
lseek(r3, 0x10001, 0x4)

19:50:15 executing program 2:
sync()
sync()

19:50:15 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

19:50:15 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 38)

19:50:15 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1e00, 0x0, 0x0, 0x0)

19:50:15 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1855.053922] loop6: detected capacity change from 0 to 512
[ 1855.086607] FAULT_INJECTION: forcing a failure.
[ 1855.086607] name failslab, interval 1, probability 0, space 0, times 0
[ 1855.088231] CPU: 1 PID: 11627 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1855.089554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1855.091138] Call Trace:
[ 1855.091418]  <TASK>
[ 1855.091734]  dump_stack_lvl+0x8b/0xb3
[ 1855.092195]  should_fail.cold+0x5/0xa
[ 1855.092751]  ? alloc_unbound_pwq+0x4ad/0xd70
[ 1855.093371]  should_failslab+0x5/0x10
[ 1855.093824]  kmem_cache_alloc_node+0x55/0x490
[ 1855.094425]  ? lock_is_held_type+0xd7/0x130
[ 1855.094988]  alloc_unbound_pwq+0x4ad/0xd70
[ 1855.095599]  apply_wqattrs_prepare+0x2a4/0x880
[ 1855.096248]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1855.097295]  alloc_workqueue+0xb1a/0xeb0
[ 1855.098403]  ? do_raw_spin_unlock+0x4f/0x210
[ 1855.099535]  ? _raw_spin_unlock+0x24/0x40
[ 1855.100628]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1855.101995]  ? __fget_files+0x28d/0x470
[ 1855.103003]  ? loop_configure+0x62b/0x1950
[ 1855.104081]  loop_configure+0x6ec/0x1950
[ 1855.105120]  ? putname+0xfe/0x140
[ 1855.106073]  lo_ioctl+0x7c5/0x18b0
[ 1855.106929]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1855.108160]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.109263]  ? avc_ss_reset+0x180/0x180
[ 1855.110285]  ? __lock_acquire+0xbac/0x6120
[ 1855.111495]  ? selinux_inode_getsecctx+0x90/0x90
[ 1855.112825]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.113961]  blkdev_ioctl+0x362/0x7f0
[ 1855.114818]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.115982]  ? __x64_sys_ioctl+0x97/0x210
[ 1855.117067]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1855.118407]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.119550]  __x64_sys_ioctl+0x196/0x210
[ 1855.120553]  do_syscall_64+0x3b/0x90
[ 1855.121519]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1855.122797] RIP: 0033:0x7f1bc92268d7
[ 1855.123747] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1855.128300] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1855.130172] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1855.131978] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1855.133852] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1855.135423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1855.136918] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1855.138434]  </TASK>
[ 1855.139323] FAULT_INJECTION: forcing a failure.
[ 1855.139323] name failslab, interval 1, probability 0, space 0, times 0
[ 1855.141617] CPU: 0 PID: 11626 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1855.143541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1855.145818] Call Trace:
[ 1855.146333]  <TASK>
[ 1855.146785]  dump_stack_lvl+0x8b/0xb3
[ 1855.147572]  should_fail.cold+0x5/0xa
[ 1855.148359]  ? alloc_workqueue_attrs+0x38/0x80
[ 1855.149286]  should_failslab+0x5/0x10
[ 1855.150040]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1855.150969]  alloc_workqueue_attrs+0x38/0x80
[ 1855.151851]  apply_wqattrs_prepare+0xbb/0x880
[ 1855.152779]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1855.153800]  alloc_workqueue+0xb1a/0xeb0
[ 1855.154614]  ? do_raw_spin_unlock+0x4f/0x210
[ 1855.155508]  ? _raw_spin_unlock+0x24/0x40
[ 1855.156397]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1855.157403]  ? __fget_files+0x28d/0x470
[ 1855.158204]  ? loop_configure+0x62b/0x1950
[ 1855.159049]  loop_configure+0x6ec/0x1950
[ 1855.159866]  ? putname+0xfe/0x140
[ 1855.160585]  lo_ioctl+0x7c5/0x18b0
[ 1855.161301]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1855.162257]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.163161]  ? avc_ss_reset+0x180/0x180
[ 1855.163967]  ? __lock_acquire+0xbac/0x6120
[ 1855.164876]  ? selinux_inode_getsecctx+0x90/0x90
[ 1855.165826]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.166731]  blkdev_ioctl+0x362/0x7f0
[ 1855.167477]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.168418]  ? __x64_sys_ioctl+0x97/0x210
[ 1855.169246]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1855.170328]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.171261]  __x64_sys_ioctl+0x196/0x210
[ 1855.172072]  do_syscall_64+0x3b/0x90
[ 1855.172821]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1855.173834] RIP: 0033:0x7f1f6d99b8d7
[ 1855.174553] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1855.178123] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1855.179592] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1855.180982] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1855.182363] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1855.183748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1855.185137] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1855.186546]  </TASK>
[ 1855.195410] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1855.197959] EXT4-fs (loop6): group descriptors corrupted!
19:50:16 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2000, 0x0, 0x0, 0x0)

19:50:16 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

19:50:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:16 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 39)

19:50:16 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2400, 0x0, 0x0, 0x0)

19:50:16 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:50:16 executing program 2:
sync()
sync()

19:50:16 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r2, r3, &(0x7f00000000c0)=0x2, 0x401)
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/117, 0x75)

[ 1855.446831] FAULT_INJECTION: forcing a failure.
[ 1855.446831] name failslab, interval 1, probability 0, space 0, times 0
[ 1855.449258] CPU: 0 PID: 11646 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1855.451252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1855.453598] Call Trace:
[ 1855.454130]  <TASK>
[ 1855.454596]  dump_stack_lvl+0x8b/0xb3
[ 1855.455403]  should_fail.cold+0x5/0xa
[ 1855.456231]  ? create_object.isra.0+0x3a/0xa20
[ 1855.457183]  should_failslab+0x5/0x10
[ 1855.457976]  kmem_cache_alloc+0x69/0x490
[ 1855.458832]  create_object.isra.0+0x3a/0xa20
[ 1855.459750]  ? kasan_unpoison+0x23/0x50
[ 1855.460595]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1855.461574]  alloc_workqueue_attrs+0x38/0x80
[ 1855.462499]  apply_wqattrs_prepare+0xbb/0x880
[ 1855.463474]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1855.464573]  alloc_workqueue+0xb1a/0xeb0
[ 1855.465428]  ? do_raw_spin_unlock+0x4f/0x210
[ 1855.466353]  ? _raw_spin_unlock+0x24/0x40
[ 1855.467235]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1855.468246]  ? __fget_files+0x28d/0x470
[ 1855.469086]  ? loop_configure+0x62b/0x1950
[ 1855.469985]  loop_configure+0x6ec/0x1950
[ 1855.470857]  ? putname+0xfe/0x140
[ 1855.471612]  lo_ioctl+0x7c5/0x18b0
[ 1855.472370]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1855.473390]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.474355]  ? avc_ss_reset+0x180/0x180
[ 1855.475197]  ? __lock_acquire+0xbac/0x6120
[ 1855.476187]  ? selinux_inode_getsecctx+0x90/0x90
[ 1855.477206]  ? loop_set_status_old+0x1b0/0x1b0
[ 1855.478168]  blkdev_ioctl+0x362/0x7f0
[ 1855.478971]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.479997]  ? __x64_sys_ioctl+0x97/0x210
[ 1855.480882]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1855.482047]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1855.483058]  __x64_sys_ioctl+0x196/0x210
[ 1855.483931]  do_syscall_64+0x3b/0x90
[ 1855.484759]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1855.485851] RIP: 0033:0x7f1f6d99b8d7
[ 1855.486624] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1855.490457] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1855.492078] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1855.493597] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1855.495121] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1855.496654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1855.498179] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1855.499736]  </TASK>
[ 1855.517013] loop4: detected capacity change from 0 to 512
[ 1855.519225] loop6: detected capacity change from 0 to 512
[ 1855.532249] EXT4-fs: Ignoring removed nobh option
[ 1855.543622] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1855.545935] EXT4-fs (loop6): group descriptors corrupted!
[ 1855.625296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:50:30 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)

19:50:30 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0xffffffffffffff01, 0x0, 0x7, 0x1, 0x2}}, 0x208000)
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:50:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sync()

19:50:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 40)

[ 1869.382047] FAULT_INJECTION: forcing a failure.
[ 1869.382047] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.384488] CPU: 0 PID: 11666 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
19:50:30 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 41)

[ 1869.386376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1869.388731] Call Trace:
[ 1869.389229]  <TASK>
[ 1869.389654]  dump_stack_lvl+0x8b/0xb3
[ 1869.390405]  should_fail.cold+0x5/0xa
[ 1869.391147]  ? alloc_unbound_pwq+0x4ad/0xd70
[ 1869.391995]  should_failslab+0x5/0x10
[ 1869.392745]  kmem_cache_alloc_node+0x55/0x490
[ 1869.393612]  ? lock_is_held_type+0xd7/0x130
[ 1869.394448]  alloc_unbound_pwq+0x4ad/0xd70
19:50:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:50:30 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x269c, 0x0, 0x0, 0x0)

[ 1869.395291]  apply_wqattrs_prepare+0x2a4/0x880
[ 1869.396296]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1869.397319]  alloc_workqueue+0xb1a/0xeb0
[ 1869.398124]  ? do_raw_spin_unlock+0x4f/0x210
[ 1869.398997]  ? _raw_spin_unlock+0x24/0x40
[ 1869.399826]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1869.400833]  ? __fget_files+0x28d/0x470
[ 1869.401636]  ? loop_configure+0x62b/0x1950
[ 1869.402482]  loop_configure+0x6ec/0x1950
[ 1869.403298]  ? putname+0xfe/0x140
[ 1869.404000]  lo_ioctl+0x7c5/0x18b0
[ 1869.404716]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1869.405677]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.406593]  ? avc_ss_reset+0x180/0x180
[ 1869.407387]  ? __lock_acquire+0xbac/0x6120
[ 1869.408308]  ? selinux_inode_getsecctx+0x90/0x90
[ 1869.409256]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.410159]  blkdev_ioctl+0x362/0x7f0
[ 1869.410911]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.411842]  ? __x64_sys_ioctl+0x97/0x210
[ 1869.412675]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1869.413763]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.414701]  __x64_sys_ioctl+0x196/0x210
[ 1869.415511]  do_syscall_64+0x3b/0x90
[ 1869.416272]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1869.417294] RIP: 0033:0x7f1f6d99b8d7
[ 1869.418033] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.421657] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1869.423168] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1869.424575] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1869.425950] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1869.427314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1869.428692] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1869.430105]  </TASK>
19:50:30 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="208004008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1869.507628] loop6: detected capacity change from 0 to 512
[ 1869.511225] FAULT_INJECTION: forcing a failure.
[ 1869.511225] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.513575] CPU: 0 PID: 11683 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1869.515476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1869.517706] Call Trace:
[ 1869.518217]  <TASK>
[ 1869.518658]  dump_stack_lvl+0x8b/0xb3
[ 1869.519435]  should_fail.cold+0x5/0xa
[ 1869.520345]  ? create_object.isra.0+0x3a/0xa20
[ 1869.521250]  should_failslab+0x5/0x10
[ 1869.521998]  kmem_cache_alloc+0x69/0x490
[ 1869.522815]  create_object.isra.0+0x3a/0xa20
[ 1869.523672]  ? kasan_unpoison+0x23/0x50
[ 1869.524475]  kmem_cache_alloc_node+0x248/0x490
[ 1869.525393]  alloc_unbound_pwq+0x4ad/0xd70
[ 1869.526258]  apply_wqattrs_prepare+0x2a4/0x880
[ 1869.527181]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1869.528195]  alloc_workqueue+0xb1a/0xeb0
[ 1869.528983]  ? do_raw_spin_unlock+0x4f/0x210
[ 1869.529845]  ? _raw_spin_unlock+0x24/0x40
[ 1869.530686]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1869.531684]  ? __fget_files+0x28d/0x470
[ 1869.532492]  ? loop_configure+0x62b/0x1950
19:50:30 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 1869.533333]  loop_configure+0x6ec/0x1950
[ 1869.534329]  ? putname+0xfe/0x140
[ 1869.535024]  lo_ioctl+0x7c5/0x18b0
[ 1869.535723]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1869.536687]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.537594]  ? avc_ss_reset+0x180/0x180
[ 1869.538392]  ? __lock_acquire+0xbac/0x6120
[ 1869.539304]  ? selinux_inode_getsecctx+0x90/0x90
[ 1869.540263]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.541169]  blkdev_ioctl+0x362/0x7f0
[ 1869.541930]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.542867]  ? __x64_sys_ioctl+0x97/0x210
[ 1869.543695]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1869.544791]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.545736]  __x64_sys_ioctl+0x196/0x210
[ 1869.546546]  do_syscall_64+0x3b/0x90
[ 1869.547297]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1869.548318] RIP: 0033:0x7f1bc92268d7
[ 1869.549045] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.552648] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1869.554124] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1869.555518] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1869.556911] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1869.558302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1869.559690] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1869.561125]  </TASK>
[ 1869.563630] loop5: detected capacity change from 0 to 512
[ 1869.570759] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1869.572752] EXT4-fs (loop6): group descriptors corrupted!
[ 1869.579695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:50:30 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r2, r3, &(0x7f00000000c0)=0x6af, 0x80)
sendfile(r2, r0, 0x0, 0xdb8a)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {r0}}, './file1\x00'})
readahead(r4, 0x8, 0x73e2)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:50:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 41)

19:50:30 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 42)

19:50:30 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2a00, 0x0, 0x0, 0x0)

19:50:30 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1869.768708] FAULT_INJECTION: forcing a failure.
[ 1869.768708] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.771017] CPU: 0 PID: 11695 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1869.772972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1869.775251] Call Trace:
[ 1869.775767]  <TASK>
[ 1869.776226]  dump_stack_lvl+0x8b/0xb3
[ 1869.777009]  should_fail.cold+0x5/0xa
[ 1869.777784]  ? create_object.isra.0+0x3a/0xa20
[ 1869.778703]  should_failslab+0x5/0x10
[ 1869.779470]  kmem_cache_alloc+0x69/0x490
[ 1869.780306]  create_object.isra.0+0x3a/0xa20
[ 1869.781183]  ? kasan_unpoison+0x23/0x50
[ 1869.781979]  kmem_cache_alloc_node+0x248/0x490
[ 1869.782896]  alloc_unbound_pwq+0x4ad/0xd70
[ 1869.783759]  apply_wqattrs_prepare+0x2a4/0x880
[ 1869.784714]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1869.785735]  alloc_workqueue+0xb1a/0xeb0
[ 1869.786559]  ? do_raw_spin_unlock+0x4f/0x210
[ 1869.787439]  ? _raw_spin_unlock+0x24/0x40
[ 1869.788294]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1869.789297]  ? __fget_files+0x28d/0x470
[ 1869.790107]  ? loop_configure+0x62b/0x1950
[ 1869.790956]  loop_configure+0x6ec/0x1950
[ 1869.791788]  ? putname+0xfe/0x140
[ 1869.792521]  lo_ioctl+0x7c5/0x18b0
[ 1869.793240]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1869.794212]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.795135]  ? avc_ss_reset+0x180/0x180
[ 1869.795944]  ? __lock_acquire+0xbac/0x6120
[ 1869.796881]  ? selinux_inode_getsecctx+0x90/0x90
[ 1869.797847]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.798778]  blkdev_ioctl+0x362/0x7f0
[ 1869.799552]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.800519]  ? __x64_sys_ioctl+0x97/0x210
[ 1869.801357]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1869.802463]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.803418]  __x64_sys_ioctl+0x196/0x210
[ 1869.804243]  do_syscall_64+0x3b/0x90
[ 1869.805004]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1869.806040] RIP: 0033:0x7f1f6d99b8d7
19:50:30 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0)

[ 1869.806780] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.810515] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1869.812038] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1869.813446] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1869.814853] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1869.816262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1869.817683] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1869.819123]  </TASK>
19:50:30 executing program 2:
sync()
sync()
sync()
sync()

19:50:30 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:30 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2000, 0x0, 0x0, 0x0)

[ 1869.917281] loop4: detected capacity change from 0 to 512
[ 1869.920004] FAULT_INJECTION: forcing a failure.
[ 1869.920004] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.920259] loop6: detected capacity change from 0 to 512
[ 1869.922519] CPU: 0 PID: 11706 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1869.925433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1869.927638] Call Trace:
[ 1869.927678] EXT4-fs: Ignoring removed nobh option
[ 1869.928165]  <TASK>
[ 1869.928176]  dump_stack_lvl+0x8b/0xb3
[ 1869.930335]  should_fail.cold+0x5/0xa
[ 1869.931102]  ? kobject_uevent_env+0x236/0xfa0
[ 1869.932021]  should_failslab+0x5/0x10
[ 1869.932801]  kmem_cache_alloc_trace+0x55/0x3c0
[ 1869.933696]  ? lock_is_held_type+0xd7/0x130
[ 1869.934552]  kobject_uevent_env+0x236/0xfa0
[ 1869.935405]  ? dev_uevent_filter+0xd0/0xd0
[ 1869.936274]  ? _raw_spin_unlock+0x24/0x40
[ 1869.937097]  disk_event_uevent+0x17b/0x1e0
[ 1869.937923]  ? disk_events_async_show+0x10/0x10
[ 1869.938851]  ? __fget_files+0x28d/0x470
[ 1869.939639]  disk_force_media_change+0x1e/0xc0
[ 1869.940548]  loop_configure+0x75b/0x1950
[ 1869.941358]  ? putname+0xfe/0x140
[ 1869.942059]  lo_ioctl+0x7c5/0x18b0
[ 1869.942760]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1869.943710]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.944628]  ? avc_ss_reset+0x180/0x180
[ 1869.945419]  ? __lock_acquire+0xbac/0x6120
[ 1869.946312]  ? selinux_inode_getsecctx+0x90/0x90
[ 1869.947260]  ? loop_set_status_old+0x1b0/0x1b0
[ 1869.948183]  blkdev_ioctl+0x362/0x7f0
[ 1869.948932]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.949878]  ? __x64_sys_ioctl+0x97/0x210
[ 1869.950681]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1869.951791]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1869.952771]  __x64_sys_ioctl+0x196/0x210
[ 1869.953597]  do_syscall_64+0x3b/0x90
[ 1869.954356]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1869.955355] RIP: 0033:0x7f1bc92268d7
[ 1869.956090] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.959740] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1869.961296] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1869.962723] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1869.964127] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1869.965560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1869.966943] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1869.968365]  </TASK>
[ 1869.973249] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1869.975052] EXT4-fs (loop6): group descriptors corrupted!
[ 1869.982507] loop5: detected capacity change from 0 to 512
[ 1870.026080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1870.066492] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:50:45 executing program 0:
sync()
sync()
sync()
sync()

19:50:45 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0)

[ 1884.289350] FAULT_INJECTION: forcing a failure.
[ 1884.289350] name failslab, interval 1, probability 0, space 0, times 0
[ 1884.290652] CPU: 1 PID: 11734 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1884.291693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1884.292931] Call Trace:
[ 1884.293206]  <TASK>
[ 1884.293441]  dump_stack_lvl+0x8b/0xb3
[ 1884.293859]  should_fail.cold+0x5/0xa
[ 1884.294278]  ? create_object.isra.0+0x3a/0xa20
[ 1884.294778]  should_failslab+0x5/0x10
[ 1884.295185]  kmem_cache_alloc+0x69/0x490
[ 1884.295622]  create_object.isra.0+0x3a/0xa20
[ 1884.296088]  ? kasan_unpoison+0x23/0x50
[ 1884.296515]  kmem_cache_alloc_node+0x248/0x490
[ 1884.297021]  alloc_unbound_pwq+0x4ad/0xd70
[ 1884.297485]  apply_wqattrs_prepare+0x2a4/0x880
[ 1884.297993]  apply_workqueue_attrs_locked+0xc1/0x140
[ 1884.298542]  alloc_workqueue+0xb1a/0xeb0
[ 1884.299163]  ? do_raw_spin_unlock+0x4f/0x210
19:50:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:50:45 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3000, 0x0, 0x0, 0x0)

19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 43)

19:50:45 executing program 2:
sync()
sync()

19:50:45 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 42)

[ 1884.299715]  ? _raw_spin_unlock+0x24/0x40
[ 1884.300313]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 1884.300912]  ? __fget_files+0x28d/0x470
[ 1884.301425]  ? loop_configure+0x62b/0x1950
[ 1884.301875]  loop_configure+0x6ec/0x1950
[ 1884.302307]  ? putname+0xfe/0x140
[ 1884.302794]  lo_ioctl+0x7c5/0x18b0
[ 1884.303278]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1884.303926]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.304523]  ? avc_ss_reset+0x180/0x180
[ 1884.305001]  ? __lock_acquire+0xbac/0x6120
[ 1884.305541]  ? selinux_inode_getsecctx+0x90/0x90
[ 1884.306052]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.306606]  blkdev_ioctl+0x362/0x7f0
[ 1884.307073]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.307679]  ? __x64_sys_ioctl+0x97/0x210
[ 1884.308121]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1884.308717]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.309340]  __x64_sys_ioctl+0x196/0x210
[ 1884.309796]  do_syscall_64+0x3b/0x90
[ 1884.310282]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1884.310944] RIP: 0033:0x7f1f6d99b8d7
[ 1884.311447] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.313638] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1884.314441] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1884.315428] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1884.316350] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1884.317254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1884.318129] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1884.318904]  </TASK>
[ 1884.335483] loop4: detected capacity change from 0 to 512
[ 1884.336975] FAULT_INJECTION: forcing a failure.
[ 1884.336975] name failslab, interval 1, probability 0, space 0, times 0
[ 1884.337387] loop6: detected capacity change from 0 to 512
[ 1884.339208] CPU: 0 PID: 11735 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1884.341653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1884.343888] Call Trace:
[ 1884.344419]  <TASK>
[ 1884.344864]  dump_stack_lvl+0x8b/0xb3
[ 1884.345618]  should_fail.cold+0x5/0xa
[ 1884.346380]  ? create_object.isra.0+0x3a/0xa20
[ 1884.347411]  should_failslab+0x5/0x10
[ 1884.348163]  kmem_cache_alloc+0x69/0x490
[ 1884.349014]  create_object.isra.0+0x3a/0xa20
[ 1884.349886]  ? kasan_unpoison+0x23/0x50
[ 1884.350683]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1884.351616]  kobject_uevent_env+0x236/0xfa0
[ 1884.352516]  ? dev_uevent_filter+0xd0/0xd0
[ 1884.353366]  ? _raw_spin_unlock+0x24/0x40
[ 1884.354210]  disk_event_uevent+0x17b/0x1e0
[ 1884.355080]  ? disk_events_async_show+0x10/0x10
[ 1884.355994]  ? __fget_files+0x28d/0x470
[ 1884.356815]  disk_force_media_change+0x1e/0xc0
[ 1884.357700]  loop_configure+0x75b/0x1950
[ 1884.358517]  ? putname+0xfe/0x140
[ 1884.359219]  lo_ioctl+0x7c5/0x18b0
[ 1884.359924]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1884.360900]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.361811]  ? avc_ss_reset+0x180/0x180
[ 1884.362593]  ? __lock_acquire+0xbac/0x6120
[ 1884.363495]  ? selinux_inode_getsecctx+0x90/0x90
[ 1884.364462]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.365374]  blkdev_ioctl+0x362/0x7f0
[ 1884.366103]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.367033]  ? __x64_sys_ioctl+0x97/0x210
[ 1884.367836]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1884.368953]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.369886]  __x64_sys_ioctl+0x196/0x210
[ 1884.370700]  do_syscall_64+0x3b/0x90
[ 1884.371427]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1884.372460] RIP: 0033:0x7f1bc92268d7
[ 1884.373185] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.376778] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1884.378244] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1884.379633] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1884.381050] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1884.382438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1884.383822] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1884.385267]  </TASK>
19:50:45 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200018008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1884.397189] loop5: detected capacity change from 0 to 512
[ 1884.406074] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1884.408073] EXT4-fs (loop6): group descriptors corrupted!
[ 1884.419827] EXT4-fs: Ignoring removed nobh option
19:50:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1884.522395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1884.530371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:45 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3600, 0x0, 0x0, 0x0)

19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200020008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1884.641545] loop6: detected capacity change from 0 to 512
[ 1884.647736] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1884.648796] EXT4-fs (loop6): group descriptors corrupted!
19:50:45 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 43)

19:50:45 executing program 2:
sync()
sync()
sync()
sync()
sync()
sync()
sync()
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))

19:50:45 executing program 0:
sync()
sync()
sync()
sync()

19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200068008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:50:45 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0)

19:50:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 44)

19:50:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1884.750480] FAULT_INJECTION: forcing a failure.
[ 1884.750480] name failslab, interval 1, probability 0, space 0, times 0
[ 1884.751874] CPU: 1 PID: 11778 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1884.753150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1884.754506] Call Trace:
[ 1884.754844]  <TASK>
[ 1884.755079]  dump_stack_lvl+0x8b/0xb3
[ 1884.755626]  should_fail.cold+0x5/0xa
[ 1884.756139]  ? create_object.isra.0+0x3a/0xa20
[ 1884.756740]  should_failslab+0x5/0x10
[ 1884.757191]  kmem_cache_alloc+0x69/0x490
[ 1884.757730]  create_object.isra.0+0x3a/0xa20
[ 1884.758294]  ? kasan_unpoison+0x23/0x50
[ 1884.758818]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 1884.759444]  kobject_uevent_env+0x236/0xfa0
[ 1884.760018]  ? dev_uevent_filter+0xd0/0xd0
[ 1884.760612]  ? _raw_spin_unlock+0x24/0x40
[ 1884.761186]  disk_event_uevent+0x17b/0x1e0
[ 1884.761757]  ? disk_events_async_show+0x10/0x10
[ 1884.762262]  ? __fget_files+0x28d/0x470
[ 1884.762697]  disk_force_media_change+0x1e/0xc0
[ 1884.763191]  loop_configure+0x75b/0x1950
[ 1884.763635]  ? putname+0xfe/0x140
[ 1884.764013]  lo_ioctl+0x7c5/0x18b0
[ 1884.764429]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1884.765091]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.765700]  ? avc_ss_reset+0x180/0x180
[ 1884.766220]  ? __lock_acquire+0xbac/0x6120
[ 1884.766834]  ? selinux_inode_getsecctx+0x90/0x90
[ 1884.767471]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.768095]  blkdev_ioctl+0x362/0x7f0
[ 1884.768611]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.769260]  ? __x64_sys_ioctl+0x97/0x210
[ 1884.769827]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1884.770553]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.771205]  __x64_sys_ioctl+0x196/0x210
[ 1884.771750]  do_syscall_64+0x3b/0x90
[ 1884.772234]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1884.772942] RIP: 0033:0x7f1f6d99b8d7
[ 1884.773437] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.775361] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1884.776313] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1884.777208] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1884.777985] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1884.778889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1884.779653] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1884.780479]  </TASK>
[ 1884.812849] FAULT_INJECTION: forcing a failure.
[ 1884.812849] name failslab, interval 1, probability 0, space 0, times 0
[ 1884.815362] CPU: 0 PID: 11786 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1884.817395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1884.819637] Call Trace:
[ 1884.820153]  <TASK>
[ 1884.820609]  dump_stack_lvl+0x8b/0xb3
19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200480008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1884.821389]  should_fail.cold+0x5/0xa
[ 1884.822236]  ? kobject_get_path+0xc0/0x1d0
[ 1884.823098]  should_failslab+0x5/0x10
[ 1884.823858]  __kmalloc+0x72/0x440
[ 1884.824583]  kobject_get_path+0xc0/0x1d0
[ 1884.825407]  kobject_uevent_env+0x25c/0xfa0
[ 1884.826289]  ? _raw_spin_unlock+0x24/0x40
[ 1884.827140]  disk_event_uevent+0x17b/0x1e0
[ 1884.827986]  ? disk_events_async_show+0x10/0x10
[ 1884.828928]  ? __fget_files+0x28d/0x470
[ 1884.829730]  disk_force_media_change+0x1e/0xc0
[ 1884.830642]  loop_configure+0x75b/0x1950
[ 1884.831469]  ? putname+0xfe/0x140
[ 1884.832183]  lo_ioctl+0x7c5/0x18b0
[ 1884.832905]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1884.833859]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.834781]  ? avc_ss_reset+0x180/0x180
[ 1884.835580]  ? __lock_acquire+0xbac/0x6120
[ 1884.836511]  ? selinux_inode_getsecctx+0x90/0x90
[ 1884.837466]  ? loop_set_status_old+0x1b0/0x1b0
[ 1884.838379]  blkdev_ioctl+0x362/0x7f0
[ 1884.839126]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.840075]  ? __x64_sys_ioctl+0x97/0x210
[ 1884.840908]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1884.842006]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1884.842940]  __x64_sys_ioctl+0x196/0x210
[ 1884.843761]  do_syscall_64+0x3b/0x90
[ 1884.844524]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1884.845545] RIP: 0033:0x7f1bc92268d7
[ 1884.846277] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.849919] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1884.851417] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1884.852845] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1884.854253] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1884.855650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1884.857088] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1884.858527]  </TASK>
19:50:45 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0)

[ 1884.873793] loop4: detected capacity change from 0 to 512
[ 1884.880402] EXT4-fs: Ignoring removed nobh option
[ 1884.897193] loop6: detected capacity change from 0 to 512
19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffe008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1884.924234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1884.938931] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1884.940361] loop5: detected capacity change from 0 to 512
[ 1884.940780] EXT4-fs (loop6): group descriptors corrupted!
19:50:45 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20feff008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1885.036779] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:51:00 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 45)

19:51:00 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3c00, 0x0, 0x0, 0x0)

19:51:00 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:00 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0)

19:51:00 executing program 2:
sync()
sync()
sync()

19:51:00 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 44)

19:51:00 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200002008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:00 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2000, 0x0, 0x0, 0x0)

[ 1899.929335] loop6: detected capacity change from 0 to 512
[ 1899.937817] FAULT_INJECTION: forcing a failure.
[ 1899.937817] name failslab, interval 1, probability 0, space 0, times 0
[ 1899.939091] CPU: 1 PID: 11825 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1899.940544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1899.942225] Call Trace:
[ 1899.942587]  <TASK>
[ 1899.942928]  dump_stack_lvl+0x8b/0xb3
[ 1899.943400]  should_fail.cold+0x5/0xa
[ 1899.943908]  ? kobject_get_path+0xc0/0x1d0
[ 1899.944369]  should_failslab+0x5/0x10
[ 1899.944877]  __kmalloc+0x72/0x440
[ 1899.945332]  kobject_get_path+0xc0/0x1d0
[ 1899.945788]  kobject_uevent_env+0x25c/0xfa0
[ 1899.946326]  ? _raw_spin_unlock+0x24/0x40
[ 1899.946789]  disk_event_uevent+0x17b/0x1e0
[ 1899.947357]  ? disk_events_async_show+0x10/0x10
[ 1899.947914]  ? __fget_files+0x28d/0x470
[ 1899.948372]  disk_force_media_change+0x1e/0xc0
[ 1899.948878]  loop_configure+0x75b/0x1950
[ 1899.949315]  ? putname+0xfe/0x140
[ 1899.949784]  lo_ioctl+0x7c5/0x18b0
[ 1899.950169]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1899.950680]  ? loop_set_status_old+0x1b0/0x1b0
[ 1899.951173]  ? avc_ss_reset+0x180/0x180
[ 1899.951595]  ? __lock_acquire+0xbac/0x6120
[ 1899.952099]  ? selinux_inode_getsecctx+0x90/0x90
[ 1899.952723]  ? loop_set_status_old+0x1b0/0x1b0
[ 1899.953215]  blkdev_ioctl+0x362/0x7f0
[ 1899.953620]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1899.954185]  ? __x64_sys_ioctl+0x97/0x210
[ 1899.954657]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1899.955331]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1899.955848]  __x64_sys_ioctl+0x196/0x210
[ 1899.956280]  do_syscall_64+0x3b/0x90
[ 1899.956701]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1899.957245] RIP: 0033:0x7f1f6d99b8d7
[ 1899.957629] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1899.959532] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1899.960334] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1899.961096] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1899.961846] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1899.962578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1899.963337] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1899.964101]  </TASK>
[ 1899.978598] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1899.979713] EXT4-fs (loop6): group descriptors corrupted!
[ 1899.985094] FAULT_INJECTION: forcing a failure.
[ 1899.985094] name failslab, interval 1, probability 0, space 0, times 0
[ 1899.986281] CPU: 1 PID: 11828 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1899.987317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1899.988723] Call Trace:
[ 1899.989060]  <TASK>
[ 1899.989349]  dump_stack_lvl+0x8b/0xb3
[ 1899.989834]  should_fail.cold+0x5/0xa
[ 1899.990319]  ? create_object.isra.0+0x3a/0xa20
[ 1899.990881]  should_failslab+0x5/0x10
[ 1899.991305]  kmem_cache_alloc+0x69/0x490
[ 1899.991811]  create_object.isra.0+0x3a/0xa20
[ 1899.992347]  ? kasan_unpoison+0x23/0x50
[ 1899.992874]  __kmalloc+0x25b/0x440
[ 1899.993250]  kobject_get_path+0xc0/0x1d0
[ 1899.993779]  kobject_uevent_env+0x25c/0xfa0
[ 1899.994379]  ? _raw_spin_unlock+0x24/0x40
[ 1899.994902]  disk_event_uevent+0x17b/0x1e0
[ 1899.995376]  ? disk_events_async_show+0x10/0x10
[ 1899.995968]  ? __fget_files+0x28d/0x470
[ 1899.996463]  disk_force_media_change+0x1e/0xc0
[ 1899.997047]  loop_configure+0x75b/0x1950
[ 1899.997576]  ? putname+0xfe/0x140
[ 1899.998044]  lo_ioctl+0x7c5/0x18b0
[ 1899.998437]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1899.999031]  ? loop_set_status_old+0x1b0/0x1b0
[ 1899.999587]  ? avc_ss_reset+0x180/0x180
[ 1900.000085]  ? __lock_acquire+0xbac/0x6120
[ 1900.000671]  ? selinux_inode_getsecctx+0x90/0x90
[ 1900.001282]  ? loop_set_status_old+0x1b0/0x1b0
[ 1900.001854]  blkdev_ioctl+0x362/0x7f0
[ 1900.002346]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1900.002919]  ? __x64_sys_ioctl+0x97/0x210
[ 1900.003388]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1900.004066]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1900.004624]  __x64_sys_ioctl+0x196/0x210
[ 1900.005140]  do_syscall_64+0x3b/0x90
[ 1900.005606]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1900.006237] RIP: 0033:0x7f1bc92268d7
[ 1900.006722] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1900.009011] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1900.009890] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1900.010817] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1900.011655] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1900.012526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1900.013414] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1900.014306]  </TASK>
19:51:01 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1900.158712] loop4: detected capacity change from 0 to 512
[ 1900.160369] EXT4-fs: Ignoring removed nobh option
[ 1900.173022] loop5: detected capacity change from 0 to 512
[ 1900.174798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1900.209297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1900.510213] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:51:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0)

19:51:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 46)

19:51:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 45)

19:51:14 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1913.471969] FAULT_INJECTION: forcing a failure.
[ 1913.471969] name failslab, interval 1, probability 0, space 0, times 0
[ 1913.474306] CPU: 0 PID: 11848 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1913.476179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1913.478368] Call Trace:
[ 1913.478876]  <TASK>
[ 1913.479325]  dump_stack_lvl+0x8b/0xb3
[ 1913.480099]  should_fail.cold+0x5/0xa
[ 1913.480867]  ? create_object.isra.0+0x3a/0xa20
[ 1913.481782]  should_failslab+0x5/0x10
[ 1913.482534]  kmem_cache_alloc+0x69/0x490
[ 1913.483351]  create_object.isra.0+0x3a/0xa20
[ 1913.484217]  ? kasan_unpoison+0x23/0x50
[ 1913.485029]  __kmalloc+0x25b/0x440
[ 1913.485745]  kobject_get_path+0xc0/0x1d0
[ 1913.486554]  kobject_uevent_env+0x25c/0xfa0
[ 1913.487036] loop6: detected capacity change from 0 to 512
19:51:14 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3f00, 0x0, 0x0, 0x0)

19:51:14 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1200, 0x0, 0x0, 0x0)

19:51:14 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200004008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:14 executing program 2:
sync()
sync()

[ 1913.487420]  ? _raw_spin_unlock+0x24/0x40
[ 1913.487470]  disk_event_uevent+0x17b/0x1e0
[ 1913.489949]  ? disk_events_async_show+0x10/0x10
[ 1913.490862]  ? __fget_files+0x28d/0x470
[ 1913.491656]  disk_force_media_change+0x1e/0xc0
[ 1913.492563]  loop_configure+0x75b/0x1950
[ 1913.493389]  lo_ioctl+0x7c5/0x18b0
[ 1913.494087]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1913.495044]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.495944]  ? avc_ss_reset+0x180/0x180
[ 1913.496730]  ? __lock_acquire+0xbac/0x6120
[ 1913.497594]  ? lock_is_held_type+0xd7/0x130
[ 1913.498472]  ? selinux_inode_getsecctx+0x90/0x90
[ 1913.499412]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.500323]  blkdev_ioctl+0x362/0x7f0
[ 1913.501092]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.502015]  ? __x64_sys_ioctl+0x97/0x210
[ 1913.502834]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1913.503921]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.504893]  __x64_sys_ioctl+0x196/0x210
[ 1913.505711]  do_syscall_64+0x3b/0x90
[ 1913.506488]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1913.507507] RIP: 0033:0x7f1f6d99b8d7
[ 1913.508276] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1913.511932] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1913.513472] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1913.514883] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1913.516286] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1913.517692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1913.519096] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1913.520527]  </TASK>
[ 1913.528412] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1913.529755] EXT4-fs (loop6): group descriptors corrupted!
[ 1913.557601] FAULT_INJECTION: forcing a failure.
[ 1913.557601] name failslab, interval 1, probability 0, space 0, times 0
[ 1913.561095] CPU: 0 PID: 11859 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1913.563248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1913.565645] Call Trace:
[ 1913.566192]  <TASK>
[ 1913.566635]  dump_stack_lvl+0x8b/0xb3
[ 1913.567430]  should_fail.cold+0x5/0xa
[ 1913.568209]  ? __alloc_skb+0x211/0x340
[ 1913.569012]  should_failslab+0x5/0x10
[ 1913.569766]  kmem_cache_alloc_node+0x55/0x490
[ 1913.570680]  __alloc_skb+0x211/0x340
[ 1913.571445]  alloc_uevent_skb+0x7b/0x210
[ 1913.572283]  kobject_uevent_env+0xaa4/0xfa0
[ 1913.573185]  ? _raw_spin_unlock+0x24/0x40
[ 1913.574049]  disk_event_uevent+0x17b/0x1e0
[ 1913.574925]  ? disk_events_async_show+0x10/0x10
[ 1913.575890]  ? __fget_files+0x28d/0x470
[ 1913.576718]  disk_force_media_change+0x1e/0xc0
[ 1913.577682]  loop_configure+0x75b/0x1950
[ 1913.578539]  lo_ioctl+0x7c5/0x18b0
[ 1913.579269]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1913.580270]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.581231]  ? avc_ss_reset+0x180/0x180
[ 1913.582070]  ? __lock_acquire+0xbac/0x6120
[ 1913.582982]  ? selinux_inode_getsecctx+0x90/0x90
[ 1913.583935]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.584852]  blkdev_ioctl+0x362/0x7f0
[ 1913.585606]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.586541]  ? __x64_sys_ioctl+0x97/0x210
[ 1913.587362]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1913.588451]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.589414]  __x64_sys_ioctl+0x196/0x210
[ 1913.590232]  do_syscall_64+0x3b/0x90
[ 1913.590981]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1913.592002] RIP: 0033:0x7f1bc92268d7
[ 1913.592730] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1913.596362] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1913.597862] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1913.599263] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1913.600666] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1913.602091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1913.603491] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1913.604965]  </TASK>
19:51:14 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:14 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:14 executing program 0:
sync()
sync()

19:51:14 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x6000, 0x0, 0x0, 0x0)

19:51:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

19:51:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0)

[ 1913.803774] loop6: detected capacity change from 0 to 512
[ 1913.804449] loop4: detected capacity change from 0 to 512
[ 1913.807298] EXT4-fs: Ignoring removed nobh option
[ 1913.837591] loop5: detected capacity change from 0 to 512
[ 1913.845551] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1913.846556] EXT4-fs (loop6): group descriptors corrupted!
19:51:14 executing program 2:
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd70005694e196f3b7927579c6669fc96d5789ffdbdf25110000000c00060002000000020000000c0006000100000001000000050012000700000005001200060000000c000600030000000000000005001200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)
sync()
sync()
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)

19:51:14 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:14 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1913.883090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1913.897594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1913.915406] loop6: detected capacity change from 0 to 512
19:51:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 47)

[ 1913.940799] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1913.941822] EXT4-fs (loop6): group descriptors corrupted!
[ 1913.963885] FAULT_INJECTION: forcing a failure.
[ 1913.963885] name failslab, interval 1, probability 0, space 0, times 0
[ 1913.965174] CPU: 1 PID: 11890 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1913.966214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1913.967435] Call Trace:
[ 1913.967712]  <TASK>
[ 1913.967945]  dump_stack_lvl+0x8b/0xb3
[ 1913.968370]  should_fail.cold+0x5/0xa
[ 1913.968787]  ? create_object.isra.0+0x3a/0xa20
[ 1913.969292]  should_failslab+0x5/0x10
[ 1913.969701]  kmem_cache_alloc+0x69/0x490
[ 1913.970148]  create_object.isra.0+0x3a/0xa20
[ 1913.970621]  ? kasan_unpoison+0x23/0x50
[ 1913.971060]  kmem_cache_alloc_node+0x248/0x490
[ 1913.971561]  __alloc_skb+0x211/0x340
[ 1913.971974]  alloc_uevent_skb+0x7b/0x210
[ 1913.972427]  kobject_uevent_env+0xaa4/0xfa0
[ 1913.972905]  ? _raw_spin_unlock+0x24/0x40
[ 1913.973364]  disk_event_uevent+0x17b/0x1e0
[ 1913.973787]  ? disk_events_async_show+0x10/0x10
[ 1913.974296]  ? __fget_files+0x28d/0x470
[ 1913.974731]  disk_force_media_change+0x1e/0xc0
[ 1913.975243]  loop_configure+0x75b/0x1950
[ 1913.975690]  ? putname+0xfe/0x140
[ 1913.976079]  lo_ioctl+0x7c5/0x18b0
[ 1913.976471]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1913.976974]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.977476]  ? avc_ss_reset+0x180/0x180
[ 1913.977912]  ? __lock_acquire+0xbac/0x6120
[ 1913.978419]  ? selinux_inode_getsecctx+0x90/0x90
[ 1913.978950]  ? loop_set_status_old+0x1b0/0x1b0
[ 1913.979456]  blkdev_ioctl+0x362/0x7f0
[ 1913.979878]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.980394]  ? __x64_sys_ioctl+0x97/0x210
[ 1913.980864]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1913.981468]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1913.981986]  __x64_sys_ioctl+0x196/0x210
[ 1913.982439]  do_syscall_64+0x3b/0x90
[ 1913.982856]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1913.983428] RIP: 0033:0x7f1bc92268d7
[ 1913.983829] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1913.985840] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1913.986674] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1913.987454] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1913.988237] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1913.989021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1913.989792] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1913.990582]  </TASK>
[ 1914.028404] loop5: detected capacity change from 0 to 512
[ 1914.104368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
19:51:27 executing program 2:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @hci={0x1f, 0x0, 0x3}, @nfc={0x27, 0x0, 0x2, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='macsec0\x00', 0x5, 0x10001, 0x4})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x3, 'batadv_slave_0\x00', {0xc0c}, 0x1})
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r1=>0x0, @ANYBLOB="004000100010000500000020469500180067000040299078ac1414bb0000000001010100"]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'batadv0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', r1, 0x1, 0x700, 0x6, 0x80000000, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @local, {[@timestamp={0x44, 0x28, 0x46, 0x0, 0xd, [0x7fffffff, 0x1, 0xe0c5, 0x8c, 0x3, 0x2, 0x6, 0x8, 0x6]}, @end]}}}}})

19:51:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
sync()
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'net\x00'}, {0x20, 'net\x00'}, {0x20, '#'}, {0x20, '.'}, {0x20, 'net\x00'}, {0x20, 'net\x00'}, {0x20, '[-]@'}, {0x20, '.l)'}, {0x20, '$'}], 0xa, "a09b5944517a514d02984f0f80950b01be8da8a39ce44eb3fd90cca73c030bf212758731b9c365aec76733792174fe6898554460b02597aad585a655ffce85c36df8092357d452ba449abf544865e1"}, 0x7d)

19:51:27 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 46)

[ 1926.996493] FAULT_INJECTION: forcing a failure.
[ 1926.996493] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.997703] CPU: 1 PID: 11909 Comm: syz-executor.5 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1926.998687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1926.999807] Call Trace:
[ 1927.000068]  <TASK>
[ 1927.000295]  dump_stack_lvl+0x8b/0xb3
[ 1927.000694]  should_fail.cold+0x5/0xa
[ 1927.001102]  should_failslab+0x5/0x10
[ 1927.001486]  __kmalloc_node_track_caller+0x7e/0x440
[ 1927.001992]  ? alloc_uevent_skb+0x7b/0x210
[ 1927.002434]  __alloc_skb+0xe3/0x340
[ 1927.002803]  alloc_uevent_skb+0x7b/0x210
[ 1927.003220]  kobject_uevent_env+0xaa4/0xfa0
[ 1927.003660]  ? _raw_spin_unlock+0x24/0x40
[ 1927.004095]  disk_event_uevent+0x17b/0x1e0
[ 1927.004524]  ? disk_events_async_show+0x10/0x10
[ 1927.005012]  ? __fget_files+0x28d/0x470
[ 1927.005430]  disk_force_media_change+0x1e/0xc0
[ 1927.005895]  loop_configure+0x75b/0x1950
[ 1927.006316]  ? putname+0xfe/0x140
[ 1927.006703]  lo_ioctl+0x7c5/0x18b0
[ 1927.007084]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1927.007603]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.008097]  ? avc_ss_reset+0x180/0x180
[ 1927.008534]  ? __lock_acquire+0xbac/0x6120
[ 1927.009019]  ? selinux_inode_getsecctx+0x90/0x90
[ 1927.009537]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.010041]  blkdev_ioctl+0x362/0x7f0
[ 1927.010447]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.011004]  ? __x64_sys_ioctl+0x97/0x210
[ 1927.011659]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1927.012260]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.012828]  __x64_sys_ioctl+0x196/0x210
[ 1927.013356]  do_syscall_64+0x3b/0x90
[ 1927.013864]  entry_SYSCALL_64_after_hwframe+0x44/0xae
19:51:27 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:27 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:27 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x9c26, 0x0, 0x0, 0x0)

19:51:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 48)

19:51:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0)

[ 1927.014659] RIP: 0033:0x7f1bc92268d7
[ 1927.015114] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1927.017535] RSP: 002b:00007f1bc679bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1927.018501] RAX: ffffffffffffffda RBX: 00007f1bc9270970 RCX: 00007f1bc92268d7
[ 1927.019423] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1927.020332] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1927.021101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1927.021849] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1927.022780]  </TASK>
[ 1927.032035] loop5: detected capacity change from 0 to 512
[ 1927.034934] loop6: detected capacity change from 0 to 512
[ 1927.044449] FAULT_INJECTION: forcing a failure.
[ 1927.044449] name failslab, interval 1, probability 0, space 0, times 0
[ 1927.045756] CPU: 1 PID: 11918 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1927.046884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1927.048014] Call Trace:
[ 1927.048276]  <TASK>
[ 1927.048509]  dump_stack_lvl+0x8b/0xb3
[ 1927.048903]  should_fail.cold+0x5/0xa
[ 1927.049319]  ? __alloc_skb+0x211/0x340
[ 1927.049720]  should_failslab+0x5/0x10
[ 1927.050103]  kmem_cache_alloc_node+0x55/0x490
[ 1927.050585]  __alloc_skb+0x211/0x340
[ 1927.050985]  alloc_uevent_skb+0x7b/0x210
[ 1927.051440]  kobject_uevent_env+0xaa4/0xfa0
[ 1927.051885]  ? _raw_spin_unlock+0x24/0x40
[ 1927.052341]  disk_event_uevent+0x17b/0x1e0
[ 1927.052800]  ? disk_events_async_show+0x10/0x10
[ 1927.053324]  ? __fget_files+0x28d/0x470
[ 1927.053750]  disk_force_media_change+0x1e/0xc0
[ 1927.054234]  loop_configure+0x75b/0x1950
[ 1927.054669]  ? putname+0xfe/0x140
[ 1927.055044]  lo_ioctl+0x7c5/0x18b0
[ 1927.055437]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1927.055943]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.056412]  ? avc_ss_reset+0x180/0x180
[ 1927.056841]  ? __lock_acquire+0xbac/0x6120
[ 1927.057330]  ? selinux_inode_getsecctx+0x90/0x90
[ 1927.057826]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.058325]  blkdev_ioctl+0x362/0x7f0
[ 1927.058708]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.059183]  ? __x64_sys_ioctl+0x97/0x210
[ 1927.059604]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1927.060155]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.060635]  __x64_sys_ioctl+0x196/0x210
[ 1927.061055]  do_syscall_64+0x3b/0x90
[ 1927.061444]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1927.061957] RIP: 0033:0x7f1f6d99b8d7
[ 1927.062326] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1927.064210] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1927.064987] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1927.065739] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1927.066498] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1927.067251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1927.068001] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1927.068773]  </TASK>
[ 1927.074749] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1927.075724] EXT4-fs (loop6): group descriptors corrupted!
19:51:28 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200008008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:28 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x500, 0x0, 0x0, 0x0)

19:51:28 executing program 2:
sync()
sync()

[ 1927.142711] loop4: detected capacity change from 0 to 512
[ 1927.146408] EXT4-fs: Ignoring removed nobh option
19:51:28 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'sit0\x00', <r5=>0x0, 0x0, 0x96, 0x90, 0x9, 0x20, @private2, @private0, 0x7, 0x80, 0x0, 0x80}})
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'sit0\x00', <r9=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev, r9}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r10=>0x0, 0x29, 0x7f, 0x3, 0x3, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x7800, 0x6, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl2\x00', <r11=>0x0, 0x8000, 0x91, 0x1, 0xf601, {{0x12, 0x4, 0x2, 0x22, 0x48, 0x65, 0x0, 0x86, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0x9, [@rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x94, 0x0, 0xd, [0x400, 0x3, 0x6, 0x5, 0x5, 0x0]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r12=>0x0, 0x2f, 0x8, 0x5, 0x6, 0x50, @local, @mcast1, 0x80, 0x80, 0x20, 0x6}})
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000005c0)={@remote, <r13=>0x0}, &(0x7f0000000600)=0x14)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000640)={0x664, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x25, 0x1f, 0x7}, {0x6, 0x81, 0x0, 0x7fff}, {0x13, 0x2, 0x6b, 0xfff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3cbb}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x40004000}, 0x8000000)
read(r1, &(0x7f0000000040)=""/117, 0x75)

[ 1927.177554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1927.179309] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:51:28 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]}) (fail_nth: 49)

19:51:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 47)

19:51:28 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1927.281609] FAULT_INJECTION: forcing a failure.
[ 1927.281609] name failslab, interval 1, probability 0, space 0, times 0
[ 1927.283143] CPU: 1 PID: 11939 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1927.284343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1927.285888] Call Trace:
[ 1927.286208]  <TASK>
[ 1927.286510]  dump_stack_lvl+0x8b/0xb3
[ 1927.286991]  should_fail.cold+0x5/0xa
[ 1927.287490]  ? __alloc_skb+0x211/0x340
[ 1927.288043]  should_failslab+0x5/0x10
[ 1927.288533]  kmem_cache_alloc_node+0x55/0x490
[ 1927.289132]  __alloc_skb+0x211/0x340
[ 1927.289572]  alloc_uevent_skb+0x7b/0x210
[ 1927.290111]  kobject_uevent_env+0xaa4/0xfa0
[ 1927.290691]  ? _raw_spin_unlock+0x24/0x40
[ 1927.291241]  disk_event_uevent+0x17b/0x1e0
[ 1927.291765]  ? disk_events_async_show+0x10/0x10
[ 1927.292384]  ? __fget_files+0x28d/0x470
[ 1927.292884]  disk_force_media_change+0x1e/0xc0
[ 1927.293430]  loop_configure+0x75b/0x1950
[ 1927.293968]  ? putname+0xfe/0x140
[ 1927.294421]  lo_ioctl+0x7c5/0x18b0
[ 1927.294902]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1927.295480]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.296052]  ? avc_ss_reset+0x180/0x180
[ 1927.296551]  ? __lock_acquire+0xbac/0x6120
[ 1927.297134]  ? selinux_inode_getsecctx+0x90/0x90
[ 1927.297719]  ? loop_set_status_old+0x1b0/0x1b0
[ 1927.298276]  blkdev_ioctl+0x362/0x7f0
[ 1927.298711]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.299261]  ? __x64_sys_ioctl+0x97/0x210
[ 1927.299787]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1927.300451]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1927.301099]  __x64_sys_ioctl+0x196/0x210
[ 1927.301611]  do_syscall_64+0x3b/0x90
[ 1927.302125]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1927.302764] RIP: 0033:0x7f1f6d99b8d7
[ 1927.303242] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1927.305322] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1927.306278] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1927.307137] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1927.307995] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1927.308922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1927.309768] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1927.310692]  </TASK>
19:51:28 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xad01, 0x0, 0x0, 0x0)

[ 1927.409545] loop6: detected capacity change from 0 to 512
[ 1927.413478] loop4: detected capacity change from 0 to 512
[ 1927.414103] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1927.425475] EXT4-fs: Ignoring removed nobh option
[ 1927.458423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1927.697232] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[ 1927.711444] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:51:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 48)

19:51:40 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:40 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200018008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:40 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:40 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x9c26, 0x0, 0x0, 0x0)

19:51:40 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

19:51:40 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc00c, 0x0, 0x0, 0x0)

19:51:40 executing program 2:
sync()
sync()

[ 1939.942480] loop5: detected capacity change from 0 to 512
[ 1939.944945] loop6: detected capacity change from 0 to 512
[ 1939.962882] FAULT_INJECTION: forcing a failure.
[ 1939.962882] name failslab, interval 1, probability 0, space 0, times 0
[ 1939.964252] CPU: 1 PID: 11971 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1939.965274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1939.966451] Call Trace:
[ 1939.966717]  <TASK>
[ 1939.966956]  dump_stack_lvl+0x8b/0xb3
[ 1939.967374]  should_fail.cold+0x5/0xa
[ 1939.967773]  should_failslab+0x5/0x10
[ 1939.968173]  __kmalloc_node_track_caller+0x7e/0x440
[ 1939.968689]  ? alloc_uevent_skb+0x7b/0x210
[ 1939.969136]  __alloc_skb+0xe3/0x340
[ 1939.969535]  alloc_uevent_skb+0x7b/0x210
[ 1939.969966]  kobject_uevent_env+0xaa4/0xfa0
[ 1939.970424]  ? _raw_spin_unlock+0x24/0x40
[ 1939.970866]  disk_event_uevent+0x17b/0x1e0
[ 1939.971285]  ? disk_events_async_show+0x10/0x10
[ 1939.971778]  ? __fget_files+0x28d/0x470
[ 1939.972208]  disk_force_media_change+0x1e/0xc0
[ 1939.972695]  loop_configure+0x75b/0x1950
[ 1939.973135]  ? putname+0xfe/0x140
[ 1939.973542]  lo_ioctl+0x7c5/0x18b0
[ 1939.973923]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1939.974451]  ? loop_set_status_old+0x1b0/0x1b0
[ 1939.974939]  ? avc_ss_reset+0x180/0x180
[ 1939.975372]  ? __lock_acquire+0xbac/0x6120
[ 1939.975860]  ? selinux_inode_getsecctx+0x90/0x90
[ 1939.976376]  ? loop_set_status_old+0x1b0/0x1b0
[ 1939.976865]  blkdev_ioctl+0x362/0x7f0
[ 1939.977275]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1939.977790]  ? __x64_sys_ioctl+0x97/0x210
[ 1939.978247]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1939.978832]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1939.979335]  __x64_sys_ioctl+0x196/0x210
[ 1939.979787]  do_syscall_64+0x3b/0x90
[ 1939.980184]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1939.980733] RIP: 0033:0x7f1f6d99b8d7
[ 1939.981100] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1939.983065] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1939.983817] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1939.984571] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1939.985276] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1939.986025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1939.986710] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1939.987485]  </TASK>
19:51:40 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

19:51:40 executing program 0:
sync()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0)
sync()
sync()
sync()

[ 1940.079335] loop4: detected capacity change from 0 to 512
[ 1940.096212] EXT4-fs: Ignoring removed nobh option
19:51:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1940.104032] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1940.133372] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1940.144702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1940.618352] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:51:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

19:51:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200068008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:53 executing program 0:
sync()
sync()

19:51:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 49)

19:51:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8dc5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:53 executing program 2:
ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x1f, 0x2, 0x6, 0x7, 0x9c, 0xbe})
sync()
sync()

19:51:53 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xf000, 0x0, 0x0, 0x0)

[ 1952.707202] loop5: detected capacity change from 0 to 70
[ 1952.712552] FAULT_INJECTION: forcing a failure.
[ 1952.712552] name failslab, interval 1, probability 0, space 0, times 0
[ 1952.713840] CPU: 0 PID: 12001 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1952.714852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1952.716029] Call Trace:
[ 1952.716300]  <TASK>
[ 1952.716545]  dump_stack_lvl+0x8b/0xb3
[ 1952.716957]  should_fail.cold+0x5/0xa
[ 1952.717367]  ? create_object.isra.0+0x3a/0xa20
[ 1952.717867]  should_failslab+0x5/0x10
[ 1952.718274]  kmem_cache_alloc+0x69/0x490
[ 1952.718708]  create_object.isra.0+0x3a/0xa20
[ 1952.719160]  ? kasan_unpoison+0x23/0x50
[ 1952.719588]  __kmalloc_node_track_caller+0x269/0x440
[ 1952.720121]  ? alloc_uevent_skb+0x7b/0x210
[ 1952.720570]  __alloc_skb+0xe3/0x340
[ 1952.720952]  alloc_uevent_skb+0x7b/0x210
[ 1952.721383]  kobject_uevent_env+0xaa4/0xfa0
[ 1952.721847]  ? _raw_spin_unlock+0x24/0x40
[ 1952.722301]  disk_event_uevent+0x17b/0x1e0
[ 1952.722756]  ? disk_events_async_show+0x10/0x10
[ 1952.723255]  ? __fget_files+0x28d/0x470
[ 1952.723681]  disk_force_media_change+0x1e/0xc0
[ 1952.724156]  loop_configure+0x75b/0x1950
[ 1952.724599]  ? putname+0xfe/0x140
[ 1952.724982]  lo_ioctl+0x7c5/0x18b0
[ 1952.725367]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1952.725895]  ? loop_set_status_old+0x1b0/0x1b0
[ 1952.726383]  ? avc_ss_reset+0x180/0x180
[ 1952.726814]  ? __lock_acquire+0xbac/0x6120
[ 1952.727315]  ? selinux_inode_getsecctx+0x90/0x90
[ 1952.727832]  ? loop_set_status_old+0x1b0/0x1b0
[ 1952.728323]  blkdev_ioctl+0x362/0x7f0
[ 1952.728730]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1952.729219]  ? __x64_sys_ioctl+0x97/0x210
[ 1952.729685]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1952.730274]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1952.730782]  __x64_sys_ioctl+0x196/0x210
[ 1952.731218]  do_syscall_64+0x3b/0x90
[ 1952.731628]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1952.732189] RIP: 0033:0x7f1f6d99b8d7
[ 1952.732590] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1952.734738] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1952.735518] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1952.736279] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1952.737037] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1952.737789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1952.738536] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1952.739320]  </TASK>
[ 1952.741075] loop4: detected capacity change from 0 to 512
[ 1952.742343] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1952.744913] EXT4-fs: Ignoring removed nobh option
[ 1952.752716] loop5: detected capacity change from 0 to 70
[ 1952.767463] loop6: detected capacity change from 0 to 512
[ 1952.806833] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1952.825080] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:51:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000fe008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1952.872315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:51:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

19:51:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8dc6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:51:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 50)

19:51:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:51:54 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

19:51:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000038000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1953.096086] loop5: detected capacity change from 0 to 70
19:51:54 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x100000, 0x0, 0x0, 0x0)

19:51:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0xfffffffffffffff8)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
r2 = dup3(0xffffffffffffffff, r1, 0xa96e99bf0fce90c3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
dup2(r2, r3)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="4360b663", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf250e0000008c0002801c0003800800010005000000080001000000010008000100010000002c0003800800010008000000080001000002000008000200050000000800020007000000080002000900000004000400080002000600000008000200040000002c000380080001000600000008000200090000000800010006000000080002000500000008000200060000000c00038008000200060000005c0006804100040067636d286165732900000000000000000000000000000000000000000000000019000000293e9eb8523746565c0e13fb112ede29f51a02f7e72258905100000008000100890000000600030093c90000040002003401058054000280080003003b010000080004000300000008000300040000000800020009000000080001000b0000000800030003000000080004000100000008000200070000000800020008000000080002000300000044000280080004000100000008000300070000000800030007000000080004000500000008000200000000000800010009000000080002008000000008000300030000005400028008000300ffff0000080001000c000000080001000e0000000800030006000000080001000800000008000400710e0000080001000e0000000800030003000000080002008737000008000400fbffffff08000100657468003c000280080003000000010008000300020000000800030000000100080004000100000008000400200000000800040002000000080001001b0000009c00048014000780080004000180000008000200ffffff7f1300010062726f6164636173742d6c696e6b00002c0007800800010012000000080004000400000008000200070000000800010008000000080001000c0000002400078008000100140000000800040001000080080001001400000008000400050000001300010062726f6164636173742d6c696e6b00000c000780080004009b7c0000680007800c000300ce54000000000000000c000300001000000000000008000100000000800c000300030000000000000008000100000400000800020006000000080001000500000008000100000000000c0003000100000000000000"], 0x340}, 0x1, 0x0, 0x0, 0x400}, 0x200009d0)
sync()
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000400)={0x25, 0xb, 0x12, 0x19, 0x4, 0x6, 0x1, 0xb9, 0xffffffffffffffff})

19:51:54 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1953.135868] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1953.146395] loop6: detected capacity change from 0 to 512
[ 1953.170482] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1953.188819] FAULT_INJECTION: forcing a failure.
[ 1953.188819] name failslab, interval 1, probability 0, space 0, times 0
[ 1953.191211] CPU: 0 PID: 12036 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1953.193098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1953.195309] Call Trace:
[ 1953.195807]  <TASK>
[ 1953.196248]  dump_stack_lvl+0x8b/0xb3
[ 1953.197012]  should_fail.cold+0x5/0xa
[ 1953.197800]  ? skb_clone+0x170/0x3c0
[ 1953.198684]  should_failslab+0x5/0x10
[ 1953.199635]  kmem_cache_alloc+0x69/0x490
[ 1953.200554]  skb_clone+0x170/0x3c0
[ 1953.201351]  netlink_broadcast+0x9ae/0xd60
[ 1953.202317]  ? alloc_uevent_skb+0x1c2/0x210
[ 1953.203288]  kobject_uevent_env+0xa6b/0xfa0
[ 1953.204258]  ? _raw_spin_unlock+0x24/0x40
[ 1953.205200]  disk_event_uevent+0x17b/0x1e0
[ 1953.206165]  ? disk_events_async_show+0x10/0x10
[ 1953.207229]  ? __fget_files+0x28d/0x470
[ 1953.208139]  disk_force_media_change+0x1e/0xc0
[ 1953.209172]  loop_configure+0x75b/0x1950
[ 1953.210112]  ? putname+0xfe/0x140
[ 1953.210917]  lo_ioctl+0x7c5/0x18b0
[ 1953.211716]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1953.212797]  ? loop_set_status_old+0x1b0/0x1b0
[ 1953.213837]  ? avc_ss_reset+0x180/0x180
[ 1953.214737]  ? __lock_acquire+0xbac/0x6120
[ 1953.215762]  ? selinux_inode_getsecctx+0x90/0x90
[ 1953.216843]  ? loop_set_status_old+0x1b0/0x1b0
[ 1953.217890]  blkdev_ioctl+0x362/0x7f0
[ 1953.218750]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1953.219814]  ? __x64_sys_ioctl+0x97/0x210
[ 1953.220754]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1953.222021]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1953.223090]  __x64_sys_ioctl+0x196/0x210
[ 1953.224016]  do_syscall_64+0x3b/0x90
[ 1953.224872]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1953.226039] RIP: 0033:0x7f1f6d99b8d7
[ 1953.226872] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1953.231018] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1953.232736] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1953.234372] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1953.235999] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1953.237638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1953.239265] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1953.240936]  </TASK>
19:51:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200080048000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1953.243615] loop0: detected capacity change from 0 to 512
[ 1953.245148] loop4: detected capacity change from 0 to 512
[ 1953.247942] EXT4-fs: Ignoring removed nobh option
[ 1953.265769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1953.288356] loop5: detected capacity change from 0 to 70
[ 1953.290428] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1953.292566] EXT4-fs (loop0): group descriptors corrupted!
[ 1953.311592] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
19:52:07 executing program 2:
sync()
sync()
sync()

19:52:07 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x24, 0x0, 0x0, 0x0)

19:52:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

19:52:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000058000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:08 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x600000, 0x0, 0x0, 0x0)

19:52:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:52:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 51)

[ 1967.065666] FAULT_INJECTION: forcing a failure.
[ 1967.065666] name failslab, interval 1, probability 0, space 0, times 0
[ 1967.067029] CPU: 1 PID: 12055 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1967.068085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1967.069322] Call Trace:
[ 1967.069597]  <TASK>
[ 1967.069861]  dump_stack_lvl+0x8b/0xb3
[ 1967.070295]  should_fail.cold+0x5/0xa
[ 1967.070720]  ? create_object.isra.0+0x3a/0xa20
[ 1967.071227]  should_failslab+0x5/0x10
[ 1967.071649]  kmem_cache_alloc+0x69/0x490
[ 1967.072102]  create_object.isra.0+0x3a/0xa20
[ 1967.072588]  ? kasan_unpoison+0x23/0x50
[ 1967.073033]  kmem_cache_alloc+0x244/0x490
[ 1967.073493]  skb_clone+0x170/0x3c0
[ 1967.073899]  netlink_broadcast+0x9ae/0xd60
[ 1967.074372]  ? alloc_uevent_skb+0x1c2/0x210
[ 1967.074857]  kobject_uevent_env+0xa6b/0xfa0
[ 1967.075341]  ? _raw_spin_unlock+0x24/0x40
[ 1967.075801]  disk_event_uevent+0x17b/0x1e0
[ 1967.076260]  ? disk_events_async_show+0x10/0x10
[ 1967.076759]  ? __fget_files+0x28d/0x470
[ 1967.077202]  disk_force_media_change+0x1e/0xc0
[ 1967.077722]  loop_configure+0x75b/0x1950
[ 1967.078179]  ? putname+0xfe/0x140
[ 1967.078566]  lo_ioctl+0x7c5/0x18b0
[ 1967.078953]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1967.079478]  ? loop_set_status_old+0x1b0/0x1b0
[ 1967.079967]  ? avc_ss_reset+0x180/0x180
[ 1967.080406]  ? __lock_acquire+0xbac/0x6120
[ 1967.080902]  ? selinux_inode_getsecctx+0x90/0x90
[ 1967.081435]  ? loop_set_status_old+0x1b0/0x1b0
[ 1967.081955]  blkdev_ioctl+0x362/0x7f0
[ 1967.082378]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1967.082892]  ? __x64_sys_ioctl+0x97/0x210
[ 1967.083344]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1967.083932]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1967.084446]  __x64_sys_ioctl+0x196/0x210
[ 1967.084899]  do_syscall_64+0x3b/0x90
[ 1967.085313]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1967.085853] RIP: 0033:0x7f1f6d99b8d7
[ 1967.086249] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1967.088242] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1967.089056] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1967.089840] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1967.090613] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1967.091383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1967.092139] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1967.092921]  </TASK>
[ 1967.096552] loop6: detected capacity change from 0 to 512
[ 1967.111196] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1967.117371] loop5: detected capacity change from 0 to 71
19:52:08 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1967.161815] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1967.162053] loop4: detected capacity change from 0 to 512
[ 1967.178066] loop5: detected capacity change from 0 to 71
19:52:08 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0xfffffffffffffff8)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
r2 = dup3(0xffffffffffffffff, r1, 0xa96e99bf0fce90c3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
dup2(r2, r3)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="4360b663", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf250e0000008c0002801c0003800800010005000000080001000000010008000100010000002c0003800800010008000000080001000002000008000200050000000800020007000000080002000900000004000400080002000600000008000200040000002c000380080001000600000008000200090000000800010006000000080002000500000008000200060000000c00038008000200060000005c0006804100040067636d286165732900000000000000000000000000000000000000000000000019000000293e9eb8523746565c0e13fb112ede29f51a02f7e72258905100000008000100890000000600030093c90000040002003401058054000280080003003b010000080004000300000008000300040000000800020009000000080001000b0000000800030003000000080004000100000008000200070000000800020008000000080002000300000044000280080004000100000008000300070000000800030007000000080004000500000008000200000000000800010009000000080002008000000008000300030000005400028008000300ffff0000080001000c000000080001000e0000000800030006000000080001000800000008000400710e0000080001000e0000000800030003000000080002008737000008000400fbffffff08000100657468003c000280080003000000010008000300020000000800030000000100080004000100000008000400200000000800040002000000080001001b0000009c00048014000780080004000180000008000200ffffff7f1300010062726f6164636173742d6c696e6b00002c0007800800010012000000080004000400000008000200070000000800010008000000080001000c0000002400078008000100140000000800040001000080080001001400000008000400050000001300010062726f6164636173742d6c696e6b00000c000780080004009b7c0000680007800c000300ce54000000000000000c000300001000000000000008000100000000800c000300030000000000000008000100000400000800020006000000080001000500000008000100000000000c0003000100000000000000"], 0x340}, 0x1, 0x0, 0x0, 0x400}, 0x200009d0)
sync()
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000400)={0x25, 0xb, 0x12, 0x19, 0x4, 0x6, 0x1, 0xb9, 0xffffffffffffffff})

19:52:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1967.184232] EXT4-fs: Ignoring removed nobh option
[ 1967.188628] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1967.214789] loop6: detected capacity change from 0 to 512
[ 1967.225705] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1967.235044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:52:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

19:52:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1967.282894] loop6: detected capacity change from 0 to 512
[ 1967.357864] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:52:26 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

[ 1985.918661] FAULT_INJECTION: forcing a failure.
[ 1985.918661] name failslab, interval 1, probability 0, space 0, times 0
[ 1985.921027] CPU: 0 PID: 12091 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1985.923047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1985.925386] Call Trace:
[ 1985.925924]  <TASK>
[ 1985.926400] loop6: detected capacity change from 0 to 512
[ 1985.926388]  dump_stack_lvl+0x8b/0xb3
[ 1985.927747]  should_fail.cold+0x5/0xa
[ 1985.928548]  ? __kernfs_new_node+0xd4/0x8b0
[ 1985.929449]  should_failslab+0x5/0x10
[ 1985.930256]  kmem_cache_alloc+0x69/0x490
[ 1985.931119]  __kernfs_new_node+0xd4/0x8b0
[ 1985.931986]  ? kernfs_path_from_node+0x60/0x60
[ 1985.932933]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1985.934033]  ? mark_held_locks+0x9e/0xe0
[ 1985.934901]  ? lock_is_held_type+0xd7/0x130
[ 1985.935799]  ? find_held_lock+0x2c/0x110
[ 1985.936651]  kernfs_create_dir_ns+0x9c/0x220
[ 1985.937575]  internal_create_group+0x782/0xb20
[ 1985.938550]  ? sysfs_remove_group+0x170/0x170
[ 1985.939492]  ? lock_is_held_type+0xd7/0x130
[ 1985.940392]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 1985.941382]  ? loop_configure+0x1950/0x1950
[ 1985.942306]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 1985.943346]  ? __loop_update_dio+0x2a3/0x620
[ 1985.944271]  loop_configure+0xe87/0x1950
[ 1985.945145]  lo_ioctl+0x7c5/0x18b0
[ 1985.945893]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1985.946911]  ? loop_set_status_old+0x1b0/0x1b0
[ 1985.947870]  ? avc_ss_reset+0x180/0x180
[ 1985.948714]  ? __lock_acquire+0xbac/0x6120
[ 1985.949669]  ? selinux_inode_getsecctx+0x90/0x90
[ 1985.950684]  ? loop_set_status_old+0x1b0/0x1b0
[ 1985.951643]  blkdev_ioctl+0x362/0x7f0
[ 1985.952438]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1985.953424]  ? __x64_sys_ioctl+0x97/0x210
[ 1985.954351]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1985.955495]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1985.956484]  __x64_sys_ioctl+0x196/0x210
[ 1985.957333]  do_syscall_64+0x3b/0x90
[ 1985.958132]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1985.959207] RIP: 0033:0x7f1f6d99b8d7
[ 1985.959967] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1985.963754] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1985.965326] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1985.966808] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1985.968279] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1985.969751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1985.971229] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1985.972729]  </TASK>
[ 1985.973290] loop4: detected capacity change from 0 to 512
[ 1985.987953] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1986.001798] loop5: detected capacity change from 0 to 71
[ 1986.006039] EXT4-fs: Ignoring removed nobh option
19:52:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 52)

19:52:26 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:52:26 executing program 2:
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/156, 0x9c}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r1=>0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/208, 0xd0}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x2000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8002, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@privport}, {@afid={'afid', 0x3d, 0x401}}], [{@fowner_gt={'fowner>', r1}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x39, 0x31, 0x37, 0x36, 0x30, 0x34, 0x35], 0x2d, [0x64, 0x65, 0x31, 0xe4c5bc7484447266], 0x2d, [0x30, 0x63, 0x39, 0x63], 0x2d, [0x0, 0x36, 0x37, 0x66], 0x2d, [0x37, 0x38, 0x36, 0x35, 0x63, 0x34, 0x66, 0x63]}}}, {@smackfshat={'smackfshat', 0x3d, '*)**\'$*\x85\'#\x19{:/*\'\x00'}}, {@obj_user}]}})
sync()
sync()
sync()

19:52:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000068000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:26 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x80ffff, 0x0, 0x0, 0x0)

19:52:26 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:52:26 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000340)=""/117, 0x75)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x200, 0x81)
r5 = openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000400)={0x80000001, 0x0, &(0x7f00000003c0)=[r0, r5]}, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000c600", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf25120000000800080002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4024050)
preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/228, 0xe4}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)}], 0x4, 0x9, 0x5)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r1, {r0}}, './file1/file0\x00'})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0)
pwrite64(r4, &(0x7f0000000540)="59da8c1f27b5335f494825ebed8c4d4c5cf781a6e39caf11380aa5e40fb1b5ee27f4c107ad70402cd0cd4177c6f36c9c2d90f441fc700fa5db28f7e060188023631a66f167fa9ef96ca72571ae475e9240f0f221982c943c2f987c5e3bde47f23f8411fc01976a750cce", 0x6a, 0x10001)

19:52:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1986.043076] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1986.054026] loop5: detected capacity change from 0 to 71
[ 1986.057846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1986.082282] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
19:52:27 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000078000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:27 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 53)

[ 1986.142732] loop6: detected capacity change from 0 to 512
19:52:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

[ 1986.173289] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:52:27 executing program 2:
sync()
sync()
sync()
sync()
sync()
sync()

19:52:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 1986.220478] FAULT_INJECTION: forcing a failure.
[ 1986.220478] name failslab, interval 1, probability 0, space 0, times 0
[ 1986.223025] CPU: 0 PID: 12123 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1986.225021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1986.227401] Call Trace:
[ 1986.227931]  <TASK>
[ 1986.228396]  dump_stack_lvl+0x8b/0xb3
[ 1986.229208]  should_fail.cold+0x5/0xa
[ 1986.230013]  ? create_object.isra.0+0x3a/0xa20
[ 1986.230960]  should_failslab+0x5/0x10
[ 1986.231745]  kmem_cache_alloc+0x69/0x490
[ 1986.232598]  create_object.isra.0+0x3a/0xa20
[ 1986.233501]  ? kasan_unpoison+0x23/0x50
[ 1986.234350]  kmem_cache_alloc+0x244/0x490
[ 1986.235218]  __kernfs_new_node+0xd4/0x8b0
[ 1986.236105]  ? kernfs_path_from_node+0x60/0x60
[ 1986.237048]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1986.238144]  ? mark_held_locks+0x9e/0xe0
[ 1986.239013]  ? lock_is_held_type+0xd7/0x130
[ 1986.239903]  ? find_held_lock+0x2c/0x110
[ 1986.240760]  kernfs_create_dir_ns+0x9c/0x220
[ 1986.241673]  internal_create_group+0x782/0xb20
[ 1986.242649]  ? sysfs_remove_group+0x170/0x170
[ 1986.243583]  ? lock_is_held_type+0xd7/0x130
[ 1986.244479]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 1986.245461]  ? loop_configure+0x1950/0x1950
[ 1986.246384]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 1986.247424]  ? __loop_update_dio+0x2a3/0x620
[ 1986.248350]  loop_configure+0xe87/0x1950
[ 1986.249218]  lo_ioctl+0x7c5/0x18b0
[ 1986.249978]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1986.250982]  ? loop_set_status_old+0x1b0/0x1b0
[ 1986.251940]  ? avc_ss_reset+0x180/0x180
[ 1986.252776]  ? __lock_acquire+0xbac/0x6120
[ 1986.253726]  ? selinux_inode_getsecctx+0x90/0x90
[ 1986.254734]  ? loop_set_status_old+0x1b0/0x1b0
[ 1986.255691]  blkdev_ioctl+0x362/0x7f0
[ 1986.256483]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1986.257465]  ? __x64_sys_ioctl+0x97/0x210
[ 1986.257662] loop5: detected capacity change from 0 to 71
[ 1986.258348]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1986.260055]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1986.261037]  __x64_sys_ioctl+0x196/0x210
[ 1986.261885]  do_syscall_64+0x3b/0x90
[ 1986.262677]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1986.263740] RIP: 0033:0x7f1f6d99b8d7
[ 1986.264504] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1986.268277] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1986.269839] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1986.271323] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1986.272786] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1986.274255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1986.275714] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1986.277201]  </TASK>
[ 1986.286308] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1986.301536] loop5: detected capacity change from 0 to 71
[ 1986.302563] loop6: detected capacity change from 0 to 512
19:52:27 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000188000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0)

19:52:27 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:52:27 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0)

[ 1986.316138] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1986.318075] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1986.353267] loop4: detected capacity change from 0 to 512
[ 1986.354790] EXT4-fs: Ignoring removed nobh option
19:52:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xcddc93e0}, 0x0)

19:52:27 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c8000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:27 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc0ffff, 0x0, 0x0, 0x0)

19:52:27 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 1986.416311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1986.477512] loop6: detected capacity change from 0 to 512
[ 1986.519997] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:52:40 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 54)

19:52:40 executing program 2:
sync()
sync()

19:52:40 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000da", 0x2d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:52:40 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xe093dccd}, 0x0)

19:52:40 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000208000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:40 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xf0ffff, 0x0, 0x0, 0x0)

19:52:40 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x29e041, 0x0)
vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000180)="c53163d3eeb05489e75f990779e7b833f93c123b94ab983c7360f3a95f4ee3a2e3a7bd230e3e90fd11a38cff312b0a43d183a61228490317095286150ecba518f1062fad020a31cbcd179ce5ba62a3810137004bad15f026e9841181e719bd1bdeb4ced280c85d40c011e7ab67818f38", 0x70}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000200)="617c7989c8a3e2a6a8156dd70bc0a145d3d1017a9a45962c1a7285899433796b515746de203fdc99bfa7f916ee963f5f721bad8eb7856f4affed7b832d72fa116731def3c82f9d886cd37222857b53aedf5e5a615be2254701d468d050f8e5566c6ba0fdd72496d0b8661be174e4322284aed77f62364104a73383c3f13952", 0x7f}], 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0x3)
sendfile(r2, r0, 0x0, 0xdb8a)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6_vti0\x00', <r4=>0x0, 0x2f, 0x4, 0x2d, 0x4, 0x4, @rand_addr=' \x01\x00', @loopback, 0x1, 0x8000, 0xa6, 0xfffffffa}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x0, 0x0, 0x1e, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x28}, 0x251e20121dc98d7f, 0x20, 0x7, 0x9}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2e8, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xe4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x03]+,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdac0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff248000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@.#[^}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':/!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "90f6006c93f1235fc779037cb770f963d6e22f158d6dfb58e42fab7fbb5262ee77e2b13ceea23ead8776b056128a880f3625a7bfad53cadb47d012bf3d89011369"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_FEATURES_WANTED={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5af}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "296eb053c8ab08d7afe9b8913c740fe2641daa0d5f21c8da059dcdc708477b3789b58c7fcf36f7abe7d3ffcf9d0dc150bc0bd504a3a24eff862376bc128f1728ddc0d8f37a9b83b6834ac4f40210ae304325b5eb46b3f466408f05c0723c5ee304c64da151e3a7ad5e416db58770696d0991d1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x88010}, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xf9f, 0x606000)
sendfile(r1, r6, &(0x7f0000000100)=0xfd4, 0x100000001)
read(r1, &(0x7f0000000040)=""/117, 0x75)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r8 = openat$cgroup_subtree(r0, &(0x7f0000000a80), 0x2, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000ac0)={{0xffffffff}, 0x100, './file1\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0)
read(r7, &(0x7f0000000340)=""/253, 0xfd)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r9=>0xffffffffffffffff, @ANYBLOB="009b8b0100000000000000000000000000000020000000000000009760ffd7b500eaa2643b6c1c2226bfe50fa92d4d3e526e09c577c6ef160faa0d5bc4268ad005516846b774fc7e1e9570c0f0e13bc14c4fbbf0bb56718c5a14256671dd18ef08e645aa617af06271f468de0fb5e7f0890580f74ba794fa407d0673080fbeaad81604361214d7a481342aecdaa00c2e08a586bd39c542e5e4a5020ab491472b78070d3916532f194ac4fcecc1cc5bf00e861ee8ef661355"])
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000000300)=0x2b)

[ 1999.443441] loop6: detected capacity change from 0 to 512
[ 1999.447877] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1999.456639] FAULT_INJECTION: forcing a failure.
[ 1999.456639] name failslab, interval 1, probability 0, space 0, times 0
[ 1999.458888] CPU: 1 PID: 12171 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 1999.460785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1999.462993] Call Trace:
[ 1999.463497]  <TASK>
[ 1999.463947]  dump_stack_lvl+0x8b/0xb3
[ 1999.464714]  should_fail.cold+0x5/0xa
[ 1999.465469]  ? __kernfs_new_node+0xd4/0x8b0
[ 1999.466339]  should_failslab+0x5/0x10
[ 1999.467085]  kmem_cache_alloc+0x69/0x490
[ 1999.467895]  __kernfs_new_node+0xd4/0x8b0
[ 1999.468715]  ? kernfs_path_from_node+0x60/0x60
[ 1999.469616]  ? find_held_lock+0x2c/0x110
[ 1999.470428]  ? lock_release+0x3b2/0x6f0
[ 1999.471212]  ? kernfs_add_one+0x3c6/0x550
[ 1999.472020]  ? lock_downgrade+0x6d0/0x6d0
[ 1999.472843]  ? lock_is_held_type+0xd7/0x130
[ 1999.473704]  kernfs_new_node+0x93/0x120
[ 1999.474515]  __kernfs_create_file+0x51/0x350
[ 1999.475390]  sysfs_add_file_mode_ns+0x218/0x430
[ 1999.476320]  ? component_del+0x4c0/0x4c0
[ 1999.477119]  internal_create_group+0x322/0xb20
[ 1999.478021]  ? sysfs_remove_group+0x170/0x170
[ 1999.478917]  ? lock_is_held_type+0xd7/0x130
[ 1999.479766]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 1999.480696]  ? loop_configure+0x1950/0x1950
[ 1999.481542]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 1999.482542]  ? __loop_update_dio+0x2a3/0x620
[ 1999.483419]  loop_configure+0xe87/0x1950
[ 1999.484237]  lo_ioctl+0x7c5/0x18b0
[ 1999.484935]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 1999.485902]  ? loop_set_status_old+0x1b0/0x1b0
[ 1999.486829]  ? avc_ss_reset+0x180/0x180
[ 1999.487617]  ? __lock_acquire+0xbac/0x6120
[ 1999.488517]  ? selinux_inode_getsecctx+0x90/0x90
[ 1999.489464]  ? loop_set_status_old+0x1b0/0x1b0
[ 1999.490374]  blkdev_ioctl+0x362/0x7f0
[ 1999.491127]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1999.492058]  ? __x64_sys_ioctl+0x97/0x210
[ 1999.492879]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1999.493956]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 1999.494888]  __x64_sys_ioctl+0x196/0x210
[ 1999.495700]  do_syscall_64+0x3b/0x90
[ 1999.496435]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1999.497440] RIP: 0033:0x7f1f6d99b8d7
[ 1999.498185] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1999.501765] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1999.503256] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 1999.504659] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1999.506047] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1999.507454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1999.508840] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1999.510260]  </TASK>
[ 1999.514968] loop5: detected capacity change from 0 to 71
[ 1999.524180] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1999.535511] loop5: detected capacity change from 0 to 71
[ 1999.541791] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 1999.568520] loop4: detected capacity change from 0 to 512
[ 1999.570001] EXT4-fs: Ignoring removed nobh option
[ 1999.628003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:52:40 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000688000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

19:52:53 executing program 0:
sync()
sync()
sync()
sync()
sync()
sync()

19:52:53 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2000000, 0x0, 0x0, 0x0)

19:52:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200004808000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:53 executing program 2:
sync()
sync()

[ 2012.235911] FAULT_INJECTION: forcing a failure.
[ 2012.235911] name failslab, interval 1, probability 0, space 0, times 0
[ 2012.237808] CPU: 0 PID: 12203 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2012.238981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2012.240180] Call Trace:
[ 2012.240449]  <TASK>
[ 2012.240684]  dump_stack_lvl+0x8b/0xb3
[ 2012.241100]  should_fail.cold+0x5/0xa
[ 2012.241502]  ? create_object.isra.0+0x3a/0xa20
[ 2012.241987]  should_failslab+0x5/0x10
[ 2012.242404]  kmem_cache_alloc+0x69/0x490
[ 2012.242837]  create_object.isra.0+0x3a/0xa20
[ 2012.243300]  ? kasan_unpoison+0x23/0x50
[ 2012.243716]  kmem_cache_alloc+0x244/0x490
[ 2012.244161]  radix_tree_node_alloc.constprop.0+0x1df/0x330
[ 2012.244746]  idr_get_free+0x4b5/0x8f0
[ 2012.245158]  idr_alloc_u32+0x170/0x2d0
[ 2012.245576]  ? __fprop_add_percpu_max+0x1a0/0x1a0
[ 2012.246084]  ? lock_acquire+0x1b2/0x4d0
[ 2012.246520]  idr_alloc_cyclic+0x102/0x230
[ 2012.246960]  ? idr_alloc+0x130/0x130
[ 2012.247359]  ? rwlock_bug.part.0+0x90/0x90
[ 2012.247810]  __kernfs_new_node+0x117/0x8b0
[ 2012.248260]  ? kernfs_path_from_node+0x60/0x60
[ 2012.248737]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2012.249292]  ? mark_held_locks+0x9e/0xe0
[ 2012.249727]  ? lock_is_held_type+0xd7/0x130
[ 2012.250179]  ? find_held_lock+0x2c/0x110
[ 2012.250617]  kernfs_create_dir_ns+0x9c/0x220
[ 2012.251080]  internal_create_group+0x782/0xb20
[ 2012.251566]  ? sysfs_remove_group+0x170/0x170
[ 2012.252033]  ? lock_is_held_type+0xd7/0x130
[ 2012.252487]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2012.252985]  ? loop_configure+0x1950/0x1950
[ 2012.253443]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2012.253966]  ? __loop_update_dio+0x2a3/0x620
[ 2012.254447]  loop_configure+0xe87/0x1950
[ 2012.254884]  lo_ioctl+0x7c5/0x18b0
[ 2012.255259]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2012.255771]  ? loop_set_status_old+0x1b0/0x1b0
[ 2012.256258]  ? avc_ss_reset+0x180/0x180
[ 2012.256679]  ? __lock_acquire+0xbac/0x6120
[ 2012.257163]  ? selinux_inode_getsecctx+0x90/0x90
[ 2012.257665]  ? loop_set_status_old+0x1b0/0x1b0
[ 2012.258151]  blkdev_ioctl+0x362/0x7f0
[ 2012.258556]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2012.259054]  ? __x64_sys_ioctl+0x97/0x210
[ 2012.259492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2012.260066]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2012.260560]  __x64_sys_ioctl+0x196/0x210
[ 2012.260993]  do_syscall_64+0x3b/0x90
[ 2012.261395]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2012.261933] RIP: 0033:0x7f1f6d99b8d7
[ 2012.262332] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2012.264219] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2012.265008] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2012.265742] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2012.266493] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2012.267228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2012.267965] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2012.268715]  </TASK>
[ 2012.272730] loop5: detected capacity change from 0 to 71
19:52:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 55)

19:52:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:52:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2012.293173] loop6: detected capacity change from 0 to 512
[ 2012.316739] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2012.336242] loop5: detected capacity change from 0 to 71
19:52:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000fffe8000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2012.344836] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2012.355981] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 2012.364518] EXT4-fs (loop6): get root inode failed
[ 2012.365601] EXT4-fs (loop6): mount failed
19:52:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

[ 2012.482015] loop4: detected capacity change from 0 to 512
19:52:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2012.535221] EXT4-fs: Ignoring removed nobh option
19:52:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000feff8000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2012.604577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:52:53 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x5000000, 0x0, 0x0, 0x0)

[ 2012.656663] loop6: detected capacity change from 0 to 512
[ 2012.666362] loop5: detected capacity change from 0 to 71
[ 2012.688185] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2012.696841] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 2012.706584] EXT4-fs (loop6): get root inode failed
[ 2012.707645] EXT4-fs (loop6): mount failed
[ 2012.725048] loop5: detected capacity change from 0 to 71
19:52:53 executing program 0:
sync()
sync()
sync()
sync()
sync()
sync()

19:52:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 56)

19:52:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

19:52:53 executing program 2:
r0 = eventfd(0x3)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x9001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file1\x00'})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r0, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1)
sync()

19:52:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007f00000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2012.814396] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
19:52:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

[ 2012.944532] FAULT_INJECTION: forcing a failure.
[ 2012.944532] name failslab, interval 1, probability 0, space 0, times 0
19:52:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f", 0x44, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2012.946971] CPU: 0 PID: 12252 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2012.948879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2012.951125] Call Trace:
[ 2012.951636]  <TASK>
[ 2012.952083]  dump_stack_lvl+0x8b/0xb3
[ 2012.952868]  should_fail.cold+0x5/0xa
[ 2012.953652]  ? __kernfs_new_node+0xd4/0x8b0
[ 2012.954532]  should_failslab+0x5/0x10
[ 2012.955302]  kmem_cache_alloc+0x69/0x490
[ 2012.956137]  __kernfs_new_node+0xd4/0x8b0
[ 2012.956947]  ? kernfs_add_one+0x3c6/0x550
[ 2012.957773]  ? kernfs_path_from_node+0x60/0x60
[ 2012.958726]  ? lock_is_held_type+0xd7/0x130
[ 2012.959613]  ? up_write+0x148/0x460
[ 2012.960350]  ? kernfs_activate+0x1c4/0x240
[ 2012.961179]  kernfs_new_node+0x93/0x120
[ 2012.961987]  __kernfs_create_file+0x51/0x350
[ 2012.962879]  sysfs_add_file_mode_ns+0x218/0x430
[ 2012.963820]  ? component_del+0x4c0/0x4c0
[ 2012.964637]  internal_create_group+0x322/0xb20
[ 2012.965568]  ? sysfs_remove_group+0x170/0x170
[ 2012.966487]  ? lock_is_held_type+0xd7/0x130
[ 2012.967345]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2012.968299]  ? loop_configure+0x1950/0x1950
[ 2012.969165]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2012.970164]  ? __loop_update_dio+0x2a3/0x620
[ 2012.971053]  loop_configure+0xe87/0x1950
[ 2012.971886]  lo_ioctl+0x7c5/0x18b0
[ 2012.972600]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2012.973576]  ? loop_set_status_old+0x1b0/0x1b0
[ 2012.974503]  ? avc_ss_reset+0x180/0x180
[ 2012.975309]  ? __lock_acquire+0xbac/0x6120
[ 2012.976221]  ? selinux_inode_getsecctx+0x90/0x90
[ 2012.977188]  ? loop_set_status_old+0x1b0/0x1b0
[ 2012.978105]  blkdev_ioctl+0x362/0x7f0
[ 2012.978883]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2012.979825]  ? __x64_sys_ioctl+0x97/0x210
[ 2012.980662]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2012.981751]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2012.982709]  __x64_sys_ioctl+0x196/0x210
[ 2012.983524]  do_syscall_64+0x3b/0x90
[ 2012.984280]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2012.985301] RIP: 0033:0x7f1f6d99b8d7
[ 2012.986040] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2012.989681] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2012.990609] loop6: detected capacity change from 0 to 512
[ 2012.991215] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2012.991235] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2012.991252] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2012.996569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2012.997984] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2012.999456]  </TASK>
[ 2013.060993] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
19:52:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:52:54 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x6000000, 0x0, 0x0, 0x0)

[ 2013.068015] EXT4-fs (loop6): get root inode failed
[ 2013.070517] EXT4-fs (loop6): mount failed
[ 2013.082033] loop4: detected capacity change from 0 to 512
[ 2013.084945] EXT4-fs: Ignoring removed nobh option
[ 2013.126288] loop5: detected capacity change from 0 to 71
[ 2013.135868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2013.180680] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2013.198161] loop5: detected capacity change from 0 to 71
[ 2013.205444] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
19:53:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:06 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x8000000, 0x0, 0x0, 0x0)

19:53:06 executing program 0:
sync()
sync()

19:53:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000028000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:06 executing program 2:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x2, 0x1, 0x4}, &(0x7f0000000080)=[{}, {}, {}, {}])
waitid(0x0, r0, 0x0, 0x80000000, &(0x7f0000000280))
sync()

19:53:06 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

19:53:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 57)

[ 2025.861195] loop6: detected capacity change from 0 to 512
[ 2025.871243] FAULT_INJECTION: forcing a failure.
[ 2025.871243] name failslab, interval 1, probability 0, space 0, times 0
[ 2025.872471] CPU: 0 PID: 12282 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2025.873494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2025.874930] Call Trace:
[ 2025.875204]  <TASK>
[ 2025.875441]  dump_stack_lvl+0x8b/0xb3
[ 2025.875859]  should_fail.cold+0x5/0xa
[ 2025.876265]  ? create_object.isra.0+0x3a/0xa20
[ 2025.876287] loop5: detected capacity change from 0 to 71
[ 2025.876743]  should_failslab+0x5/0x10
[ 2025.878286]  kmem_cache_alloc+0x69/0x490
[ 2025.878740]  create_object.isra.0+0x3a/0xa20
[ 2025.879213]  ? kasan_unpoison+0x23/0x50
[ 2025.879642]  kmem_cache_alloc+0x244/0x490
[ 2025.880094]  __kernfs_new_node+0xd4/0x8b0
[ 2025.880540]  ? kernfs_add_one+0x3c6/0x550
[ 2025.880995]  ? kernfs_path_from_node+0x60/0x60
[ 2025.881503]  ? lock_is_held_type+0xd7/0x130
[ 2025.881983]  ? up_write+0x148/0x460
[ 2025.882385]  ? kernfs_activate+0x1c4/0x240
[ 2025.882874]  kernfs_new_node+0x93/0x120
[ 2025.883321]  __kernfs_create_file+0x51/0x350
[ 2025.883818]  sysfs_add_file_mode_ns+0x218/0x430
[ 2025.884335]  ? component_del+0x4c0/0x4c0
[ 2025.884790]  internal_create_group+0x322/0xb20
[ 2025.885304]  ? sysfs_remove_group+0x170/0x170
[ 2025.885796]  ? lock_is_held_type+0xd7/0x130
[ 2025.886268]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2025.886821]  ? loop_configure+0x1950/0x1950
[ 2025.887303]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2025.887855]  ? __loop_update_dio+0x2a3/0x620
[ 2025.888346]  loop_configure+0xe87/0x1950
[ 2025.888807]  lo_ioctl+0x7c5/0x18b0
[ 2025.889204]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2025.889743]  ? loop_set_status_old+0x1b0/0x1b0
[ 2025.890247]  ? avc_ss_reset+0x180/0x180
[ 2025.890708]  ? __lock_acquire+0xbac/0x6120
[ 2025.891208]  ? selinux_inode_getsecctx+0x90/0x90
[ 2025.891738]  ? loop_set_status_old+0x1b0/0x1b0
[ 2025.892258]  blkdev_ioctl+0x362/0x7f0
[ 2025.892674]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2025.893196]  ? __x64_sys_ioctl+0x97/0x210
[ 2025.893657]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2025.894253]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2025.894786]  __x64_sys_ioctl+0x196/0x210
[ 2025.895237]  do_syscall_64+0x3b/0x90
[ 2025.895648]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2025.896214] RIP: 0033:0x7f1f6d99b8d7
[ 2025.896615] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2025.898646] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2025.899464] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2025.900247] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2025.901021] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2025.901800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2025.902596] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2025.903400]  </TASK>
[ 2025.908412] EXT4-fs (loop6): invalid first ino: 0
19:53:06 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

[ 2026.001576] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
19:53:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000038000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2026.035237] loop5: detected capacity change from 0 to 71
19:53:06 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2026.060822] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2026.090754] loop4: detected capacity change from 0 to 512
[ 2026.104764] EXT4-fs: Ignoring removed nobh option
[ 2026.159514] loop6: detected capacity change from 0 to 512
[ 2026.163120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2026.206212] EXT4-fs (loop6): invalid first ino: 0
19:53:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000048000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 58)

19:53:21 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000058000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:21 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:21 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x2)

19:53:21 executing program 2:
sync()
sync()
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x600200, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x5a1082, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x1, 0x8})

19:53:21 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc000000, 0x0, 0x0, 0x0)

[ 2040.119957] loop6: detected capacity change from 0 to 512
[ 2040.133647] loop5: detected capacity change from 0 to 71
19:53:21 executing program 0:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x2, 0x1, 0x4}, &(0x7f0000000080)=[{}, {}, {}, {}])
waitid(0x0, r0, 0x0, 0x80000000, &(0x7f0000000280))
sync()

19:53:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8fee, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2040.160158] EXT4-fs (loop6): invalid first ino: 0
[ 2040.172857] FAULT_INJECTION: forcing a failure.
[ 2040.172857] name failslab, interval 1, probability 0, space 0, times 0
[ 2040.175530] CPU: 1 PID: 12328 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2040.177672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2040.180205] Call Trace:
[ 2040.180810]  <TASK>
[ 2040.181275]  dump_stack_lvl+0x8b/0xb3
[ 2040.182152]  should_fail.cold+0x5/0xa
[ 2040.183036]  ? __kernfs_new_node+0xd4/0x8b0
[ 2040.184045]  should_failslab+0x5/0x10
[ 2040.184918]  kmem_cache_alloc+0x69/0x490
[ 2040.185837]  __kernfs_new_node+0xd4/0x8b0
[ 2040.186766]  ? kernfs_add_one+0x3c6/0x550
[ 2040.187575]  ? kernfs_path_from_node+0x60/0x60
[ 2040.188470]  ? lock_is_held_type+0xd7/0x130
[ 2040.189318]  ? up_write+0x148/0x460
[ 2040.190042]  ? kernfs_activate+0x1c4/0x240
[ 2040.190885]  kernfs_new_node+0x93/0x120
[ 2040.191687]  __kernfs_create_file+0x51/0x350
[ 2040.192557]  sysfs_add_file_mode_ns+0x218/0x430
[ 2040.193486]  ? component_del+0x4c0/0x4c0
[ 2040.194287]  internal_create_group+0x322/0xb20
[ 2040.195250]  ? sysfs_remove_group+0x170/0x170
[ 2040.196152]  ? lock_is_held_type+0xd7/0x130
[ 2040.196990]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2040.197934]  ? loop_configure+0x1950/0x1950
[ 2040.198788]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2040.199768]  ? __loop_update_dio+0x2a3/0x620
[ 2040.200628]  loop_configure+0xe87/0x1950
[ 2040.201469]  lo_ioctl+0x7c5/0x18b0
[ 2040.202161]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2040.203115]  ? loop_set_status_old+0x1b0/0x1b0
[ 2040.204036]  ? avc_ss_reset+0x180/0x180
[ 2040.204825]  ? __lock_acquire+0xbac/0x6120
[ 2040.205741]  ? selinux_inode_getsecctx+0x90/0x90
[ 2040.206680]  ? loop_set_status_old+0x1b0/0x1b0
[ 2040.207606]  blkdev_ioctl+0x362/0x7f0
[ 2040.208356]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2040.209297]  ? __x64_sys_ioctl+0x97/0x210
[ 2040.210114]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2040.211192]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2040.212124]  __x64_sys_ioctl+0x196/0x210
[ 2040.212927]  do_syscall_64+0x3b/0x90
[ 2040.213665]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2040.214671] RIP: 0033:0x7f1f6d99b8d7
[ 2040.215404] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2040.219030] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2040.220543] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2040.221945] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2040.223356] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2040.224961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2040.226368] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2040.227805]  </TASK>
[ 2040.247543] loop4: detected capacity change from 0 to 512
[ 2040.262940] EXT4-fs: Ignoring removed nobh option
[ 2040.266385] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2040.287463] loop5: detected capacity change from 0 to 71
19:53:21 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000068000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2040.361968] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2040.373271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:53:21 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:21 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x3)

[ 2040.461201] loop6: detected capacity change from 0 to 512
19:53:21 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x12000000, 0x0, 0x0, 0x0)

19:53:21 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100300, 0x0, 0x0, 0x0, 0x0)

19:53:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8fef, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2040.519697] EXT4-fs (loop6): unsupported inode size: 0
[ 2040.520822] EXT4-fs (loop6): blocksize: 2048
19:53:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 59)

19:53:21 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000078000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:21 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2040.638788] FAULT_INJECTION: forcing a failure.
[ 2040.638788] name failslab, interval 1, probability 0, space 0, times 0
[ 2040.641160] CPU: 1 PID: 12357 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
19:53:21 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x4)

[ 2040.643024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2040.645345] Call Trace:
[ 2040.645843]  <TASK>
[ 2040.646274]  dump_stack_lvl+0x8b/0xb3
[ 2040.647050]  should_fail.cold+0x5/0xa
[ 2040.647797]  ? create_object.isra.0+0x3a/0xa20
[ 2040.648676]  should_failslab+0x5/0x10
[ 2040.649410]  kmem_cache_alloc+0x69/0x490
[ 2040.650216]  create_object.isra.0+0x3a/0xa20
[ 2040.651076]  ? kasan_unpoison+0x23/0x50
[ 2040.651857]  kmem_cache_alloc+0x244/0x490
[ 2040.652669]  __kernfs_new_node+0xd4/0x8b0
[ 2040.653489]  ? kernfs_add_one+0x3c6/0x550
[ 2040.654300]  ? kernfs_path_from_node+0x60/0x60
[ 2040.655210]  ? lock_is_held_type+0xd7/0x130
[ 2040.656069]  ? up_write+0x148/0x460
[ 2040.656780]  ? kernfs_activate+0x1c4/0x240
[ 2040.657601]  kernfs_new_node+0x93/0x120
[ 2040.658388]  __kernfs_create_file+0x51/0x350
[ 2040.659285]  sysfs_add_file_mode_ns+0x218/0x430
[ 2040.660208]  ? component_del+0x4c0/0x4c0
[ 2040.661010]  internal_create_group+0x322/0xb20
[ 2040.661920]  ? sysfs_remove_group+0x170/0x170
[ 2040.662811]  ? lock_is_held_type+0xd7/0x130
[ 2040.663655]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2040.664581]  ? loop_configure+0x1950/0x1950
[ 2040.665430]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2040.666409]  ? __loop_update_dio+0x2a3/0x620
[ 2040.667293]  loop_configure+0xe87/0x1950
[ 2040.668112]  lo_ioctl+0x7c5/0x18b0
[ 2040.668811]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2040.669758]  ? loop_set_status_old+0x1b0/0x1b0
[ 2040.670658]  ? avc_ss_reset+0x180/0x180
[ 2040.671455]  ? __lock_acquire+0xbac/0x6120
[ 2040.672352]  ? selinux_inode_getsecctx+0x90/0x90
[ 2040.673298]  ? loop_set_status_old+0x1b0/0x1b0
[ 2040.674197]  blkdev_ioctl+0x362/0x7f0
[ 2040.674957]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2040.675883]  ? __x64_sys_ioctl+0x97/0x210
[ 2040.676697]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2040.677769]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2040.678694]  __x64_sys_ioctl+0x196/0x210
[ 2040.679504]  do_syscall_64+0x3b/0x90
[ 2040.680240]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2040.681242] RIP: 0033:0x7f1f6d99b8d7
[ 2040.681961] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2040.685534] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2040.687031] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2040.688414] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2040.689798] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2040.691187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2040.692570] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2040.693978]  </TASK>
[ 2040.753378] loop6: detected capacity change from 0 to 512
[ 2040.773955] EXT4-fs (loop6): unsupported inode size: 0
[ 2040.775148] EXT4-fs (loop6): blocksize: 2048
[ 2040.794265] loop4: detected capacity change from 0 to 512
[ 2040.803683] EXT4-fs: Ignoring removed nobh option
[ 2040.828415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2040.854350] loop5: detected capacity change from 0 to 72
[ 2040.863558] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2040.878785] loop5: detected capacity change from 0 to 72
[ 2040.884494] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2056.121610] loop5: detected capacity change from 0 to 72
[ 2056.130656] FAULT_INJECTION: forcing a failure.
[ 2056.130656] name failslab, interval 1, probability 0, space 0, times 0
[ 2056.132144] CPU: 1 PID: 12377 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2056.133403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2056.134860] Call Trace:
[ 2056.135172]  <TASK>
[ 2056.135463]  dump_stack_lvl+0x8b/0xb3
[ 2056.135971]  should_fail.cold+0x5/0xa
[ 2056.136466]  ? __kernfs_new_node+0xd4/0x8b0
[ 2056.137033]  should_failslab+0x5/0x10
[ 2056.137526]  kmem_cache_alloc+0x69/0x490
[ 2056.138058]  __kernfs_new_node+0xd4/0x8b0
[ 2056.138589]  ? kernfs_add_one+0x3c6/0x550
[ 2056.139143]  ? kernfs_path_from_node+0x60/0x60
[ 2056.139731]  ? lock_is_held_type+0xd7/0x130
[ 2056.140296]  ? up_write+0x148/0x460
[ 2056.140768]  ? kernfs_activate+0x1c4/0x240
[ 2056.141327]  kernfs_new_node+0x93/0x120
[ 2056.141847]  __kernfs_create_file+0x51/0x350
[ 2056.142423]  sysfs_add_file_mode_ns+0x218/0x430
[ 2056.143051]  ? component_del+0x4c0/0x4c0
[ 2056.143579]  internal_create_group+0x322/0xb20
[ 2056.144178]  ? sysfs_remove_group+0x170/0x170
[ 2056.144756]  ? lock_is_held_type+0xd7/0x130
[ 2056.145311]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2056.145929]  ? loop_configure+0x1950/0x1950
[ 2056.146412]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2056.147078]  ? __loop_update_dio+0x2a3/0x620
[ 2056.147650]  loop_configure+0xe87/0x1950
[ 2056.148183]  lo_ioctl+0x7c5/0x18b0
[ 2056.148645]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2056.149266]  ? loop_set_status_old+0x1b0/0x1b0
[ 2056.149857]  ? avc_ss_reset+0x180/0x180
[ 2056.150375]  ? __lock_acquire+0xbac/0x6120
[ 2056.150968]  ? selinux_inode_getsecctx+0x90/0x90
[ 2056.151588]  ? loop_set_status_old+0x1b0/0x1b0
[ 2056.152185]  blkdev_ioctl+0x362/0x7f0
[ 2056.152679]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2056.153288]  ? __x64_sys_ioctl+0x97/0x210
[ 2056.153828]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2056.154539]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2056.155159]  __x64_sys_ioctl+0x196/0x210
[ 2056.155683]  do_syscall_64+0x3b/0x90
[ 2056.156173]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2056.156831] RIP: 0033:0x7f1f6d99b8d7
[ 2056.157305] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2056.159662] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2056.160630] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2056.161536] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2056.162448] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2056.163363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2056.164175] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2056.165108]  </TASK>
[ 2056.200358] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2056.204925] loop6: detected capacity change from 0 to 512
[ 2056.210696] loop5: detected capacity change from 0 to 72
[ 2056.219802] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2056.225975] loop4: detected capacity change from 0 to 512
[ 2056.245052] EXT4-fs (loop6): unsupported inode size: 0
[ 2056.246326] EXT4-fs (loop6): blocksize: 2048
[ 2056.251953] EXT4-fs: Ignoring removed nobh option
19:53:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x18000000, 0x0, 0x0, 0x0)

19:53:37 executing program 2:
getresuid(&(0x7f0000000000), &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080))
setresuid(0x0, 0x0, 0x0)
r1 = gettid()
fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setgid(0x0)
r4 = socket$inet6(0xa, 0x2, 0x42)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c)
r5 = socket$inet6(0xa, 0x3, 0x42)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r7 = getpgid(0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)="580cf4846fb9dd9f2b3295af03f51dd33fa9b786ff202573cd27ab028ac2c02ab2feda487c978dd3c56c4bab6e8509daf0cacd7f40b51e5588651c43378820158d225b3f77b2556ab76968cd3326fa16bc76d0343acba464001ac12b425df1b4c86daaa028879239dc42a04335728779f902598de7edb4a437d5ff84a6f53b0e3ef042661b9b4383be9e1c8f6b9006959ee5c3ca25bac8cfa7cb2b650789351bc87aa7d39fec8cf7c59cec5ee878719f43c92a180536590d228b54de93d979ce005d01", 0xc3}, {&(0x7f0000000080)="6935f38d3af8dc1b988740d8fcd0cbb50a1b3f1d6c03798745d1339391", 0x1d}, {&(0x7f0000000500)="28a85c25899334c8407c756c570d0c6e5ae59b22f6fdba45497165ddf5d721249f693709b77501475a2459c13391a3e2356a41620c71209b86b97fa6e22a0c293a6a4d42c072639770932d96013ad3fbe71ac974113d699495bf9f721a1d613eb3baa9e2484f31704d239c665611dd574c949db153864f3408fb6b57b0a8c198bcb9fb2b01f9823e78504a0381e44ef78383619ee3b66c1521e62fc92fd38bb96386190cb32cbeff8aa9e952bd231917617e89a3d87bd9247d639f5002dbe5dcfecf7ab4f9dcd9bbda5738947b37b07bb3c44314207fc193c4676e48adeb68fe1ae3edfd415d91eba0015622052cdd714a", 0xf1}, {&(0x7f0000000140)="44295cdede2bd309b43c2e73143249f866b1646b7b1fb52e6a5ebd2d9561a239e276cc3366938ee2bc8f405b95c1755ad9d15ddcf52b62a608d78acb7577cea641e9d0", 0x43}, {&(0x7f0000000940)="0615d274338459e66cfa064a751acb4b16b74e2d53d3015d732c6b62f62134766e95e5730a14da78133c67f2a37154f56153ba8b573f12773b00730db6a5c9e264b9122d1e43ceb398e85f9ae18f711333803ba3bf42b58f06e45855f2480cbd69c7d695d91ca252b8ec82e84353cdfadff2998821c821f409ee3815afba63737c1196d4d9f7f742bcfd745d6d3a998743995d020a4b49245bfd8f97caee3dd3aa5db8fbc2c69a69b84dc9386dabd7abf68864cec3f5f4016804099f1d05687c401933e4dd7fbbea1904a1c89272877cb9716044b6aeb695dc4ca9565bd165cc9c840ea542ecc80c747d7daba51f3ef4c7ca235c8264f98e2caed9563bd6cd36d7c6602ba6a19ddd4b264504c0a06fbaa5e65b48307fc126d66c6cb23a90268db60a084d46ea34fea2029ed0ed3ef2729e81b127deb017fb094f41960ef5b40ae0aaa482f9aa8686", 0x148}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="30ecff808641261385000000000000000000000000000000010000000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200000013e5c5a94833aee966511e17b453efe541000001002fac5b14a83875f6410fa0b4f4c155c8d90bc0ab91cbf5b6011ef0ba0c9b86", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x8000}}, {{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)="1d92b7a5c44d4ad71f2cb62cc9abe0d72cb1cbb34e89854d6016e1a4ae4a8eab7dce14c92fc2459cab2df77dba0e6331940f119d7cf4e7f23e622b8cf4abeee6c988b64b873c63586e85114c0747a7328013867a75c0cba48f7f1403a8bc0b80c2501b736b769bf231a96f3e6755a2ff92039edec253cbe4e66e333391297a170be57853bf4a917aeca5b4dae25fe7637d0bc781e8619aedf15c9ec2d8580bf6f6d5eff2f85ea8f72d", 0xa9}], 0x1, 0x0, 0x0, 0x20480e1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001380)="eb71848765efd039ec8764b975180772e049b3f562c5c6f69310376612ab7f9696ceb3b7a158204818b02446f751f489770261570cec7945766e052d06cf54c7174b912e0d86f29a1d343d4aa22f0f4399b282de6972fd381506dcb7a54e632e9365621837e38a5f4034c3f8e9d058b10b5b9904ad9dfba4a4c0123262e9643fd98332df3c3ba85946e1bf94dd0a0de543c2bc2df2822c45303c8ac3ea7f311445453d623dcf6341ae78399d5be98430f381513b1fdd42fd8898e2f2f2ecef60e7c9e8362761af4645cab56d237891c81b363e", 0xd3}, {&(0x7f0000001480)="6706cec342e86fba4edd2f9327648d7fa3535257492ecd55b0ed88c1b7b92983921d1b9fd809f11fd0b7d2b00ea00ed08925f8c6ec529ca90b6783417a5bffba9b7c73ad99191aef19a53697c733a7811a3d887733874e22d7edcd805dd61ec07cc71b73b72595a30d7e5ff2d10cd979c64a87d19c33c35912b7ffd5ccf39dbf68102cd4d90198ec062e6f4fdf4b89494a2aeae0b92b412a9cc444740a1163c68e072d55fdf2bb2e6d03df03d8541310ce90b3b65d8e264adca3a1040f268a2a2272e2fc2d46d041637b6a550fc47499b5ac58b6b6ff84b524c1945a49e51f484f2692caeb", 0xe5}, {&(0x7f0000001580)="dbb6d963c0b891c1ddd4002677a545bed0d5ce1afc795fa279bb2cbe1e75b7b5f37d6ed01020980348e51196452b490aa73f39cd5500bd99769929424a418c764dde4571ce85d95a88e49a893b6c03be65731970ba028d1db92301db921a9ee4f646f1804511e154c97a709f9660726acdbd2e29d16570c4b41d4f9d9b5ee20e28f1f50e3532932a7685ff59f83f26aa4aeadee82252ad4b69b11816d6f309112dfd29845d32e36df95497918e4f1aa05fe77823454111503fdd3a2247ccd6c0c13292f82bab69830ea6b7519cf544afb8e406405ae4418c5645feb9e4645e7b12f4ee32331dad7dc53fa61f46cf75e084fc2eec3378", 0xf6}, {&(0x7f0000001680)="cab2356e5b4ee8e4b726f67380c9a9a7905a55c2d4756ca8e71173676e558c6581941358da8faafdaa5801f939b507fcbf9deb53fc7fc49a37402afd02a3c54878219c592fab7a1fed85772f93cf20db251163e0a52b11a7405f96aced631b58107d7d7b2e58f21f4c3d02a6e2643c64ffedb648b5932fac127c30b960f6485a973db387061bc148fc51568e5ee41318077498cc69b493fcb0b2adc75eb525489225d862e95ef6611c9aed883023377161780469729d1479b03fa3e05cec7ee96c0231aaa93e3445967e3f57ecc22b8dc755", 0xd2}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000340)="80d801257cfbf38aed3a631623af51badc5327c778c2b86c1fd8facf8df4f31ee8ef5b648e3d5e5d11a016edc44c3fe97113c074dd34a90f0883057f97031db93a1fec42de467679984c2808acb61f80aaa6a0e6c32ce15f461ced0e72a2a622459eed2b5485b48073a9e0c1328ccc3f56299c0a1b0d36c26bbc1d7ac0fa1161bdb82d74820f117396b0e5348567f948afd6efc56205919f0f903005cdbe7f1d16fa8656333ac0740dc615f848471f72", 0xb0}], 0x6, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}], 0xd0, 0x4004000}}, {{&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002080)="984b3df9f9f4467d2bb22c40a7f295f60de868af220092d681b3d884d007ae226f9e79d4527fbb6d8f97d44fc0ffa4d71884", 0x32}, {&(0x7f00000020c0)="56b27e8257f45c93bab02cd0eeeda8c4035ff6fcd469b3c9c99ade783d38c832e46a27c7d5c682e88b2f6253e919d62836ecb84baa6c42b1c8c027c2e4a1044fb3d0c934e584081f5472fcd5", 0x4c}], 0x2, 0x0, 0x0, 0x80}}], 0x4, 0x10)
r8 = getpid()
syz_open_procfs(r8, &(0x7f0000000040)='status\x00')
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, 0xee01, 0x0, r2, 0x13, 0x8}, 0xadb, 0x8, 0x800, 0x1, r8, 0xffffffffffffffff, 0xf104})
sync()

19:53:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf)

19:53:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000088000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:37 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc000000, 0x0, 0x0, 0x0)

19:53:37 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 60)

19:53:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000188000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:37 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x4)

19:53:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0)

19:53:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x1e000000, 0x0, 0x0, 0x0)

[ 2056.310737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:53:37 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 61)

[ 2056.381850] loop5: detected capacity change from 0 to 72
[ 2056.413296] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2056.436579] loop6: detected capacity change from 0 to 512
[ 2056.507988] loop5: detected capacity change from 0 to 72
[ 2056.521483] EXT4-fs (loop6): unsupported inode size: 0
[ 2056.522644] EXT4-fs (loop6): blocksize: 2048
[ 2056.570101] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2056.601666] FAULT_INJECTION: forcing a failure.
[ 2056.601666] name failslab, interval 1, probability 0, space 0, times 0
[ 2056.604008] CPU: 0 PID: 12417 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2056.605919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2056.608160] Call Trace:
[ 2056.608663]  <TASK>
[ 2056.609106]  dump_stack_lvl+0x8b/0xb3
[ 2056.609873]  should_fail.cold+0x5/0xa
[ 2056.610636]  ? create_object.isra.0+0x3a/0xa20
[ 2056.611556]  should_failslab+0x5/0x10
[ 2056.612319]  kmem_cache_alloc+0x69/0x490
[ 2056.613147]  create_object.isra.0+0x3a/0xa20
[ 2056.614013]  ? kasan_unpoison+0x23/0x50
[ 2056.614804]  kmem_cache_alloc+0x244/0x490
[ 2056.615645]  __kernfs_new_node+0xd4/0x8b0
[ 2056.616472]  ? kernfs_add_one+0x3c6/0x550
[ 2056.617296]  ? kernfs_path_from_node+0x60/0x60
[ 2056.618211]  ? lock_is_held_type+0xd7/0x130
[ 2056.619102]  ? up_write+0x148/0x460
[ 2056.619818]  ? kernfs_activate+0x1c4/0x240
[ 2056.620664]  kernfs_new_node+0x93/0x120
[ 2056.621454]  __kernfs_create_file+0x51/0x350
[ 2056.622334]  sysfs_add_file_mode_ns+0x218/0x430
[ 2056.623265]  ? component_del+0x4c0/0x4c0
[ 2056.624070]  internal_create_group+0x322/0xb20
[ 2056.624985]  ? sysfs_remove_group+0x170/0x170
[ 2056.625875]  ? lock_is_held_type+0xd7/0x130
[ 2056.626726]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2056.627672]  ? loop_configure+0x1950/0x1950
[ 2056.628528]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2056.629515]  ? __loop_update_dio+0x2a3/0x620
[ 2056.630389]  loop_configure+0xe87/0x1950
[ 2056.631233]  lo_ioctl+0x7c5/0x18b0
[ 2056.631938]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2056.632900]  ? loop_set_status_old+0x1b0/0x1b0
[ 2056.633812]  ? avc_ss_reset+0x180/0x180
[ 2056.634607]  ? __lock_acquire+0xbac/0x6120
[ 2056.635517]  ? selinux_inode_getsecctx+0x90/0x90
[ 2056.636471]  ? loop_set_status_old+0x1b0/0x1b0
[ 2056.637386]  blkdev_ioctl+0x362/0x7f0
[ 2056.638142]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2056.639085]  ? __x64_sys_ioctl+0x97/0x210
[ 2056.639913]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2056.641012]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2056.641955]  __x64_sys_ioctl+0x196/0x210
[ 2056.642764]  do_syscall_64+0x3b/0x90
[ 2056.643529]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2056.644545] RIP: 0033:0x7f1f6d99b8d7
[ 2056.645277] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2056.648901] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2056.650400] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2056.651815] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2056.653245] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2056.654655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2056.656090] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2056.657533]  </TASK>
[ 2056.658586] loop4: detected capacity change from 0 to 512
[ 2056.661838] EXT4-fs: Ignoring removed nobh option
[ 2056.684186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2057.093905] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:53:52 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c8000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 62)

19:53:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x300)

19:53:52 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0)

19:53:52 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x20000000, 0x0, 0x0, 0x0)

19:53:52 executing program 2:
socket$inet6(0xa, 0x800, 0x1)
sync()
sync()
sync()
sync()

[ 2071.812203] FAULT_INJECTION: forcing a failure.
[ 2071.812203] name failslab, interval 1, probability 0, space 0, times 0
[ 2071.814533] CPU: 0 PID: 12436 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2071.816453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2071.818682] Call Trace:
[ 2071.819197]  <TASK>
[ 2071.819639]  dump_stack_lvl+0x8b/0xb3
[ 2071.820416]  should_fail.cold+0x5/0xa
[ 2071.821179]  ? __kernfs_new_node+0xd4/0x8b0
[ 2071.822037]  should_failslab+0x5/0x10
[ 2071.822793]  kmem_cache_alloc+0x69/0x490
[ 2071.823634]  __kernfs_new_node+0xd4/0x8b0
[ 2071.824457]  ? kernfs_add_one+0x3c6/0x550
[ 2071.825279]  ? kernfs_path_from_node+0x60/0x60
[ 2071.826191]  ? lock_is_held_type+0xd7/0x130
[ 2071.827055]  ? up_write+0x148/0x460
[ 2071.827821]  ? kernfs_activate+0x1c4/0x240
[ 2071.828669]  kernfs_new_node+0x93/0x120
[ 2071.829466]  __kernfs_create_file+0x51/0x350
[ 2071.830343]  sysfs_add_file_mode_ns+0x218/0x430
[ 2071.831281]  ? component_del+0x4c0/0x4c0
[ 2071.832086]  internal_create_group+0x322/0xb20
[ 2071.833004]  ? sysfs_remove_group+0x170/0x170
[ 2071.833895]  ? lock_is_held_type+0xd7/0x130
[ 2071.834748]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2071.835743]  ? loop_configure+0x1950/0x1950
[ 2071.836607]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2071.837600]  ? __loop_update_dio+0x2a3/0x620
[ 2071.838483]  loop_configure+0xe87/0x1950
[ 2071.839322]  lo_ioctl+0x7c5/0x18b0
[ 2071.839475] loop6: detected capacity change from 0 to 512
[ 2071.840028]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2071.841401] loop5: detected capacity change from 0 to 72
[ 2071.842148]  ? loop_set_status_old+0x1b0/0x1b0
[ 2071.842192]  ? avc_ss_reset+0x180/0x180
[ 2071.844968]  ? __lock_acquire+0xbac/0x6120
[ 2071.845876]  ? selinux_inode_getsecctx+0x90/0x90
[ 2071.846835]  ? loop_set_status_old+0x1b0/0x1b0
[ 2071.847781]  blkdev_ioctl+0x362/0x7f0
[ 2071.848536]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2071.849476]  ? __x64_sys_ioctl+0x97/0x210
[ 2071.850300]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2071.851396]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2071.852343]  __x64_sys_ioctl+0x196/0x210
[ 2071.853153]  do_syscall_64+0x3b/0x90
[ 2071.853906]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2071.854921] RIP: 0033:0x7f1f6d99b8d7
[ 2071.855673] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2071.859299] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2071.860793] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2071.862195] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2071.863600] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2071.864997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2071.866393] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2071.867832]  </TASK>
[ 2071.875638] EXT4-fs (loop6): unsupported inode size: 0
[ 2071.876907] EXT4-fs (loop6): blocksize: 2048
[ 2071.881205] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2071.884964] loop4: detected capacity change from 0 to 512
[ 2071.892473] EXT4-fs: Ignoring removed nobh option
19:53:52 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000688000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2071.929685] loop5: detected capacity change from 0 to 72
[ 2072.002535] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:53:52 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x24000000, 0x0, 0x0, 0x0)

[ 2072.024838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:53:52 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100300, 0x0, 0x0, 0x0, 0x0)

19:53:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xec0)

19:53:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:53:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:53:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000fe8000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2072.185806] loop6: detected capacity change from 0 to 512
[ 2072.203459] EXT4-fs (loop6): unsupported inode size: 0
[ 2072.204789] EXT4-fs (loop6): blocksize: 2048
[ 2072.242166] loop5: detected capacity change from 0 to 72
19:53:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 63)

[ 2072.287952] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:53:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000002000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2072.367328] loop5: detected capacity change from 0 to 72
[ 2072.431209] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2072.444238] FAULT_INJECTION: forcing a failure.
[ 2072.444238] name failslab, interval 1, probability 0, space 0, times 0
[ 2072.446698] CPU: 0 PID: 12478 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2072.448614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2072.450838] Call Trace:
[ 2072.451363]  <TASK>
[ 2072.451803]  dump_stack_lvl+0x8b/0xb3
[ 2072.452574]  should_fail.cold+0x5/0xa
[ 2072.453328]  ? radix_tree_node_alloc.constprop.0+0x1df/0x330
[ 2072.454473]  ? create_object.isra.0+0x3a/0xa20
[ 2072.455396]  should_failslab+0x5/0x10
[ 2072.456161]  kmem_cache_alloc+0x69/0x490
[ 2072.456997]  create_object.isra.0+0x3a/0xa20
[ 2072.457869]  ? kasan_unpoison+0x23/0x50
[ 2072.458667]  kmem_cache_alloc+0x244/0x490
[ 2072.459513]  radix_tree_node_alloc.constprop.0+0x1df/0x330
[ 2072.460615]  idr_get_free+0x4b5/0x8f0
[ 2072.461391]  idr_alloc_u32+0x170/0x2d0
[ 2072.462181]  ? __fprop_add_percpu_max+0x1a0/0x1a0
[ 2072.463142]  ? lock_acquire+0x1b2/0x4d0
[ 2072.463961]  idr_alloc_cyclic+0x102/0x230
[ 2072.464792]  ? idr_alloc+0x130/0x130
[ 2072.465532]  ? rwlock_bug.part.0+0x90/0x90
[ 2072.466389]  __kernfs_new_node+0x117/0x8b0
[ 2072.467242]  ? kernfs_add_one+0x3c6/0x550
[ 2072.468063]  ? kernfs_path_from_node+0x60/0x60
[ 2072.468973]  ? lock_is_held_type+0xd7/0x130
[ 2072.469837]  ? up_write+0x148/0x460
[ 2072.470553]  ? kernfs_activate+0x1c4/0x240
[ 2072.471408]  kernfs_new_node+0x93/0x120
[ 2072.472210]  __kernfs_create_file+0x51/0x350
[ 2072.473093]  sysfs_add_file_mode_ns+0x218/0x430
[ 2072.474024]  ? component_del+0x4c0/0x4c0
[ 2072.474836]  internal_create_group+0x322/0xb20
[ 2072.475776]  ? sysfs_remove_group+0x170/0x170
[ 2072.476662]  ? lock_is_held_type+0xd7/0x130
[ 2072.477521]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2072.478464]  ? loop_configure+0x1950/0x1950
[ 2072.479356]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2072.480352]  ? __loop_update_dio+0x2a3/0x620
[ 2072.481230]  loop_configure+0xe87/0x1950
[ 2072.482058]  lo_ioctl+0x7c5/0x18b0
[ 2072.482766]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2072.483737]  ? loop_set_status_old+0x1b0/0x1b0
[ 2072.484654]  ? avc_ss_reset+0x180/0x180
[ 2072.485454]  ? __lock_acquire+0xbac/0x6120
[ 2072.486367]  ? selinux_inode_getsecctx+0x90/0x90
[ 2072.487341]  ? loop_set_status_old+0x1b0/0x1b0
[ 2072.488259]  blkdev_ioctl+0x362/0x7f0
[ 2072.489014]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2072.489949]  ? __x64_sys_ioctl+0x97/0x210
[ 2072.490775]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2072.491876]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2072.492812]  __x64_sys_ioctl+0x196/0x210
[ 2072.493626]  do_syscall_64+0x3b/0x90
[ 2072.494378]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2072.495405] RIP: 0033:0x7f1f6d99b8d7
[ 2072.496136] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2072.499760] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2072.501259] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2072.502659] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2072.504075] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2072.505474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2072.506873] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2072.508307]  </TASK>
[ 2072.590844] loop4: detected capacity change from 0 to 512
[ 2072.598762] EXT4-fs: Ignoring removed nobh option
[ 2072.619024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2073.023619] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
19:54:10 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:54:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 64)

19:54:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:10 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008002000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:10 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf00)

19:54:10 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2a000000, 0x0, 0x0, 0x0)

19:54:10 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:54:10 executing program 2:
sync()
sync()
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0)

[ 2089.631951] loop5: detected capacity change from 0 to 72
[ 2089.635860] FAULT_INJECTION: forcing a failure.
[ 2089.635860] name failslab, interval 1, probability 0, space 0, times 0
[ 2089.637716] CPU: 0 PID: 12499 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2089.639273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2089.641115] Call Trace:
[ 2089.641531]  <TASK>
[ 2089.641888]  dump_stack_lvl+0x8b/0xb3
[ 2089.642520]  should_fail.cold+0x5/0xa
[ 2089.643148]  ? __kernfs_new_node+0xd4/0x8b0
[ 2089.643864]  should_failslab+0x5/0x10
[ 2089.644190] loop0: detected capacity change from 0 to 512
[ 2089.644480]  kmem_cache_alloc+0x69/0x490
[ 2089.644516]  __kernfs_new_node+0xd4/0x8b0
[ 2089.647142]  ? kernfs_add_one+0x3c6/0x550
[ 2089.647834]  ? kernfs_path_from_node+0x60/0x60
[ 2089.648584]  ? lock_is_held_type+0xd7/0x130
[ 2089.649295]  ? up_write+0x148/0x460
[ 2089.649888]  ? kernfs_activate+0x1c4/0x240
[ 2089.650583]  kernfs_new_node+0x93/0x120
[ 2089.651234]  __kernfs_create_file+0x51/0x350
[ 2089.651966]  sysfs_add_file_mode_ns+0x218/0x430
[ 2089.652124] loop6: detected capacity change from 0 to 512
[ 2089.652720]  ? component_del+0x4c0/0x4c0
[ 2089.652748]  internal_create_group+0x322/0xb20
[ 2089.655333]  ? sysfs_remove_group+0x170/0x170
[ 2089.656055]  ? lock_is_held_type+0xd7/0x130
[ 2089.656742]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2089.657497]  ? loop_configure+0x1950/0x1950
[ 2089.658205]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2089.659002]  ? __loop_update_dio+0x2a3/0x620
[ 2089.659731]  loop_configure+0xe87/0x1950
[ 2089.660404]  lo_ioctl+0x7c5/0x18b0
[ 2089.660977]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2089.661768]  ? loop_set_status_old+0x1b0/0x1b0
[ 2089.662522]  ? avc_ss_reset+0x180/0x180
[ 2089.663169]  ? __lock_acquire+0xbac/0x6120
[ 2089.663905]  ? selinux_inode_getsecctx+0x90/0x90
[ 2089.664683]  ? loop_set_status_old+0x1b0/0x1b0
[ 2089.665419]  blkdev_ioctl+0x362/0x7f0
[ 2089.666046]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2089.666796]  ? __x64_sys_ioctl+0x97/0x210
[ 2089.667471]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2089.668361]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2089.669118]  __x64_sys_ioctl+0x196/0x210
[ 2089.669776]  do_syscall_64+0x3b/0x90
[ 2089.670395]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2089.671207] RIP: 0033:0x7f1f6d99b8d7
[ 2089.671801] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2089.674634] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2089.675865] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2089.676987] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2089.678107] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2089.679212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2089.680325] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2089.681479]  </TASK>
[ 2089.690456] EXT4-fs (loop6): unsupported inode size: 0
[ 2089.692085] EXT4-fs (loop6): blocksize: 2048
[ 2089.694977] EXT4-fs (loop0): unsupported inode size: 0
[ 2089.696568] EXT4-fs (loop0): blocksize: 2048
[ 2089.731778] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:10 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008003000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2089.752797] loop4: detected capacity change from 0 to 512
[ 2089.760593] EXT4-fs: Ignoring removed nobh option
[ 2089.788684] loop5: detected capacity change from 0 to 72
[ 2089.796840] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2089.870203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2089.873119] loop5: detected capacity change from 0 to 72
[ 2089.879857] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2089.895535] loop5: detected capacity change from 0 to 72
[ 2089.915041] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:10 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xc00e)

19:54:10 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:54:10 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc, 0xe8, @broadcast}]]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x5, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x7f, 0x5}, {0x3, 0x4}, {0x8, 0x5}, {0xee, 0x3}, {0x33, 0x5}, {0xff, 0x2}, {0x80, 0x2}, {0xff, 0x2}, {0xac, 0x1}, {0x7f, 0x4}, {0x1f, 0x5}, {0x2, 0x6}, {0x8, 0x4}, {0x0, 0x4}], "cf241d82d058e499"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4, 0x5}, {0x20, 0x4}, {0xbd}, {0xbf, 0x5}, {0x7f, 0x5}, {0x6, 0x3}, {0x1f}, {0x0, 0x6}], "ced82ceb16d5c3f2"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x885}, 0x0)
sendfile(r2, r0, 0x0, 0xdb8a)
read(r1, &(0x7f0000000040)=""/117, 0x75)

19:54:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9196, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:10 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x30000000, 0x0, 0x0, 0x0)

[ 2090.014249] loop6: detected capacity change from 0 to 512
[ 2090.016588] loop5: detected capacity change from 0 to 72
[ 2090.032007] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2090.040346] EXT4-fs (loop6): unsupported inode size: 0
[ 2090.040969] EXT4-fs (loop6): blocksize: 2048
[ 2090.096201] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
19:54:24 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008004000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2103.704688] FAULT_INJECTION: forcing a failure.
[ 2103.704688] name failslab, interval 1, probability 0, space 0, times 0
[ 2103.706015] CPU: 1 PID: 12538 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2103.707025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2103.708207] Call Trace:
[ 2103.708473]  <TASK>
[ 2103.708722]  dump_stack_lvl+0x8b/0xb3
[ 2103.709136]  should_fail.cold+0x5/0xa
[ 2103.709544]  ? create_object.isra.0+0x3a/0xa20
[ 2103.710029]  should_failslab+0x5/0x10
[ 2103.710431]  kmem_cache_alloc+0x69/0x490
[ 2103.710878]  create_object.isra.0+0x3a/0xa20
[ 2103.711339]  ? kasan_unpoison+0x23/0x50
[ 2103.711757]  kmem_cache_alloc+0x244/0x490
[ 2103.712194]  __kernfs_new_node+0xd4/0x8b0
[ 2103.712641]  ? kernfs_add_one+0x3c6/0x550
[ 2103.713090]  ? kernfs_path_from_node+0x60/0x60
[ 2103.713589]  ? lock_is_held_type+0xd7/0x130
[ 2103.714044]  ? up_write+0x148/0x460
[ 2103.714428]  ? kernfs_activate+0x1c4/0x240
[ 2103.714868]  kernfs_new_node+0x93/0x120
[ 2103.715280]  __kernfs_create_file+0x51/0x350
[ 2103.715751]  sysfs_add_file_mode_ns+0x218/0x430
[ 2103.716237]  ? component_del+0x4c0/0x4c0
[ 2103.716658]  internal_create_group+0x322/0xb20
[ 2103.717167]  ? sysfs_remove_group+0x170/0x170
[ 2103.717636]  ? lock_is_held_type+0xd7/0x130
[ 2103.718086]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2103.718586]  ? loop_configure+0x1950/0x1950
[ 2103.719031]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2103.719559]  ? __loop_update_dio+0x2a3/0x620
[ 2103.720022]  loop_configure+0xe87/0x1950
[ 2103.720460]  lo_ioctl+0x7c5/0x18b0
[ 2103.720831]  ? avc_has_extended_perms+0x7e8/0xeb0
19:54:24 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf000)

19:54:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 65)

[ 2103.721330]  ? loop_set_status_old+0x1b0/0x1b0
[ 2103.722029]  ? avc_ss_reset+0x180/0x180
[ 2103.722453]  ? __lock_acquire+0xbac/0x6120
[ 2103.722933]  ? selinux_inode_getsecctx+0x90/0x90
[ 2103.723440]  ? loop_set_status_old+0x1b0/0x1b0
[ 2103.723934]  blkdev_ioctl+0x362/0x7f0
[ 2103.724327]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2103.724810]  ? __x64_sys_ioctl+0x97/0x210
[ 2103.725243]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2103.725806]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2103.726299]  __x64_sys_ioctl+0x196/0x210
[ 2103.726735]  do_syscall_64+0x3b/0x90
[ 2103.727149]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2103.727712] RIP: 0033:0x7f1f6d99b8d7
[ 2103.728109] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2103.730083] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2103.730923] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2103.731696] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2103.732483] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2103.733255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2103.734026] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2103.734811]  </TASK>
[ 2103.750375] loop4: detected capacity change from 0 to 512
[ 2103.753940] EXT4-fs: Ignoring removed nobh option
19:54:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9197, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2103.781266] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
19:54:24 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:54:24 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2a000000, 0x0, 0x0, 0x0)

19:54:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc, 0xe8, @broadcast}]]}, 0x28}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00')
openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="49010900", @ANYRES16=r6, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x140, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x34}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)

19:54:24 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x36000000, 0x0, 0x0, 0x0)

19:54:24 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x34000)

[ 2103.805047] loop6: detected capacity change from 0 to 512
[ 2103.805817] loop5: detected capacity change from 0 to 72
[ 2103.829147] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:24 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008005000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2103.843837] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[ 2103.850706] EXT4-fs (loop6): unsupported inode size: 0
[ 2103.851882] EXT4-fs (loop6): blocksize: 2048
[ 2103.853231] loop5: detected capacity change from 0 to 72
19:54:24 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3c000000, 0x0, 0x0, 0x0)

[ 2103.861686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2103.867244] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008006000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:41 executing program 2:
sync()
sync()
sync()
sync()

19:54:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x400300)

19:54:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x91c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 66)

19:54:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc, 0xe8, @broadcast}]]}, 0x28}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00')
openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="49010900", @ANYRES16=r6, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x140, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x34}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)

19:54:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:54:41 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x3f000000, 0x0, 0x0, 0x0)

[ 2120.508718] loop6: detected capacity change from 0 to 512
[ 2120.516964] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2120.534445] loop5: detected capacity change from 0 to 72
[ 2120.558538] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2120.563373] FAULT_INJECTION: forcing a failure.
[ 2120.563373] name failslab, interval 1, probability 0, space 0, times 0
[ 2120.566018] CPU: 1 PID: 12590 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2120.568448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2120.571153] Call Trace:
[ 2120.571787]  <TASK>
[ 2120.572354]  dump_stack_lvl+0x8b/0xb3
[ 2120.573282]  should_fail.cold+0x5/0xa
[ 2120.574235]  ? create_object.isra.0+0x3a/0xa20
[ 2120.575339]  should_failslab+0x5/0x10
[ 2120.576246]  kmem_cache_alloc+0x69/0x490
[ 2120.577276]  create_object.isra.0+0x3a/0xa20
[ 2120.578298]  ? kasan_unpoison+0x23/0x50
[ 2120.579285]  kmem_cache_alloc+0x244/0x490
[ 2120.580324]  __kernfs_new_node+0xd4/0x8b0
[ 2120.581363]  ? kernfs_add_one+0x3c6/0x550
[ 2120.582294]  ? kernfs_path_from_node+0x60/0x60
[ 2120.583415]  ? lock_is_held_type+0xd7/0x130
[ 2120.584480]  ? up_write+0x148/0x460
[ 2120.585348]  ? kernfs_activate+0x1c4/0x240
[ 2120.586384]  kernfs_new_node+0x93/0x120
[ 2120.587388]  __kernfs_create_file+0x51/0x350
[ 2120.588505]  sysfs_add_file_mode_ns+0x218/0x430
[ 2120.589426]  ? component_del+0x4c0/0x4c0
[ 2120.590267]  internal_create_group+0x322/0xb20
[ 2120.591294]  ? sysfs_remove_group+0x170/0x170
[ 2120.592363]  ? lock_is_held_type+0xd7/0x130
[ 2120.593386]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2120.594522]  ? loop_configure+0x1950/0x1950
[ 2120.595467]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2120.596612]  ? __loop_update_dio+0x2a3/0x620
[ 2120.597635]  loop_configure+0xe87/0x1950
[ 2120.598627]  lo_ioctl+0x7c5/0x18b0
[ 2120.599352]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2120.600355]  ? loop_set_status_old+0x1b0/0x1b0
[ 2120.601290]  ? avc_ss_reset+0x180/0x180
[ 2120.602110]  ? __lock_acquire+0xbac/0x6120
[ 2120.603049]  ? selinux_inode_getsecctx+0x90/0x90
[ 2120.604060]  ? loop_set_status_old+0x1b0/0x1b0
[ 2120.605000]  blkdev_ioctl+0x362/0x7f0
[ 2120.605782]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2120.606755]  ? __x64_sys_ioctl+0x97/0x210
[ 2120.607602]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2120.608735]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2120.609704]  __x64_sys_ioctl+0x196/0x210
[ 2120.610546]  do_syscall_64+0x3b/0x90
[ 2120.611317]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2120.612389] RIP: 0033:0x7f1f6d99b8d7
[ 2120.613149] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2120.616921] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2120.618480] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2120.619951] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2120.621394] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2120.622841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2120.624287] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2120.625774]  </TASK>
[ 2120.635276] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2120.659627] loop5: detected capacity change from 0 to 72
19:54:41 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x2a000000, 0x0, 0x0, 0x0)

[ 2120.709577] loop4: detected capacity change from 0 to 512
[ 2120.723798] EXT4-fs: Ignoring removed nobh option
[ 2120.728113] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:54:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2120.792790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:54:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008007000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:54:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2120.866756] loop6: detected capacity change from 0 to 512
19:54:41 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x9c260000, 0x0, 0x0, 0x0)

19:54:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 67)

[ 2120.970398] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:54:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008008000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2121.028859] loop5: detected capacity change from 0 to 73
19:54:41 executing program 2:
sync()
sync()

[ 2121.068317] FAULT_INJECTION: forcing a failure.
[ 2121.068317] name failslab, interval 1, probability 0, space 0, times 0
[ 2121.069839] CPU: 0 PID: 12617 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2121.071119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2121.072626] Call Trace:
[ 2121.072968]  <TASK>
[ 2121.073268]  dump_stack_lvl+0x8b/0xb3
[ 2121.073783]  should_fail.cold+0x5/0xa
[ 2121.074289]  ? create_object.isra.0+0x3a/0xa20
[ 2121.074892]  should_failslab+0x5/0x10
[ 2121.075396]  kmem_cache_alloc+0x69/0x490
[ 2121.075948]  create_object.isra.0+0x3a/0xa20
[ 2121.076532]  ? kasan_unpoison+0x23/0x50
[ 2121.077057]  kmem_cache_alloc+0x244/0x490
[ 2121.077610]  __kernfs_new_node+0xd4/0x8b0
[ 2121.078170]  ? kernfs_add_one+0x3c6/0x550
[ 2121.078721]  ? kernfs_path_from_node+0x60/0x60
[ 2121.079333]  ? lock_is_held_type+0xd7/0x130
[ 2121.079920]  ? up_write+0x148/0x460
[ 2121.080407]  ? kernfs_activate+0x1c4/0x240
[ 2121.080966]  kernfs_new_node+0x93/0x120
[ 2121.081490]  __kernfs_create_file+0x51/0x350
[ 2121.082067]  sysfs_add_file_mode_ns+0x218/0x430
[ 2121.082678]  ? component_del+0x4c0/0x4c0
[ 2121.083212]  internal_create_group+0x322/0xb20
[ 2121.083816]  ? sysfs_remove_group+0x170/0x170
[ 2121.084411]  ? lock_is_held_type+0xd7/0x130
[ 2121.084969]  ? lockdep_init_map_type+0x2c3/0x7a0
[ 2121.085591]  ? loop_configure+0x1950/0x1950
[ 2121.086155]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2121.086806]  ? __loop_update_dio+0x2a3/0x620
[ 2121.087382]  loop_configure+0xe87/0x1950
[ 2121.087935]  lo_ioctl+0x7c5/0x18b0
[ 2121.088401]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2121.089038]  ? loop_set_status_old+0x1b0/0x1b0
[ 2121.089637]  ? avc_ss_reset+0x180/0x180
[ 2121.090168]  ? __lock_acquire+0xbac/0x6120
[ 2121.090767]  ? selinux_inode_getsecctx+0x90/0x90
[ 2121.091409]  ? loop_set_status_old+0x1b0/0x1b0
[ 2121.092029]  blkdev_ioctl+0x362/0x7f0
[ 2121.092533]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2121.093155]  ? __x64_sys_ioctl+0x97/0x210
[ 2121.093693]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2121.094416]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2121.095030]  __x64_sys_ioctl+0x196/0x210
[ 2121.095570]  do_syscall_64+0x3b/0x90
[ 2121.096084]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2121.096774] RIP: 0033:0x7f1f6d99b8d7
[ 2121.097273] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2121.099742] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2121.100771] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2121.101724] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2121.102679] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2121.103629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2121.104595] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2121.105565]  </TASK>
19:54:42 executing program 0:
sync()
sync()
sync()
sync()

19:54:42 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xad010000, 0x0, 0x0, 0x0)

[ 2121.179682] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2121.199849] loop5: detected capacity change from 0 to 73
[ 2121.223494] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2121.314147] loop4: detected capacity change from 0 to 512
[ 2121.315888] EXT4-fs: Ignoring removed nobh option
[ 2121.326678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2123.581641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2123.583914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2123.585773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2123.591225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2123.594374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2123.596189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2125.622135] Bluetooth: hci4: command 0x0409 tx timeout
[ 2127.670121] Bluetooth: hci4: command 0x041b tx timeout
[ 2129.719108] Bluetooth: hci4: command 0x040f tx timeout
[ 2131.509423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2131.511429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2131.514145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2131.563563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2131.565440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2131.568473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2131.766312] Bluetooth: hci4: command 0x0419 tx timeout
19:55:08 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xc00c0000, 0x0, 0x0, 0x0)

19:55:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0ffff)

19:55:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 68)

19:55:08 executing program 2:
sync()
sync()
sync()
sync()

19:55:08 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:55:08 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008018000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:08 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x923f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

[ 2147.340685] loop4: detected capacity change from 0 to 512
[ 2147.349931] loop5: detected capacity change from 0 to 73
[ 2147.356134] FAULT_INJECTION: forcing a failure.
[ 2147.356134] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.358482] CPU: 1 PID: 13096 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2147.360573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2147.362953] Call Trace:
[ 2147.363523]  <TASK>
[ 2147.363998]  dump_stack_lvl+0x8b/0xb3
[ 2147.364834]  should_fail.cold+0x5/0xa
[ 2147.365637]  ? kobject_get_path+0xc0/0x1d0
[ 2147.366527]  should_failslab+0x5/0x10
[ 2147.367319]  __kmalloc+0x72/0x440
[ 2147.368050]  kobject_get_path+0xc0/0x1d0
[ 2147.368916]  kobject_uevent_env+0x25c/0xfa0
[ 2147.369834]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2147.370875]  ? __loop_update_dio+0x2a3/0x620
[ 2147.371798]  loop_configure+0x14e8/0x1950
[ 2147.372702]  lo_ioctl+0x7c5/0x18b0
[ 2147.373448]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2147.374457]  ? loop_set_status_old+0x1b0/0x1b0
[ 2147.375426]  ? avc_ss_reset+0x180/0x180
[ 2147.376270]  ? __lock_acquire+0xbac/0x6120
[ 2147.377255]  ? selinux_inode_getsecctx+0x90/0x90
[ 2147.378277]  ? loop_set_status_old+0x1b0/0x1b0
[ 2147.379286]  blkdev_ioctl+0x362/0x7f0
[ 2147.380104]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2147.381123]  ? __x64_sys_ioctl+0x97/0x210
[ 2147.382009]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2147.383181]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2147.384181]  __x64_sys_ioctl+0x196/0x210
[ 2147.384464] loop6: detected capacity change from 0 to 512
[ 2147.385060]  do_syscall_64+0x3b/0x90
[ 2147.385101]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2147.385128] RIP: 0033:0x7f1f6d99b8d7
[ 2147.388992] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2147.392886] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2147.394488] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2147.396017] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2147.397537] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2147.399046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2147.400572] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2147.402111]  </TASK>
[ 2147.408755] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2147.426686] EXT4-fs: Ignoring removed nobh option
[ 2147.436834] loop0: detected capacity change from 0 to 512
[ 2147.459196] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[ 2147.480071] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2147.526400] loop5: detected capacity change from 0 to 73
19:55:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x1000000)

[ 2147.547587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:55:08 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000801c000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2147.579201] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:55:08 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100027, 0x0, 0x0, 0x0, 0x0)

19:55:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 69)

19:55:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, 0x0)

[ 2147.734614] loop4: detected capacity change from 0 to 512
[ 2147.736406] loop6: detected capacity change from 0 to 512
[ 2147.740269] FAULT_INJECTION: forcing a failure.
[ 2147.740269] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.742308] CPU: 1 PID: 13126 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2147.743989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2147.745961] Call Trace:
[ 2147.746404]  <TASK>
[ 2147.746790]  dump_stack_lvl+0x8b/0xb3
[ 2147.747471]  should_fail.cold+0x5/0xa
[ 2147.748138]  ? kobject_uevent_env+0x236/0xfa0
[ 2147.748951]  should_failslab+0x5/0x10
[ 2147.749614]  kmem_cache_alloc_trace+0x55/0x3c0
[ 2147.750415]  kobject_uevent_env+0x236/0xfa0
[ 2147.751169]  ? dev_uevent_filter+0xd0/0xd0
[ 2147.751914]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2147.752786]  ? __loop_update_dio+0x2a3/0x620
[ 2147.753534]  loop_configure+0x14e8/0x1950
[ 2147.754267]  lo_ioctl+0x7c5/0x18b0
[ 2147.754887]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2147.755700]  ? loop_set_status_old+0x1b0/0x1b0
[ 2147.756511]  ? avc_ss_reset+0x180/0x180
[ 2147.757195]  ? __lock_acquire+0xbac/0x6120
[ 2147.757983]  ? selinux_inode_getsecctx+0x90/0x90
[ 2147.758801]  ? loop_set_status_old+0x1b0/0x1b0
[ 2147.759587]  blkdev_ioctl+0x362/0x7f0
[ 2147.760236]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2147.761058]  ? __x64_sys_ioctl+0x97/0x210
[ 2147.761769]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2147.762704]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2147.763510]  __x64_sys_ioctl+0x196/0x210
[ 2147.764225]  do_syscall_64+0x3b/0x90
[ 2147.764885]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2147.765774] RIP: 0033:0x7f1f6d99b8d7
[ 2147.766409] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2147.769560] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2147.770854] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2147.772090] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2147.773333] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2147.774561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2147.775794] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2147.777049]  </TASK>
19:55:08 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x2000000)

19:55:08 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xe4ffffff, 0x0, 0x0, 0x0)

19:55:08 executing program 2:
sync()
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000040)={<r1=>0x0, "c430b57eea21e4893046b785fd3d2be8"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001040)={r1, 0x8, 0x8, 0x1})

[ 2147.888272] EXT4-fs: Ignoring removed nobh option
[ 2147.913930] loop5: detected capacity change from 0 to 73
[ 2147.942794] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2147.949458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2147.977512] loop5: detected capacity change from 0 to 73
[ 2148.005208] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:55:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2160.848996] loop5: detected capacity change from 0 to 73
[ 2160.853716] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:55:21 executing program 2:
socketpair(0x15, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sync()

19:55:21 executing program 0:
sync()
sync()
sync()
sync()

19:55:21 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008068000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:21 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xfeffffff, 0x0, 0x0, 0x0)

19:55:21 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x3000000)

19:55:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 70)

19:55:21 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, 0x0)

[ 2160.898899] loop4: detected capacity change from 0 to 512
[ 2160.907591] loop5: detected capacity change from 0 to 73
[ 2160.910487] loop6: detected capacity change from 0 to 512
[ 2160.923247] FAULT_INJECTION: forcing a failure.
[ 2160.923247] name failslab, interval 1, probability 0, space 0, times 0
[ 2160.926004] CPU: 1 PID: 13161 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2160.928196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2160.930847] Call Trace:
[ 2160.931370]  <TASK>
[ 2160.931909]  dump_stack_lvl+0x8b/0xb3
[ 2160.932720]  should_fail.cold+0x5/0xa
[ 2160.933603]  ? create_object.isra.0+0x3a/0xa20
[ 2160.934777]  should_failslab+0x5/0x10
[ 2160.935777]  kmem_cache_alloc+0x69/0x490
[ 2160.936896]  create_object.isra.0+0x3a/0xa20
[ 2160.937851]  ? kasan_unpoison+0x23/0x50
[ 2160.938787]  kmem_cache_alloc_trace+0x22e/0x3c0
[ 2160.939883]  kobject_uevent_env+0x236/0xfa0
[ 2160.940940]  ? dev_uevent_filter+0xd0/0xd0
[ 2160.941930]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2160.943048]  ? __loop_update_dio+0x2a3/0x620
[ 2160.944051]  loop_configure+0x14e8/0x1950
[ 2160.945088]  lo_ioctl+0x7c5/0x18b0
[ 2160.945940]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2160.947052]  ? loop_set_status_old+0x1b0/0x1b0
[ 2160.948136]  ? avc_ss_reset+0x180/0x180
[ 2160.949119]  ? __lock_acquire+0xbac/0x6120
[ 2160.950151]  ? selinux_inode_getsecctx+0x90/0x90
[ 2160.951213]  ? loop_set_status_old+0x1b0/0x1b0
[ 2160.952140]  blkdev_ioctl+0x362/0x7f0
[ 2160.952921]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2160.954033]  ? __x64_sys_ioctl+0x97/0x210
[ 2160.955037]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2160.956235]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2160.957332]  __x64_sys_ioctl+0x196/0x210
[ 2160.958299]  do_syscall_64+0x3b/0x90
[ 2160.959188]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2160.960351] RIP: 0033:0x7f1f6d99b8d7
[ 2160.961301] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2160.965113] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2160.966617] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2160.968036] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2160.969450] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2160.970852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2160.972246] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2160.973674]  </TASK>
[ 2160.992886] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2161.059813] EXT4-fs: Ignoring removed nobh option
19:55:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080fe000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:22 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100026, 0x0, 0x0, 0x0, 0x0)

19:55:22 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, 0x0)

[ 2161.131625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:55:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x4000000)

19:55:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x92c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:22 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xffff8000, 0x0, 0x0, 0x0)

19:55:22 executing program 0:
sync()
sync()
sync()
sync()

[ 2161.248538] loop6: detected capacity change from 0 to 512
[ 2161.265705] loop5: detected capacity change from 0 to 73
19:55:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000030006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2161.354745] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:55:22 executing program 2:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x3, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, 0x0)
r3 = semget$private(0x0, 0x2, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x3}, {0x3, 0x3ff, 0x800}, {0x3, 0xff, 0x800}, {0x4, 0x101, 0x1800}], 0x4, &(0x7f0000000080)={r0, r1+10000000})
sync()
r4 = semget(0x2, 0x2, 0x1)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$GETZCNT(r5, 0x4, 0xf, 0x0)
semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000001c0)=""/161)
semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000000c0)=""/241)

19:55:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 71)

19:55:22 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}]})

19:55:22 executing program 2:
sync()
sync()
sync()
sync()

[ 2161.557321] loop6: detected capacity change from 0 to 512
[ 2161.572570] loop4: detected capacity change from 0 to 512
[ 2161.575272] FAULT_INJECTION: forcing a failure.
[ 2161.575272] name failslab, interval 1, probability 0, space 0, times 0
[ 2161.577817] CPU: 0 PID: 13210 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2161.579844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2161.582127] Call Trace:
[ 2161.582631]  <TASK>
[ 2161.583075]  dump_stack_lvl+0x8b/0xb3
[ 2161.583848]  should_fail.cold+0x5/0xa
[ 2161.584624]  ? create_object.isra.0+0x3a/0xa20
[ 2161.585528]  should_failslab+0x5/0x10
[ 2161.586280]  kmem_cache_alloc+0x69/0x490
[ 2161.587097]  create_object.isra.0+0x3a/0xa20
[ 2161.587963]  ? kasan_unpoison+0x23/0x50
[ 2161.588773]  kmem_cache_alloc_node+0x248/0x490
[ 2161.589696]  __alloc_skb+0x211/0x340
[ 2161.590463]  alloc_uevent_skb+0x7b/0x210
[ 2161.591312]  kobject_uevent_env+0xaa4/0xfa0
[ 2161.592213]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2161.593237]  ? __loop_update_dio+0x2a3/0x620
[ 2161.594135]  loop_configure+0x14e8/0x1950
[ 2161.595001]  lo_ioctl+0x7c5/0x18b0
[ 2161.595716]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2161.596717]  ? loop_set_status_old+0x1b0/0x1b0
[ 2161.597669]  ? avc_ss_reset+0x180/0x180
[ 2161.598492]  ? __lock_acquire+0xbac/0x6120
[ 2161.599408]  ? selinux_inode_getsecctx+0x90/0x90
[ 2161.600364]  ? loop_set_status_old+0x1b0/0x1b0
[ 2161.601297]  blkdev_ioctl+0x362/0x7f0
[ 2161.602053]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2161.602988]  ? __x64_sys_ioctl+0x97/0x210
[ 2161.603820]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2161.604916]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2161.605855]  __x64_sys_ioctl+0x196/0x210
[ 2161.606664]  do_syscall_64+0x3b/0x90
[ 2161.607404]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2161.608420] RIP: 0033:0x7f1f6d99b8d7
[ 2161.609155] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2161.612779] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2161.614270] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2161.615667] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2161.617071] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2161.618466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2161.619863] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2161.621306]  </TASK>
[ 2161.672776] EXT4-fs: Ignoring removed nobh option
[ 2161.691393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2161.699803] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:55:35 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2174.929390] loop6: detected capacity change from 0 to 512
19:55:35 executing program 2:
sync()
sync()
sync()
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@version_9p2000}]}})
sync()
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/198, 0xc6}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000000b00)=""/67, 0x43}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/188, 0xbc}], 0x7, &(0x7f0000000e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f40)=<r4=>0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000800), 0x820004, &(0x7f0000000f80)={[{@huge_never}, {@gid={'gid', 0x3d, r3}}], [{@fowner_lt={'fowner<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, 'rfdno'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, '(.{#'}}]})
setresuid(0x0, r2, 0x0)
getresuid(&(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0), &(0x7f0000000600)=<r6=>0x0)
r7 = getegid()
getresgid(&(0x7f00000018c0), &(0x7f0000001900)=<r8=>0x0, &(0x7f0000001940))
fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, 0x3, &(0x7f0000000640)=[{&(0x7f00000002c0)="f5c81c4751ba7d0401a81014a92ac12cb5945c626c98726cbb596da264d0dd34a3e0c3cac7c4a19164a5e0bde681ec59090cd1cbe6aa5800e8b01d1fdabcc47057b3827f0d76fadfa90a7a5a616f831d5e8b1fa6bb45f59ea9a142ae43a308147793cc898c9f7202114adc3e77fac2e44d4cbe5fa90607097e9d1c240bcd1203114c9d68493985cbe0408ae62db2", 0x8e, 0xffffffffffffffe0}, {&(0x7f0000000380)="1cecaa92012bdf993d8c23000a47df8754db2098059d21a153ef515028390237180ec1cc28410f0ed6846858074800cabd86a6ef0aac74a7f508d051d134e644515774cdfa68f62ce0bcd4657ee8399470c67fa71a5bb804a384c30e35cbef6364788ef7d57b13245d19a6b73f36a25529266dc3a5c32930399d24ae6946949857f854a1747c4596585b03c8b506b76146ff3261f9ce5696ce5d6bc92ef713c30530de946d202d23300e74a8b58d8fea57ddbd2566f2627880db869beae1b64d9c58dff88394ba4b9fcd5983fd9e28cad6b878e2ac1708d6a8f21064f44a0f61", 0xe0, 0xfffffffffffffffc}, {&(0x7f0000000480)="be6bed3e147fbd5e782034c76a14c177cf7f60c001cb8579a3b9e8eb945d49bf1ed207754fe6a5e1c32ce98448d27cb9c555715f0ef7306355263681648e62588ec1be5bb54092517d59090e25f054c4e3094ce6f5b59f356befbeeb31f9021162881d6749704b96a8ba795185e79d6a88fdb27334dd07647c5d26d6f2eb38624271ae", 0x83, 0x7}], 0x2, &(0x7f0000000740)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x200}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@fat=@dos1xfloppy}, {@dots}], [{@euid_gt={'euid>', r9}}, {@fsname={'fsname', 0x3d, 'access=client'}}, {@fowner_lt={'fowner<', r5}}]})
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001980)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x5, r6}, {0x2, 0x4, r5}], {0x4, 0x5}, [{0x8, 0x7, r7}, {0x8, 0x0, r8}, {0x8, 0x0, 0xee00}], {}, {0x20, 0x7}}, 0x54, 0x2)
sync()

19:55:35 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 72)

19:55:35 executing program 0:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x3, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, 0x0)
r3 = semget$private(0x0, 0x2, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x3}, {0x3, 0x3ff, 0x800}, {0x3, 0xff, 0x800}, {0x4, 0x101, 0x1800}], 0x4, &(0x7f0000000080)={r0, r1+10000000})
sync()
r4 = semget(0x2, 0x2, 0x1)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$GETZCNT(r5, 0x4, 0xf, 0x0)
semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000001c0)=""/161)
semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000000c0)=""/241)

19:55:35 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008080040006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:35 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}]})

19:55:35 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xffffc000, 0x0, 0x0, 0x0)

19:55:35 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf000000)

[ 2174.938850] loop4: detected capacity change from 0 to 512
[ 2174.939546] FAULT_INJECTION: forcing a failure.
[ 2174.939546] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.940866] CPU: 0 PID: 13224 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2174.941968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2174.943276] Call Trace:
[ 2174.943550]  <TASK>
[ 2174.943805]  dump_stack_lvl+0x8b/0xb3
[ 2174.944253]  should_fail.cold+0x5/0xa
[ 2174.944692]  ? create_object.isra.0+0x3a/0xa20
[ 2174.945228]  should_failslab+0x5/0x10
[ 2174.945654]  kmem_cache_alloc+0x69/0x490
[ 2174.946124]  create_object.isra.0+0x3a/0xa20
[ 2174.946628]  ? kasan_unpoison+0x23/0x50
[ 2174.947086]  kmem_cache_alloc_node+0x248/0x490
[ 2174.947614]  __alloc_skb+0x211/0x340
[ 2174.948046]  alloc_uevent_skb+0x7b/0x210
[ 2174.948525]  kobject_uevent_env+0xaa4/0xfa0
[ 2174.949050]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2174.949630]  ? __loop_update_dio+0x2a3/0x620
[ 2174.950143]  loop_configure+0x14e8/0x1950
[ 2174.950634]  lo_ioctl+0x7c5/0x18b0
[ 2174.951046]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2174.951602]  ? loop_set_status_old+0x1b0/0x1b0
[ 2174.952131]  ? avc_ss_reset+0x180/0x180
[ 2174.952594]  ? __lock_acquire+0xbac/0x6120
[ 2174.953127]  ? selinux_inode_getsecctx+0x90/0x90
[ 2174.953685]  ? loop_set_status_old+0x1b0/0x1b0
[ 2174.954213]  blkdev_ioctl+0x362/0x7f0
[ 2174.954643]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2174.955170]  ? __x64_sys_ioctl+0x97/0x210
[ 2174.955633]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2174.956242]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2174.956757]  __x64_sys_ioctl+0x196/0x210
[ 2174.957220]  do_syscall_64+0x3b/0x90
[ 2174.957644]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2174.958214] RIP: 0033:0x7f1f6d99b8d7
[ 2174.958620] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.960639] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2174.961498] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2174.962273] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2174.963057] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2174.963816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2174.964605] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2174.965409]  </TASK>
[ 2174.999926] EXT4-fs: Ignoring removed nobh option
[ 2175.004309] loop5: detected capacity change from 0 to 73
19:55:35 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xfffff000, 0x0, 0x0, 0x0)

[ 2175.044900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:55:36 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 73)

[ 2175.085381] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:55:36 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000050006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2175.123326] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2175.162435] loop5: detected capacity change from 0 to 73
[ 2175.181849] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2175.200699] loop4: detected capacity change from 0 to 512
[ 2175.206771] FAULT_INJECTION: forcing a failure.
[ 2175.206771] name failslab, interval 1, probability 0, space 0, times 0
[ 2175.208222] CPU: 0 PID: 13257 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2175.209438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2175.210635] Call Trace:
[ 2175.210915]  <TASK>
[ 2175.211152]  dump_stack_lvl+0x8b/0xb3
[ 2175.211573]  should_fail.cold+0x5/0xa
[ 2175.211990]  should_failslab+0x5/0x10
[ 2175.212411]  __kmalloc_node_track_caller+0x7e/0x440
[ 2175.212953]  ? alloc_uevent_skb+0x7b/0x210
[ 2175.213431]  __alloc_skb+0xe3/0x340
[ 2175.213826]  alloc_uevent_skb+0x7b/0x210
[ 2175.214269]  kobject_uevent_env+0xaa4/0xfa0
[ 2175.214730]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2175.215279]  ? __loop_update_dio+0x2a3/0x620
[ 2175.215751]  loop_configure+0x14e8/0x1950
[ 2175.216215]  lo_ioctl+0x7c5/0x18b0
[ 2175.216608]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2175.217138]  ? loop_set_status_old+0x1b0/0x1b0
[ 2175.217639]  ? avc_ss_reset+0x180/0x180
[ 2175.218063]  ? __lock_acquire+0xbac/0x6120
[ 2175.218549]  ? selinux_inode_getsecctx+0x90/0x90
[ 2175.219074]  ? loop_set_status_old+0x1b0/0x1b0
[ 2175.219567]  blkdev_ioctl+0x362/0x7f0
[ 2175.219968]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2175.220485]  ? __x64_sys_ioctl+0x97/0x210
[ 2175.220961]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2175.221566]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2175.222093]  __x64_sys_ioctl+0x196/0x210
[ 2175.222546]  do_syscall_64+0x3b/0x90
[ 2175.222974]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2175.223525] RIP: 0033:0x7f1f6d99b8d7
[ 2175.223937] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2175.225984] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2175.226819] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2175.227606] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2175.228388] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2175.229187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2175.229973] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2175.230773]  </TASK>
[ 2175.297831] EXT4-fs: Ignoring removed nobh option
[ 2175.329513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2175.440925] loop2: detected capacity change from 0 to 16383
[ 2175.456931] FAT-fs (loop2): invalid media value (0xc1)
[ 2175.458326] FAT-fs (loop2): Can't find a valid FAT filesystem
19:55:51 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:51 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x9effffff)

19:55:51 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xffffffe4, 0x0, 0x0, 0x0)

[ 2190.672788] loop6: detected capacity change from 0 to 512
19:55:51 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}]})

19:55:51 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xffffc000, 0x0, 0x0, 0x0)

19:55:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000060006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 74)

19:55:51 executing program 2:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9054}, 0xc080)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe827}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x85}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffc0}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1d}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4090}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc, 0xe8, @broadcast}]]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20300}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "0ca349"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "0d664d31599a"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24001000}, 0x80)

19:55:51 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xc00e0000)

[ 2190.718722] loop4: detected capacity change from 0 to 512
[ 2190.719523] FAULT_INJECTION: forcing a failure.
[ 2190.719523] name failslab, interval 1, probability 0, space 0, times 0
[ 2190.720790] CPU: 0 PID: 13289 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2190.721824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2190.723005] Call Trace:
[ 2190.723279]  <TASK>
[ 2190.723526]  dump_stack_lvl+0x8b/0xb3
[ 2190.723961]  should_fail.cold+0x5/0xa
[ 2190.724369]  ? skb_clone+0x170/0x3c0
[ 2190.724773]  should_failslab+0x5/0x10
[ 2190.725197]  kmem_cache_alloc+0x69/0x490
[ 2190.725635]  skb_clone+0x170/0x3c0
[ 2190.726014]  netlink_broadcast+0x9ae/0xd60
[ 2190.726476]  ? alloc_uevent_skb+0x1c2/0x210
[ 2190.726939]  kobject_uevent_env+0xa6b/0xfa0
[ 2190.727403]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2190.727953]  ? __loop_update_dio+0x2a3/0x620
[ 2190.728425]  loop_configure+0x14e8/0x1950
[ 2190.728888]  lo_ioctl+0x7c5/0x18b0
[ 2190.729280]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2190.729787]  ? loop_set_status_old+0x1b0/0x1b0
[ 2190.730261]  ? avc_ss_reset+0x180/0x180
[ 2190.730679]  ? __lock_acquire+0xbac/0x6120
[ 2190.731166]  ? selinux_inode_getsecctx+0x90/0x90
[ 2190.731678]  ? loop_set_status_old+0x1b0/0x1b0
[ 2190.732160]  blkdev_ioctl+0x362/0x7f0
[ 2190.732562]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2190.733076]  ? __x64_sys_ioctl+0x97/0x210
[ 2190.733517]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2190.734095]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2190.734600]  __x64_sys_ioctl+0x196/0x210
[ 2190.735029]  do_syscall_64+0x3b/0x90
[ 2190.735429]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2190.735970] RIP: 0033:0x7f1f6d99b8d7
[ 2190.736357] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2190.738282] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2190.739084] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2190.739838] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2190.740583] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2190.741333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2190.742086] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2190.742843]  </TASK>
[ 2190.746578] loop5: detected capacity change from 0 to 73
[ 2190.746749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2190.760224] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[ 2190.760330] EXT4-fs: Ignoring removed nobh option
19:55:51 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe}]})

19:55:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000070006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:55:51 executing program 0:
sync()
sync()
sync()
syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@version_9p2000}]}})
sync()
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/198, 0xc6}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000000b00)=""/67, 0x43}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/188, 0xbc}], 0x7, &(0x7f0000000e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f40)=<r4=>0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000800), 0x820004, &(0x7f0000000f80)={[{@huge_never}, {@gid={'gid', 0x3d, r3}}], [{@fowner_lt={'fowner<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, 'rfdno'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, '(.{#'}}]})
setresuid(0x0, r2, 0x0)
getresuid(&(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0), &(0x7f0000000600)=<r6=>0x0)
r7 = getegid()
getresgid(&(0x7f00000018c0), &(0x7f0000001900)=<r8=>0x0, &(0x7f0000001940))
fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, 0x3, &(0x7f0000000640)=[{&(0x7f00000002c0)="f5c81c4751ba7d0401a81014a92ac12cb5945c626c98726cbb596da264d0dd34a3e0c3cac7c4a19164a5e0bde681ec59090cd1cbe6aa5800e8b01d1fdabcc47057b3827f0d76fadfa90a7a5a616f831d5e8b1fa6bb45f59ea9a142ae43a308147793cc898c9f7202114adc3e77fac2e44d4cbe5fa90607097e9d1c240bcd1203114c9d68493985cbe0408ae62db2", 0x8e, 0xffffffffffffffe0}, {&(0x7f0000000380)="1cecaa92012bdf993d8c23000a47df8754db2098059d21a153ef515028390237180ec1cc28410f0ed6846858074800cabd86a6ef0aac74a7f508d051d134e644515774cdfa68f62ce0bcd4657ee8399470c67fa71a5bb804a384c30e35cbef6364788ef7d57b13245d19a6b73f36a25529266dc3a5c32930399d24ae6946949857f854a1747c4596585b03c8b506b76146ff3261f9ce5696ce5d6bc92ef713c30530de946d202d23300e74a8b58d8fea57ddbd2566f2627880db869beae1b64d9c58dff88394ba4b9fcd5983fd9e28cad6b878e2ac1708d6a8f21064f44a0f61", 0xe0, 0xfffffffffffffffc}, {&(0x7f0000000480)="be6bed3e147fbd5e782034c76a14c177cf7f60c001cb8579a3b9e8eb945d49bf1ed207754fe6a5e1c32ce98448d27cb9c555715f0ef7306355263681648e62588ec1be5bb54092517d59090e25f054c4e3094ce6f5b59f356befbeeb31f9021162881d6749704b96a8ba795185e79d6a88fdb27334dd07647c5d26d6f2eb38624271ae", 0x83, 0x7}], 0x2, &(0x7f0000000740)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x200}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@fat=@dos1xfloppy}, {@dots}], [{@euid_gt={'euid>', r9}}, {@fsname={'fsname', 0x3d, 'access=client'}}, {@fowner_lt={'fowner<', r5}}]})
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001980)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x5, r6}, {0x2, 0x4, r5}], {0x4, 0x5}, [{0x8, 0x7, r7}, {0x8, 0x0, r8}, {0x8, 0x0, 0xee00}], {}, {0x20, 0x7}}, 0x54, 0x2)
sync()

[ 2190.802147] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2190.838506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2190.854239] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
19:55:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000180006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2190.877881] loop5: detected capacity change from 0 to 73
19:55:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 75)

[ 2190.930127] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2190.933899] loop4: detected capacity change from 0 to 512
[ 2190.934764] FAULT_INJECTION: forcing a failure.
[ 2190.934764] name failslab, interval 1, probability 0, space 0, times 0
[ 2190.936055] CPU: 0 PID: 13303 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2190.937095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2190.938275] Call Trace:
[ 2190.938550]  <TASK>
[ 2190.938789]  dump_stack_lvl+0x8b/0xb3
[ 2190.939216]  should_fail.cold+0x5/0xa
[ 2190.939637]  ? skb_clone+0x170/0x3c0
[ 2190.940046]  should_failslab+0x5/0x10
[ 2190.940442]  kmem_cache_alloc+0x69/0x490
[ 2190.940900]  skb_clone+0x170/0x3c0
[ 2190.941288]  netlink_broadcast+0x9ae/0xd60
[ 2190.941753]  ? alloc_uevent_skb+0x1c2/0x210
[ 2190.942220]  kobject_uevent_env+0xa6b/0xfa0
[ 2190.942691]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2190.943227]  ? __loop_update_dio+0x2a3/0x620
[ 2190.943708]  loop_configure+0x14e8/0x1950
[ 2190.944179]  lo_ioctl+0x7c5/0x18b0
[ 2190.944560]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2190.945093]  ? loop_set_status_old+0x1b0/0x1b0
[ 2190.945601]  ? avc_ss_reset+0x180/0x180
[ 2190.946040]  ? __lock_acquire+0xbac/0x6120
[ 2190.946534]  ? selinux_inode_getsecctx+0x90/0x90
[ 2190.947065]  ? loop_set_status_old+0x1b0/0x1b0
[ 2190.947570]  blkdev_ioctl+0x362/0x7f0
[ 2190.947982]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2190.948499]  ? __x64_sys_ioctl+0x97/0x210
[ 2190.949058]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2190.949695]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2190.950191]  __x64_sys_ioctl+0x196/0x210
[ 2190.950620]  do_syscall_64+0x3b/0x90
[ 2190.951024]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2190.951583] RIP: 0033:0x7f1f6d99b8d7
[ 2190.951977] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2190.953949] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2190.954730] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2190.955492] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2190.956251] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2190.957014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2190.957779] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2190.958558]  </TASK>
19:55:51 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xfffffffe, 0x0, 0x0, 0x0)

[ 2190.982875] loop6: detected capacity change from 0 to 512
19:55:51 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xcddc93e0)

[ 2191.004729] EXT4-fs: Ignoring removed nobh option
[ 2191.019102] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2191.026653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2191.133852] loop0: detected capacity change from 0 to 16383
[ 2191.148707] FAT-fs (loop0): Unrecognized mount option "euid>00000000000000004480" or missing value
19:56:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080001c0006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:07 executing program 0:
sync()
sync()
sync()
sync()

19:56:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe}]})

19:56:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 76)

19:56:07 executing program 2:
sync()
sync()

19:56:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0xffffffff, 0x0, 0x0, 0x0)

19:56:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xe093dccd)

[ 2206.235280] loop5: detected capacity change from 0 to 73
[ 2206.252815] loop6: detected capacity change from 0 to 512
[ 2206.253442] loop4: detected capacity change from 0 to 512
[ 2206.255194] FAULT_INJECTION: forcing a failure.
[ 2206.255194] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.256435] CPU: 0 PID: 13334 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2206.257482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2206.258726] Call Trace:
[ 2206.259009]  <TASK>
[ 2206.259257]  dump_stack_lvl+0x8b/0xb3
[ 2206.259855]  should_fail.cold+0x5/0xa
[ 2206.260278]  ? getname_flags.part.0+0x50/0x4f0
[ 2206.260792]  should_failslab+0x5/0x10
[ 2206.261209]  kmem_cache_alloc+0x69/0x490
[ 2206.261669]  getname_flags.part.0+0x50/0x4f0
[ 2206.262163]  __x64_sys_mkdir+0xda/0x140
[ 2206.262586]  do_syscall_64+0x3b/0x90
[ 2206.263002]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2206.263553] RIP: 0033:0x7f1f6d99ac27
[ 2206.263964] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.265971] RSP: 002b:00007f1f6af10fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 2206.266807] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f1f6d99ac27
[ 2206.267591] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 2206.268379] RBP: 00007f1f6af11040 R08: 0000000000000000 R09: ffffffffffffffff
[ 2206.269173] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 2206.269996] R13: 0000000020000100 R14: 00007f1f6af11000 R15: 0000000020000040
[ 2206.270813]  </TASK>
19:56:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000200006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2206.301103] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2206.382356] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:56:07 executing program 2:
sync()
sync()
sync()

19:56:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 77)

19:56:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2, 0x0, 0x0)

19:56:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe}]})

19:56:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0ffffff)

19:56:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x93c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2206.540787] loop4: detected capacity change from 0 to 512
19:56:07 executing program 0:
sync()
sync()

[ 2206.550083] FAULT_INJECTION: forcing a failure.
19:56:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000680006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2206.550083] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.552509] CPU: 1 PID: 13354 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2206.554486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2206.556809] Call Trace:
[ 2206.557343]  <TASK>
[ 2206.557795]  dump_stack_lvl+0x8b/0xb3
[ 2206.558574]  should_fail.cold+0x5/0xa
[ 2206.559357]  ? skb_clone+0x170/0x3c0
[ 2206.560106]  should_failslab+0x5/0x10
[ 2206.560863]  kmem_cache_alloc+0x69/0x490
[ 2206.561711]  skb_clone+0x170/0x3c0
[ 2206.562429]  netlink_broadcast+0x9ae/0xd60
[ 2206.563285]  ? alloc_uevent_skb+0x1c2/0x210
[ 2206.564162]  kobject_uevent_env+0xa6b/0xfa0
[ 2206.565043]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2206.566047]  ? __loop_update_dio+0x2a3/0x620
[ 2206.566938]  loop_configure+0x14e8/0x1950
[ 2206.567793]  lo_ioctl+0x7c5/0x18b0
[ 2206.568485]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2206.569431]  ? loop_set_status_old+0x1b0/0x1b0
19:56:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xfffff000)

[ 2206.570329]  ? avc_ss_reset+0x180/0x180
[ 2206.571248]  ? __lock_acquire+0xbac/0x6120
[ 2206.572143]  ? selinux_inode_getsecctx+0x90/0x90
[ 2206.573106]  ? loop_set_status_old+0x1b0/0x1b0
19:56:07 executing program 2:
sync()
sync()
sync()

[ 2206.574030]  blkdev_ioctl+0x362/0x7f0
[ 2206.574859]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2206.575796]  ? __x64_sys_ioctl+0x97/0x210
[ 2206.576628]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2206.577731]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2206.578683]  __x64_sys_ioctl+0x196/0x210
[ 2206.579499]  do_syscall_64+0x3b/0x90
[ 2206.580254]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2206.581289] RIP: 0033:0x7f1f6d99b8d7
[ 2206.582027] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.585679] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2206.587180] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2206.588594] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2206.590020] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2206.591429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2206.592833] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2206.594275]  </TASK>
[ 2206.595933] loop5: detected capacity change from 0 to 73
[ 2206.629586] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2206.649895] loop5: detected capacity change from 0 to 73
[ 2206.675725] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2206.704844] EXT4-fs: Ignoring removed nobh option
19:56:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008004800006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2206.744493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:56:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 78)

19:56:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x5, 0x0, 0x0)

[ 2206.818981] loop5: detected capacity change from 0 to 74
19:56:07 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100025, 0x0, 0x0, 0x0, 0x0)

[ 2206.844172] loop4: detected capacity change from 0 to 512
[ 2206.845966] FAULT_INJECTION: forcing a failure.
[ 2206.845966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2206.848302] CPU: 1 PID: 13384 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2206.850274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2206.852452] Call Trace:
[ 2206.852978]  <TASK>
[ 2206.853425]  dump_stack_lvl+0x8b/0xb3
[ 2206.854192]  should_fail.cold+0x5/0xa
[ 2206.854967]  strncpy_from_user+0x34/0x3e0
[ 2206.855800]  getname_flags.part.0+0x95/0x4f0
[ 2206.856729]  __x64_sys_mkdir+0xda/0x140
[ 2206.857559]  do_syscall_64+0x3b/0x90
[ 2206.858313]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2206.859332] RIP: 0033:0x7f1f6d99ac27
[ 2206.860067] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.863729] RSP: 002b:00007f1f6af10fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 2206.865290] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f1f6d99ac27
[ 2206.866721] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 2206.868134] RBP: 00007f1f6af11040 R08: 0000000000000000 R09: ffffffffffffffff
[ 2206.869554] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 2206.870960] R13: 0000000020000100 R14: 00007f1f6af11000 R15: 0000000020000040
[ 2206.872393]  </TASK>
[ 2206.906614] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2206.943906] loop5: detected capacity change from 0 to 74
[ 2206.967125] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:56:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xffffff7f)

19:56:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:22 executing program 0:
sync()
sync()
sync()

19:56:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080fffe0006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 79)

19:56:22 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x6, 0x0, 0x0)

[ 2221.315895] loop4: detected capacity change from 0 to 512
19:56:22 executing program 2:
sync()
sync()

[ 2221.319128] FAULT_INJECTION: forcing a failure.
[ 2221.319128] name failslab, interval 1, probability 0, space 0, times 0
[ 2221.320332] CPU: 1 PID: 13397 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2221.321484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2221.322691] Call Trace:
[ 2221.322969]  <TASK>
[ 2221.323207]  dump_stack_lvl+0x8b/0xb3
[ 2221.323620]  should_fail.cold+0x5/0xa
[ 2221.324030]  ? create_object.isra.0+0x3a/0xa20
[ 2221.324514]  should_failslab+0x5/0x10
[ 2221.324935]  kmem_cache_alloc+0x69/0x490
[ 2221.325377]  create_object.isra.0+0x3a/0xa20
[ 2221.325846]  ? kasan_unpoison+0x23/0x50
[ 2221.326266]  kmem_cache_alloc+0x244/0x490
[ 2221.326701]  getname_flags.part.0+0x50/0x4f0
[ 2221.327189]  __x64_sys_mkdir+0xda/0x140
[ 2221.327602]  do_syscall_64+0x3b/0x90
[ 2221.328006]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2221.328538] RIP: 0033:0x7f1f6d99ac27
[ 2221.328928] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2221.330891] RSP: 002b:00007f1f6af10fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 2221.331683] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f1f6d99ac27
[ 2221.332421] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 2221.333169] RBP: 00007f1f6af11040 R08: 0000000000000000 R09: ffffffffffffffff
[ 2221.333920] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 2221.334656] R13: 0000000020000100 R14: 00007f1f6af11000 R15: 0000000020000040
[ 2221.335430]  </TASK>
[ 2221.336567] loop5: detected capacity change from 0 to 74
[ 2221.349049] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2221.400975] loop5: detected capacity change from 0 to 74
[ 2221.408881] EXT4-fs: Ignoring removed nobh option
[ 2221.413321] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:56:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080feff0006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2221.475274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:56:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xffffff9e)

19:56:22 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0x0, 0x300}, 0x0)

19:56:37 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:56:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x8, 0x0, 0x0)

19:56:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 80)

19:56:37 executing program 2:
sync()
sync()
sync()

19:56:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xfffffff0)

19:56:37 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r1, r3, &(0x7f00000000c0)=0xfff, 0x500)
read(r0, &(0x7f0000000040)=""/117, 0x75)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80, 0x0, 0x9}, 0x2, 0xaa64, 'id1\x00', 'timer0\x00', 0x0, 0xda1, 0xffffffffffff898c, 0x7, 0xfffffbff})

[ 2236.911186] loop6: detected capacity change from 0 to 512
[ 2236.924816] loop4: detected capacity change from 0 to 512
[ 2236.931626] loop5: detected capacity change from 0 to 74
[ 2236.934621] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 2236.936256] FAULT_INJECTION: forcing a failure.
[ 2236.936256] name failslab, interval 1, probability 0, space 0, times 0
[ 2236.937492] CPU: 0 PID: 13442 Comm: syz-executor.4 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2236.938505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2236.939834] Call Trace:
[ 2236.940124]  <TASK>
[ 2236.940355]  dump_stack_lvl+0x8b/0xb3
[ 2236.940775]  should_fail.cold+0x5/0xa
[ 2236.941180]  ? create_object.isra.0+0x3a/0xa20
[ 2236.941664]  should_failslab+0x5/0x10
[ 2236.942067]  kmem_cache_alloc+0x69/0x490
[ 2236.942499]  create_object.isra.0+0x3a/0xa20
[ 2236.942955]  ? kasan_unpoison+0x23/0x50
[ 2236.943382]  kmem_cache_alloc+0x244/0x490
[ 2236.943815]  skb_clone+0x170/0x3c0
[ 2236.944198]  netlink_broadcast+0x9ae/0xd60
[ 2236.944647]  ? alloc_uevent_skb+0x1c2/0x210
[ 2236.945109]  kobject_uevent_env+0xa6b/0xfa0
[ 2236.945565]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2236.946111]  ? __loop_update_dio+0x2a3/0x620
[ 2236.946574]  loop_configure+0x14e8/0x1950
[ 2236.947028]  lo_ioctl+0x7c5/0x18b0
[ 2236.947413]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2236.947926]  ? loop_set_status_old+0x1b0/0x1b0
[ 2236.948409]  ? avc_ss_reset+0x180/0x180
[ 2236.948824]  ? __lock_acquire+0xbac/0x6120
[ 2236.949305]  ? selinux_inode_getsecctx+0x90/0x90
[ 2236.949809]  ? loop_set_status_old+0x1b0/0x1b0
[ 2236.950296]  blkdev_ioctl+0x362/0x7f0
[ 2236.950702]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2236.951201]  ? __x64_sys_ioctl+0x97/0x210
[ 2236.951637]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2236.952209]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2236.952700]  __x64_sys_ioctl+0x196/0x210
[ 2236.953125]  do_syscall_64+0x3b/0x90
[ 2236.953530]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2236.954082] RIP: 0033:0x7f1f6d99b8d7
[ 2236.954468] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2236.956373] RSP: 002b:00007f1f6af10f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2236.957160] RAX: ffffffffffffffda RBX: 00007f1f6d9e5970 RCX: 00007f1f6d99b8d7
[ 2236.957915] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2236.958655] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2236.959392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2236.960142] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2236.960898]  </TASK>
[ 2236.962169] EXT4-fs (loop6): get root inode failed
[ 2236.962687] EXT4-fs (loop6): mount failed
[ 2236.969771] EXT4-fs: Ignoring removed nobh option
19:56:37 executing program 6:
sync()
sync()
sync()
sync()

[ 2237.005603] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:56:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000020000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2237.075478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:56:38 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xc, 0x0, 0x0)

[ 2237.077740] loop5: detected capacity change from 0 to 74
19:56:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x40030000000000)

[ 2237.100292] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:56:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]}) (fail_nth: 81)

19:56:38 executing program 2:
sync()
sync()
sync()
sync()

19:56:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x94c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000020006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0ffffffffffff)

19:56:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000030006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:38 executing program 6:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x8, 0x0, 0x0)

19:56:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2237.405680] loop5: detected capacity change from 0 to 74
[ 2237.423955] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2237.438028] loop5: detected capacity change from 0 to 74
[ 2237.445367] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2248.118070] Bluetooth: hci4: command 0x0406 tx timeout
19:56:52 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r1, r3, &(0x7f00000000c0)=0xfff, 0x500)
read(r0, &(0x7f0000000040)=""/117, 0x75)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80, 0x0, 0x9}, 0x2, 0xaa64, 'id1\x00', 'timer0\x00', 0x0, 0xda1, 0xffffffffffff898c, 0x7, 0xfffffbff})

[ 2251.356444] loop5: detected capacity change from 0 to 74
19:56:52 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x10, 0x0, 0x0)

19:56:52 executing program 6:
sync()
sync()
sync()
sync()

19:56:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x100000000000000)

19:56:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:56:52 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000040006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:56:52 executing program 2:
sync()
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/248, 0xf8}], 0x1, 0x101, 0x0)
sync()
dup3(r0, r0, 0x80000)

19:56:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2251.377557] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2251.386593] loop4: detected capacity change from 0 to 512
[ 2251.389548] EXT4-fs: Ignoring removed nobh option
[ 2251.410445] loop5: detected capacity change from 0 to 74
[ 2251.426492] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2251.461352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
19:57:06 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r1, r3, &(0x7f00000000c0)=0xfff, 0x500)
read(r0, &(0x7f0000000040)=""/117, 0x75)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80, 0x0, 0x9}, 0x2, 0xaa64, 'id1\x00', 'timer0\x00', 0x0, 0xda1, 0xffffffffffff898c, 0x7, 0xfffffbff})

19:57:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000050006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:06 executing program 2:
r0 = getpid()
syz_open_procfs(r0, &(0x7f0000000040)='status\x00')
pidfd_open(r0, 0x0)
sched_setattr(r0, &(0x7f0000000000)={0x38, 0x1, 0x0, 0x100, 0x8, 0x7, 0x8000, 0x13e2, 0xffffffff, 0x1}, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfff, &(0x7f0000000080)=""/190)
sync()

19:57:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:06 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x200000000000000)

[ 2265.166555] loop4: detected capacity change from 0 to 69
19:57:06 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x12, 0x0, 0x0)

19:57:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b82, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:06 executing program 6:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xc, 0x0, 0x0)

[ 2265.182945] loop5: detected capacity change from 0 to 74
[ 2265.198818] EXT4-fs: Ignoring removed nobh option
[ 2265.206179] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2265.220248] loop4: detected capacity change from 0 to 69
[ 2265.221272] EXT4-fs: Ignoring removed nobh option
[ 2265.225915] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2265.236031] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2265.290103] loop5: detected capacity change from 0 to 74
19:57:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000060006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:06 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x300000000000000)

19:57:06 executing program 6:
sync()
sync()
sync()
sync()

[ 2265.323431] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:57:06 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r2, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback}, 0xc)
sync()
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="92e6f0dc0a5b843dae7c30ce031107095b353898bbbd55085e491f981993dd3fb04d81d0a165214787cbf577e6e56bd9b0b214995741a4c64b7b104fc0b49d3bfc89a8ff7ae059549719a8714fd3e5b98080e106534441e24c", 0x59}, {&(0x7f0000000280)="484d6b3116c83bdc18fdfe7265f76bf6e95330a947da5b4b7f3b7aad88edcce124cd07ae54fc2a96594c3ac12d", 0x2d}, {&(0x7f0000000380)="d8da6e2ecbbaeb67ce9af5c0833d22fda94ea6d17b176b4b8599ee28d67fa64ebf24c57030dde3fecc2e935097b72fb97e607257319023de1e284c4927f2d53d479e9167a338120d798f63a78c631d14aa3c0d1ac740ff72716c9db3b096a2855c6c338ba994059f282f8403e22ead2159ec2cbefaa470e6495a4c224c5581f7dcd70cb199318aaec7eddf28b04cea5558661387a7", 0x95}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="11000000000000000000000001000000080000000000000098000000000000000000000007000000071357ac1414bb000000007f000001ac1414bb070b25470b9f8da537fcb44434af417f00000100000001e0000002fffeffffe00000017fffffff640101000000000356f54aef9ae6ea3e75b7d09e9186669fe000000100000009ac1414233b09993889172300000000ac1e0001ac1e0001ac14140bffffffff8913ceac1414aa640101017f0000017f000001440c7191ac1414bb00000001"], 0xb0}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r7=>0x0, @rand_addr, @local}, &(0x7f00000000c0)=0xc)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf25190000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="5000018014000000220000000000080003000200000008000100fae19ca23dc2ce24ebfa720bbe2cde3a3df41900"/55, @ANYRES32=r2, @ANYBLOB="1400020067726574617030000000000000000000140002006d6163766c616e300000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sync()
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @empty, 0xf8b}, 0x1c)

19:57:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b83, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000070006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:06 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x18, 0x0, 0x0)

19:57:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x95c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2265.473499] loop4: detected capacity change from 0 to 69
[ 2265.503573] EXT4-fs: Ignoring removed nobh option
[ 2265.521104] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2265.607684] loop5: detected capacity change from 0 to 74
[ 2265.628291] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2265.652744] loop5: detected capacity change from 0 to 74
[ 2265.669102] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:57:22 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendfile(r1, r3, &(0x7f00000000c0)=0xfff, 0x500)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:57:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000080006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:22 executing program 2:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

19:57:22 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0)

19:57:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x400000000000000)

19:57:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b84, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:22 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x1e, 0x0, 0x0)

[ 2281.297200] loop5: detected capacity change from 0 to 75
[ 2281.327292] loop4: detected capacity change from 0 to 69
[ 2281.329840] EXT4-fs: Ignoring removed nobh option
19:57:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf00000000000000)

[ 2281.332907] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2281.339354] loop5: detected capacity change from 0 to 75
[ 2281.347268] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2281.353852] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2281.377438] loop4: detected capacity change from 0 to 69
[ 2281.381807] EXT4-fs: Ignoring removed nobh option
19:57:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000180006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2281.414540] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:57:22 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x24, 0x0, 0x0)

19:57:22 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]})

19:57:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b85, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x8000000000000000)

19:57:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080001c0006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2281.531363] loop4: detected capacity change from 0 to 69
[ 2281.534792] loop5: detected capacity change from 0 to 75
[ 2281.538648] EXT4-fs: Ignoring removed nobh option
[ 2281.545763] loop6: detected capacity change from 0 to 512
[ 2281.566704] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2281.573599] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2281.574852] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 2281.580771] EXT4-fs (loop6): get root inode failed
[ 2281.581905] EXT4-fs (loop6): mount failed
[ 2281.594138] loop4: detected capacity change from 0 to 69
[ 2281.596495] EXT4-fs: Ignoring removed nobh option
[ 2281.643190] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:57:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000680006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b86, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:37 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:57:37 executing program 6:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

19:57:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2a, 0x0, 0x0)

[ 2296.635936] loop4: detected capacity change from 0 to 69
[ 2296.639224] EXT4-fs: Ignoring removed nobh option
[ 2296.642974] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:57:37 executing program 2:
sync()
sync()

19:57:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x9effffff00000000)

[ 2296.698722] loop4: detected capacity change from 0 to 69
[ 2296.700032] loop5: detected capacity change from 0 to 75
[ 2296.710706] EXT4-fs: Ignoring removed nobh option
[ 2296.730139] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2296.764474] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2296.822719] loop5: detected capacity change from 0 to 75
[ 2296.852630] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:57:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000fe0006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x30, 0x0, 0x0)

19:57:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xc00e000000000000)

19:57:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x96c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b87, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:37 executing program 2:
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

19:57:37 executing program 6:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200300, 0x0)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

[ 2296.999647] loop4: detected capacity change from 0 to 69
[ 2297.010402] EXT4-fs: Ignoring removed nobh option
[ 2297.039939] loop5: detected capacity change from 0 to 75
[ 2297.044809] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2297.099808] loop4: detected capacity change from 0 to 69
[ 2297.111848] EXT4-fs: Ignoring removed nobh option
[ 2297.123766] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2297.131850] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:57:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000306000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2297.254372] loop5: detected capacity change from 0 to 75
[ 2297.266148] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2297.328672] loop5: detected capacity change from 0 to 75
19:57:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xcddc93e000000000)

[ 2297.392450] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:57:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b9e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:53 executing program 2:
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x40000)
sync()
sync()
sync()

19:57:53 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x36, 0x0, 0x0)

19:57:53 executing program 6:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x30, 0x0, 0x0)

19:57:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000800406000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2312.338697] loop4: detected capacity change from 0 to 69
[ 2312.343044] loop5: detected capacity change from 0 to 75
19:57:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:53 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:57:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xf0ffffff00000000)

[ 2312.372198] FAULT_INJECTION: forcing a failure.
[ 2312.372198] name failslab, interval 1, probability 0, space 0, times 0
[ 2312.375081] CPU: 0 PID: 13704 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2312.377420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2312.380090] Call Trace:
[ 2312.380694]  <TASK>
[ 2312.381226]  dump_stack_lvl+0x8b/0xb3
[ 2312.382149]  should_fail.cold+0x5/0xa
[ 2312.383078]  ? __do_sys_memfd_create+0xac/0x4f0
[ 2312.384105]  should_failslab+0x5/0x10
[ 2312.384879]  __kmalloc+0x72/0x440
[ 2312.385587]  __do_sys_memfd_create+0xac/0x4f0
[ 2312.386501]  do_syscall_64+0x3b/0x90
[ 2312.387271]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2312.388298] RIP: 0033:0x7f2f73cf3b19
[ 2312.389028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2312.392660] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2312.394165] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2312.395611] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2312.397025] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2312.398453] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2312.399907] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2312.401352]  </TASK>
[ 2312.427968] EXT4-fs: Ignoring removed nobh option
[ 2312.446944] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2312.464473] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:57:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 1)

19:57:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xffffff7f00000000)

19:57:53 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 2)

[ 2312.529580] FAULT_INJECTION: forcing a failure.
[ 2312.529580] name failslab, interval 1, probability 0, space 0, times 0
[ 2312.530858] CPU: 1 PID: 13718 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2312.531878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2312.533091] Call Trace:
[ 2312.533362]  <TASK>
[ 2312.533593]  dump_stack_lvl+0x8b/0xb3
[ 2312.534018]  should_fail.cold+0x5/0xa
[ 2312.534427]  ? create_object.isra.0+0x3a/0xa20
[ 2312.534942]  should_failslab+0x5/0x10
[ 2312.535368]  kmem_cache_alloc+0x69/0x490
[ 2312.535815]  create_object.isra.0+0x3a/0xa20
[ 2312.536280]  ? kasan_unpoison+0x23/0x50
[ 2312.536718]  __kmalloc+0x25b/0x440
[ 2312.537099]  __do_sys_memfd_create+0xac/0x4f0
[ 2312.537585]  do_syscall_64+0x3b/0x90
[ 2312.537996]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2312.538545] RIP: 0033:0x7f2f73cf3b19
[ 2312.538949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2312.540920] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2312.541737] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2312.542511] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2312.543286] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2312.544047] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2312.544792] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2312.545547]  </TASK>
19:57:53 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000506000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0xfffffffffffff000)

19:57:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b9f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:57:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:57:53 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x3c, 0x0, 0x0)

[ 2312.634191] loop5: detected capacity change from 0 to 75
[ 2312.653521] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2312.665066] loop6: detected capacity change from 0 to 512
[ 2312.678257] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2312.697591] loop5: detected capacity change from 0 to 75
[ 2312.712022] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
19:58:07 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:58:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000606000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x60, 0x0, 0x0)

19:58:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0xe7f, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000015c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[ 2326.482851] loop5: detected capacity change from 0 to 75
[ 2326.490413] FAULT_INJECTION: forcing a failure.
[ 2326.490413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2326.491792] CPU: 0 PID: 13744 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2326.492874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2326.494146] Call Trace:
[ 2326.494430]  <TASK>
[ 2326.494679]  dump_stack_lvl+0x8b/0xb3
[ 2326.495137]  should_fail.cold+0x5/0xa
[ 2326.495575]  _copy_from_user+0x2e/0x170
[ 2326.496023]  __do_sys_memfd_create+0xff/0x4f0
[ 2326.496524]  do_syscall_64+0x3b/0x90
[ 2326.496945]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2326.497512] RIP: 0033:0x7f2f73cf3b19
[ 2326.497919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2326.499995] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2326.500869] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2326.501705] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2326.502500] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2326.503325] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2326.504157] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2326.505003]  </TASK>
[ 2326.514322] loop4: detected capacity change from 0 to 69
[ 2326.518199] EXT4-fs: Ignoring removed nobh option
[ 2326.533335] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2326.544558] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2326.546784] loop4: detected capacity change from 0 to 69
[ 2326.552699] EXT4-fs: Ignoring removed nobh option
[ 2326.575309] loop5: detected capacity change from 0 to 75
19:58:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ba0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 3)

19:58:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

19:58:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xf0, 0x0, 0x0)

19:58:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000706000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2326.583522] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2326.587957] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 4)

19:58:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x400, 0x80000001, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)

19:58:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001806000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2326.654376] FAULT_INJECTION: forcing a failure.
[ 2326.654376] name failslab, interval 1, probability 0, space 0, times 0
[ 2326.655609] CPU: 1 PID: 13767 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2326.656625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2326.657808] Call Trace:
[ 2326.658096]  <TASK>
[ 2326.658328]  dump_stack_lvl+0x8b/0xb3
[ 2326.658742]  should_fail.cold+0x5/0xa
[ 2326.659149]  ? shmem_alloc_inode+0x18/0x40
[ 2326.659607]  should_failslab+0x5/0x10
[ 2326.660027]  kmem_cache_alloc+0x69/0x490
[ 2326.660465]  ? shmem_destroy_inode+0x70/0x70
[ 2326.660941]  shmem_alloc_inode+0x18/0x40
[ 2326.661380]  ? shmem_destroy_inode+0x70/0x70
[ 2326.661857]  alloc_inode+0x63/0x230
[ 2326.662245]  new_inode+0x23/0x240
[ 2326.662614]  shmem_get_inode+0x18b/0xcb0
[ 2326.663058]  __shmem_file_setup+0xb8/0x310
[ 2326.663501]  ? _copy_from_user+0x139/0x170
[ 2326.663948]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2326.664423]  do_syscall_64+0x3b/0x90
[ 2326.664811]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2326.665337] RIP: 0033:0x7f2f73cf3b19
[ 2326.665718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2326.667604] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2326.668388] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2326.669120] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2326.669886] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2326.670619] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2326.671358] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2326.672109]  </TASK>
19:58:07 executing program 2:
sync()
sync()

19:58:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ba1, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2326.737855] loop5: detected capacity change from 0 to 76
[ 2326.747463] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2326.797014] loop4: detected capacity change from 0 to 69
[ 2326.803133] EXT4-fs: Ignoring removed nobh option
[ 2326.836501] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2326.876312] loop4: detected capacity change from 0 to 69
[ 2326.878447] EXT4-fs: Ignoring removed nobh option
[ 2326.883488] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:20 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:58:20 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x38}}, 0x1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xc07712d3384a60c4}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001)

19:58:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ba2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:20 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001c06000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:20 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x1ad, 0x0, 0x0)

19:58:20 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 5)

19:58:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
dup2(r0, r1)
sync()

[ 2339.602867] loop4: detected capacity change from 0 to 69
[ 2339.616600] FAULT_INJECTION: forcing a failure.
[ 2339.616600] name failslab, interval 1, probability 0, space 0, times 0
[ 2339.618847] CPU: 0 PID: 13799 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2339.620808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2339.622940] Call Trace:
[ 2339.623449]  <TASK>
[ 2339.623867]  dump_stack_lvl+0x8b/0xb3
[ 2339.624598]  should_fail.cold+0x5/0xa
[ 2339.625319]  ? create_object.isra.0+0x3a/0xa20
[ 2339.626218]  should_failslab+0x5/0x10
[ 2339.626975]  kmem_cache_alloc+0x69/0x490
[ 2339.627813]  create_object.isra.0+0x3a/0xa20
[ 2339.628704]  ? kasan_unpoison+0x23/0x50
[ 2339.629507]  kmem_cache_alloc+0x244/0x490
[ 2339.630333]  ? shmem_destroy_inode+0x70/0x70
[ 2339.631214]  shmem_alloc_inode+0x18/0x40
[ 2339.631998]  ? shmem_destroy_inode+0x70/0x70
[ 2339.632852]  alloc_inode+0x63/0x230
[ 2339.633532]  new_inode+0x23/0x240
[ 2339.634211]  shmem_get_inode+0x18b/0xcb0
[ 2339.634999]  __shmem_file_setup+0xb8/0x310
[ 2339.635835]  ? _copy_from_user+0x139/0x170
[ 2339.636662]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2339.637549]  do_syscall_64+0x3b/0x90
[ 2339.638285]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2339.639284] RIP: 0033:0x7f2f73cf3b19
[ 2339.639995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2339.643504] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2339.644962] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2339.646328] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2339.647705] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2339.649086] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2339.650457] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2339.651852]  </TASK>
[ 2339.655165] loop5: detected capacity change from 0 to 76
[ 2339.668591] EXT4-fs: Ignoring removed nobh option
[ 2339.699320] loop6: detected capacity change from 0 to 512
[ 2339.720917] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2339.733243] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2339.762107] loop4: detected capacity change from 0 to 69
[ 2339.769333] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2339.769367] EXT4-fs: Ignoring removed nobh option
19:58:20 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000002006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2339.817671] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:20 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 6)

19:58:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8baa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:20 executing program 2:
sync()
sync()

19:58:20 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x500, 0x0, 0x0)

[ 2339.946213] loop4: detected capacity change from 0 to 69
[ 2339.948928] FAULT_INJECTION: forcing a failure.
[ 2339.948928] name failslab, interval 1, probability 0, space 0, times 0
[ 2339.951228] CPU: 1 PID: 13817 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2339.953112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2339.955331] Call Trace:
[ 2339.955842]  <TASK>
[ 2339.956281]  dump_stack_lvl+0x8b/0xb3
[ 2339.957053]  should_fail.cold+0x5/0xa
[ 2339.957808]  ? security_inode_alloc+0x34/0x160
[ 2339.958718]  should_failslab+0x5/0x10
[ 2339.959489]  kmem_cache_alloc+0x69/0x490
[ 2339.960294]  security_inode_alloc+0x34/0x160
[ 2339.961162]  inode_init_always+0x52e/0xc50
[ 2339.961992]  alloc_inode+0x84/0x230
[ 2339.962746]  new_inode+0x23/0x240
[ 2339.963455]  shmem_get_inode+0x18b/0xcb0
[ 2339.964297]  __shmem_file_setup+0xb8/0x310
[ 2339.965161]  ? _copy_from_user+0x139/0x170
[ 2339.966026]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2339.966953]  do_syscall_64+0x3b/0x90
[ 2339.967717]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2339.968768] RIP: 0033:0x7f2f73cf3b19
[ 2339.969480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2339.973061] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2339.974547] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2339.976014] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2339.977389] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2339.978827] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2339.980290] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2339.981749]  </TASK>
[ 2339.990156] EXT4-fs: Ignoring removed nobh option
19:58:20 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000006806000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2340.035192] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2340.078746] loop4: detected capacity change from 0 to 69
[ 2340.092886] EXT4-fs: Ignoring removed nobh option
[ 2340.126719] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x98c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:36 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:58:36 executing program 2:
sync()
sync()

[ 2355.781421] FAULT_INJECTION: forcing a failure.
[ 2355.781421] name failslab, interval 1, probability 0, space 0, times 0
[ 2355.784072] CPU: 0 PID: 13833 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
19:58:36 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 7)

19:58:36 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000048006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:36 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x11, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x3, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYBLOB="000b29bd7000fddbdf25030000000e0001004e4c424c5f4d474d5400000008000800ac1414aa08000c000300000008000c000100000008000400030000000e0001004e4c424c5f4d474d5400000014000500ff020000000000000000000000080001"], 0x68}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x3079899cd1911feb}, 0x14}}, 0x0)

19:58:36 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x600, 0x0, 0x0)

19:58:36 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bab, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2355.786016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2355.788285] Call Trace:
[ 2355.788790]  <TASK>
[ 2355.789231]  dump_stack_lvl+0x8b/0xb3
[ 2355.789987]  should_fail.cold+0x5/0xa
[ 2355.790737]  ? create_object.isra.0+0x3a/0xa20
[ 2355.791651]  should_failslab+0x5/0x10
[ 2355.792395]  kmem_cache_alloc+0x69/0x490
[ 2355.793204]  create_object.isra.0+0x3a/0xa20
[ 2355.794060]  ? kasan_unpoison+0x23/0x50
[ 2355.794842]  kmem_cache_alloc+0x244/0x490
[ 2355.795686]  security_inode_alloc+0x34/0x160
[ 2355.796560]  inode_init_always+0x52e/0xc50
[ 2355.797447]  alloc_inode+0x84/0x230
[ 2355.798158]  new_inode+0x23/0x240
[ 2355.798839]  shmem_get_inode+0x18b/0xcb0
[ 2355.799647]  __shmem_file_setup+0xb8/0x310
[ 2355.800471]  ? _copy_from_user+0x139/0x170
[ 2355.801311]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2355.802207]  do_syscall_64+0x3b/0x90
[ 2355.802946]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2355.803965] RIP: 0033:0x7f2f73cf3b19
[ 2355.804687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2355.808280] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2355.809761] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2355.811146] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2355.812536] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2355.813918] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2355.815291] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2355.816798]  </TASK>
19:58:36 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000fffe06000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:36 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000feff06000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2355.858924] loop4: detected capacity change from 0 to 69
[ 2355.861636] loop6: detected capacity change from 0 to 512
[ 2355.876194] loop5: detected capacity change from 0 to 76
[ 2355.890661] EXT4-fs: Ignoring removed nobh option
[ 2355.896341] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2355.926643] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2355.941494] loop5: detected capacity change from 0 to 76
[ 2355.942511] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2355.948066] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2355.957262] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2355.989743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
19:58:36 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 8)

19:58:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:37 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xc00, 0x0, 0x0)

19:58:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x2, 0x9}, 0x100, './file0\x00'})
sync()

19:58:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000206000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bac, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2356.107696] FAULT_INJECTION: forcing a failure.
[ 2356.107696] name failslab, interval 1, probability 0, space 0, times 0
[ 2356.111103] CPU: 0 PID: 13866 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2356.113019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2356.115276] Call Trace:
[ 2356.115797]  <TASK>
[ 2356.116236]  dump_stack_lvl+0x8b/0xb3
[ 2356.117006]  should_fail.cold+0x5/0xa
[ 2356.117761]  ? __d_alloc+0x2a/0x990
[ 2356.118497]  should_failslab+0x5/0x10
[ 2356.119232]  kmem_cache_alloc+0x69/0x490
[ 2356.120054]  ? lockdep_hardirqs_on+0x79/0x100
[ 2356.120947]  __d_alloc+0x2a/0x990
[ 2356.121621]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2356.122724]  d_alloc_pseudo+0x19/0x70
[ 2356.123505]  alloc_file_pseudo+0xce/0x250
[ 2356.124350]  ? alloc_file+0x590/0x590
[ 2356.125122]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2356.126245]  ? shmem_get_inode+0x5cd/0xcb0
[ 2356.127085]  __shmem_file_setup+0x144/0x310
[ 2356.127938]  ? _copy_from_user+0x139/0x170
[ 2356.128778]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2356.129682]  do_syscall_64+0x3b/0x90
[ 2356.130424]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2356.131446] RIP: 0033:0x7f2f73cf3b19
[ 2356.132172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2356.135765] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2356.137245] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2356.138638] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2356.140033] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
19:58:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="eb1f000400000000000003000000"], 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x11, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2b, 0x9, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3)

[ 2356.141427] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2356.143023] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2356.144451]  </TASK>
[ 2356.157224] loop5: detected capacity change from 0 to 76
[ 2356.168512] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
19:58:54 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xcc0, 0x0, 0x0)

19:58:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 9)

19:58:54 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:58:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bad, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000306000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:54 executing program 2:
sync()
sync()
sync()
sync()

19:58:54 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="269bd52fcd1eb84cbbe5e71361f0fa0c353cb18235aa2bf4edf8d3adacaef2122c81ffa280986bc0a213474ede1330515105880521a4ab51b035804180457b15ebba4706fbf284de19ce5fabaf1828b9de5c7bb2b26ced985c2d666ff8e7d0eace8898502c1b7c54ac48cf00919ff126d98d1c25accbe4474bd664c1716bfee9ad3af0bb956b659e9ddc65fe43b64b03eb5ac83252e561113bac1f7cd68af097424f874a52374377b0e729f992385a1bd176ae34a4ae73af00560c7a079bf94e187b0e8602353606ecb6fe8affadd31560f4d0043c258ef17b", @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf25040000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000)

[ 2373.628430] FAULT_INJECTION: forcing a failure.
[ 2373.628430] name failslab, interval 1, probability 0, space 0, times 0
[ 2373.629689] CPU: 0 PID: 13894 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2373.630684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2373.631894] Call Trace:
[ 2373.632165]  <TASK>
[ 2373.632405]  dump_stack_lvl+0x8b/0xb3
[ 2373.632825]  should_fail.cold+0x5/0xa
[ 2373.633224]  ? create_object.isra.0+0x3a/0xa20
[ 2373.633697]  should_failslab+0x5/0x10
[ 2373.634102]  kmem_cache_alloc+0x69/0x490
[ 2373.634539]  create_object.isra.0+0x3a/0xa20
[ 2373.634995]  ? kasan_unpoison+0x23/0x50
[ 2373.635422]  kmem_cache_alloc+0x244/0x490
[ 2373.635868]  __d_alloc+0x2a/0x990
[ 2373.636238]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2373.636816]  d_alloc_pseudo+0x19/0x70
[ 2373.637225]  alloc_file_pseudo+0xce/0x250
[ 2373.637671]  ? alloc_file+0x590/0x590
[ 2373.637800] loop4: detected capacity change from 0 to 69
[ 2373.638075]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2373.638097]  ? shmem_get_inode+0x5cd/0xcb0
[ 2373.638117]  __shmem_file_setup+0x144/0x310
[ 2373.640660]  ? _copy_from_user+0x139/0x170
[ 2373.641111]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2373.641596]  do_syscall_64+0x3b/0x90
[ 2373.641995]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2373.642551] RIP: 0033:0x7f2f73cf3b19
[ 2373.642948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2373.644926] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2373.645717] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2373.646462] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2373.646939] loop5: detected capacity change from 0 to 76
[ 2373.647214] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2373.649039] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2373.649782] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2373.650555]  </TASK>
[ 2373.678758] loop6: detected capacity change from 0 to 512
[ 2373.683092] EXT4-fs: Ignoring removed nobh option
[ 2373.720522] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2373.723064] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000406000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2373.793122] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:58:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bae, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:58:54 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
recvmmsg$unix(r0, &(0x7f0000002b40)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/88, 0x58}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000007c0)=""/75, 0x4b}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000ac0)=""/176, 0xb0}, {&(0x7f0000000b80)=""/197, 0xc5}, {&(0x7f0000000c80)=""/248, 0xf8}, {&(0x7f0000000240)=""/24, 0x18}], 0x8, &(0x7f0000000e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000f40), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000fc0)=""/135, 0x87}, {&(0x7f0000001080)=""/104, 0x68}, {&(0x7f0000001100)=""/54, 0x36}, {&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/97, 0x61}, {&(0x7f0000001280)=""/122, 0x7a}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001380)=""/171, 0xab}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/147, 0x93}], 0xa, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000016c0)=""/138, 0x8a}, {&(0x7f0000001780)=""/183, 0xb7}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000002d00)=""/10, 0xa}], 0x4, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002d80)=""/68, 0x44}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x6, 0x40010080, &(0x7f0000002cc0)={0x77359400})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001840), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)

19:58:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000506000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:58:54 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x1200, 0x0, 0x0)

19:58:54 executing program 2:
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x10010, r1, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040))
sync()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
read$snapshot(r2, &(0x7f0000000140)=""/32, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
r4 = open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x8010, r5, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000000c0)=r5, 0x1)
sync()

[ 2373.960619] loop4: detected capacity change from 0 to 69
[ 2373.966722] EXT4-fs: Ignoring removed nobh option
19:58:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 10)

[ 2373.979501] audit: type=1400 audit(1644523134.926:24): avc:  denied  { execute } for  pid=13916 comm="syz-executor.2" path="pipe:[46445]" dev="pipefs" ino=46445 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[ 2373.985755] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2374.012742] loop4: detected capacity change from 0 to 69
[ 2374.039351] loop5: detected capacity change from 0 to 76
[ 2374.049392] EXT4-fs: Ignoring removed nobh option
[ 2374.061800] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2374.075774] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:58:55 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x1800, 0x0, 0x0)

[ 2374.158389] loop5: detected capacity change from 0 to 76
19:58:55 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000606000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2374.166715] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2374.186467] FAULT_INJECTION: forcing a failure.
[ 2374.186467] name failslab, interval 1, probability 0, space 0, times 0
[ 2374.188792] CPU: 0 PID: 13933 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2374.190731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2374.193037] Call Trace:
[ 2374.193549]  <TASK>
[ 2374.194001]  dump_stack_lvl+0x8b/0xb3
[ 2374.194787]  should_fail.cold+0x5/0xa
[ 2374.195574]  ? __alloc_file+0x21/0x240
[ 2374.196378]  should_failslab+0x5/0x10
[ 2374.197139]  kmem_cache_alloc+0x69/0x490
[ 2374.197964]  __alloc_file+0x21/0x240
[ 2374.198719]  alloc_empty_file+0x6d/0x170
[ 2374.199554]  alloc_file+0x59/0x590
[ 2374.200295]  alloc_file_pseudo+0x16a/0x250
[ 2374.201157]  ? alloc_file+0x590/0x590
[ 2374.201909]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2374.203024]  ? shmem_get_inode+0x5cd/0xcb0
[ 2374.203880]  __shmem_file_setup+0x144/0x310
[ 2374.204733]  ? _copy_from_user+0x139/0x170
[ 2374.205581]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2374.206487]  do_syscall_64+0x3b/0x90
[ 2374.207235]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2374.208270] RIP: 0033:0x7f2f73cf3b19
[ 2374.209007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2374.212623] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2374.214120] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2374.215521] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2374.216927] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2374.218329] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2374.219749] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2374.221175]  </TASK>
19:59:07 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:59:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x99c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:07 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x1e00, 0x0, 0x0)

19:59:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x205, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x7000000}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf251cbbf4000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00060000000000000000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x400000a}, 0x75be21daec79bd1d)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r9)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r9)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x3079899cd1911feb}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r7)

19:59:07 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 11)

19:59:07 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000706000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x19)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x4)
sync()

[ 2387.092781] FAULT_INJECTION: forcing a failure.
[ 2387.092781] name failslab, interval 1, probability 0, space 0, times 0
[ 2387.095746] CPU: 0 PID: 13948 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2387.096717] loop5: detected capacity change from 0 to 76
[ 2387.098263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2387.098294] Call Trace:
[ 2387.098306]  <TASK>
[ 2387.098319]  dump_stack_lvl+0x8b/0xb3
[ 2387.104443]  should_fail.cold+0x5/0xa
[ 2387.105260]  ? create_object.isra.0+0x3a/0xa20
[ 2387.106205]  should_failslab+0x5/0x10
[ 2387.106998]  kmem_cache_alloc+0x69/0x490
[ 2387.107855]  create_object.isra.0+0x3a/0xa20
[ 2387.108780]  ? kasan_unpoison+0x23/0x50
[ 2387.109605]  kmem_cache_alloc+0x244/0x490
[ 2387.110466]  __alloc_file+0x21/0x240
[ 2387.111254]  alloc_empty_file+0x6d/0x170
[ 2387.112116]  alloc_file+0x59/0x590
[ 2387.112861]  alloc_file_pseudo+0x16a/0x250
[ 2387.113736]  ? alloc_file+0x590/0x590
[ 2387.114508]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2387.115654]  ? shmem_get_inode+0x5cd/0xcb0
[ 2387.116550]  __shmem_file_setup+0x144/0x310
[ 2387.117409]  ? _copy_from_user+0x139/0x170
[ 2387.118276]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2387.119217]  do_syscall_64+0x3b/0x90
[ 2387.120017]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2387.121045] RIP: 0033:0x7f2f73cf3b19
[ 2387.121784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2387.125421] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2387.127363] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2387.129158] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2387.130555] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2387.131949] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2387.133347] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2387.134802]  </TASK>
[ 2387.167944] loop4: detected capacity change from 0 to 69
[ 2387.170922] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2387.198482] EXT4-fs: Ignoring removed nobh option
[ 2387.247984] loop5: detected capacity change from 0 to 76
[ 2387.276434] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2387.286249] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
19:59:08 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000806000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2387.320619] loop4: detected capacity change from 0 to 69
[ 2387.340153] EXT4-fs: Ignoring removed nobh option
[ 2387.351754] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:59:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:08 executing program 2:
sync()
sync()
sync()
sync()

19:59:08 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2387.454216] loop6: detected capacity change from 0 to 512
[ 2387.496702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2387.506706] loop4: detected capacity change from 0 to 70
19:59:08 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001806000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2387.519449] EXT4-fs: Ignoring removed nobh option
19:59:08 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2000, 0x0, 0x0)

[ 2387.532075] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2387.554859] loop4: detected capacity change from 0 to 70
[ 2387.556886] EXT4-fs: Ignoring removed nobh option
[ 2387.566085] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:59:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00ccde21cc78a2ab10f9307a7e8729e5334d9af346d55afa09c2e5399be6487d5288cf807ed5c1831f8d26ecc902d1208e821003cad6ff621fc9a298b841af1536a77faa9d30f0c8352faf9b9c30cacbb964bf48a67ac9cb013bd5ca7829cce5577605810b2e54cb230b05526621657476a587c93492b27781190af3f6834f07e93d2ce8d10b49cbe27af1d6619018d255977a031a9334f562a0cad9788bd1651c8522f127ee3b4750", @ANYRES16=r6, @ANYBLOB="0100fcffffff000000000100000008000200050000000e0001004e4c424c5f4d474d54000000080004000300000008000700ac1e0001"], 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r7)

19:59:08 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 12)

[ 2387.615547] loop5: detected capacity change from 0 to 77
[ 2387.690176] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2387.788452] FAULT_INJECTION: forcing a failure.
[ 2387.788452] name failslab, interval 1, probability 0, space 0, times 0
[ 2387.790871] CPU: 0 PID: 13985 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2387.792920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2387.795293] Call Trace:
[ 2387.795817]  <TASK>
[ 2387.796296]  dump_stack_lvl+0x8b/0xb3
[ 2387.797116]  should_fail.cold+0x5/0xa
[ 2387.797925]  ? security_file_alloc+0x34/0x170
[ 2387.798880]  should_failslab+0x5/0x10
[ 2387.799687]  kmem_cache_alloc+0x69/0x490
[ 2387.800575]  security_file_alloc+0x34/0x170
[ 2387.801502]  __alloc_file+0xb6/0x240
[ 2387.802298]  alloc_empty_file+0x6d/0x170
[ 2387.803176]  alloc_file+0x59/0x590
[ 2387.803952]  alloc_file_pseudo+0x16a/0x250
[ 2387.804861]  ? alloc_file+0x590/0x590
[ 2387.805676]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2387.806848]  ? shmem_get_inode+0x5cd/0xcb0
[ 2387.807747]  __shmem_file_setup+0x144/0x310
[ 2387.808687]  ? _copy_from_user+0x139/0x170
[ 2387.809588]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2387.810536]  do_syscall_64+0x3b/0x90
[ 2387.811344]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2387.812439] RIP: 0033:0x7f2f73cf3b19
[ 2387.813226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2387.817058] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2387.818640] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2387.820159] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2387.821651] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2387.823156] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2387.824665] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2387.826189]  </TASK>
19:59:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:22 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:59:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x45ce, &(0x7f0000000080)={&(0x7f00000001c0)={0xac, r2, 0x3079899cd1911feb, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x0, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x54, 0x1, 'NLBL_MGMT\x00!W\xc0\xcf\xbf2\x92\xf0YS\xe8\xd2$\xff\xfcT\x9e\x94\x87\xea\xa4\x9fC\xf2\xa2\xc9\x15<\xc8\a#\x81\xd8O\xe1\x11*\xa0\xae^\xcb\xa7\\\xca{:\xe1\x9cD\xac\x8f\xa4\x99\xcd\xb3&\x89>NBTZ~\xa1\xe6~\x1e\xed\xd6\xdd'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x41}}]}, 0xac}}, 0x0)

19:59:22 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2400, 0x0, 0x0)

19:59:22 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xcc0, 0x0, 0x0)

19:59:22 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 13)

19:59:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001c06000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:22 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000006806000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2402.048883] FAULT_INJECTION: forcing a failure.
[ 2402.048883] name failslab, interval 1, probability 0, space 0, times 0
[ 2402.050030] CPU: 0 PID: 14007 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2402.050985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2402.052219] Call Trace:
[ 2402.052475]  <TASK>
[ 2402.052699]  dump_stack_lvl+0x8b/0xb3
[ 2402.053188]  should_fail.cold+0x5/0xa
[ 2402.053643]  ? create_object.isra.0+0x3a/0xa20
[ 2402.054094]  should_failslab+0x5/0x10
[ 2402.054487]  kmem_cache_alloc+0x69/0x490
[ 2402.054995]  create_object.isra.0+0x3a/0xa20
[ 2402.055445]  ? kasan_unpoison+0x23/0x50
[ 2402.055838]  kmem_cache_alloc+0x244/0x490
[ 2402.056260]  security_file_alloc+0x34/0x170
[ 2402.056684]  __alloc_file+0xb6/0x240
[ 2402.057064]  alloc_empty_file+0x6d/0x170
[ 2402.057466]  alloc_file+0x59/0x590
[ 2402.057824]  alloc_file_pseudo+0x16a/0x250
[ 2402.058241]  ? alloc_file+0x590/0x590
[ 2402.058612]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2402.059170]  ? shmem_get_inode+0x5cd/0xcb0
[ 2402.059604]  __shmem_file_setup+0x144/0x310
[ 2402.060048]  ? _copy_from_user+0x139/0x170
[ 2402.060495]  __do_sys_memfd_create+0x1c6/0x4f0
[ 2402.060977]  do_syscall_64+0x3b/0x90
[ 2402.061383]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2402.062047] RIP: 0033:0x7f2f73cf3b19
[ 2402.062422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2402.064421] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2402.065189] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f2f73cf3b19
[ 2402.065929] RDX: 0000000000004400 RSI: 0000000000000000 RDI: 00007f2f73d4d0fb
[ 2402.066784] RBP: 0000000000000003 R08: 0000000000002200 R09: ffffffffffffffff
[ 2402.067487] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2402.068209] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020000040
[ 2402.068927]  </TASK>
[ 2402.082644] loop5: detected capacity change from 0 to 77
[ 2402.085341] loop4: detected capacity change from 0 to 70
19:59:23 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000fe06000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2402.098529] EXT4-fs: Ignoring removed nobh option
[ 2402.105469] loop6: detected capacity change from 0 to 512
[ 2402.106629] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2402.125724] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2402.131021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:59:23 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x840100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6972}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf0}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4ad7}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x8800}, 0x48d1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2402.149669] loop5: detected capacity change from 0 to 77
[ 2402.158088] loop4: detected capacity change from 0 to 70
[ 2402.159105] EXT4-fs: Ignoring removed nobh option
[ 2402.164854] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2402.167067] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:59:23 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 14)

[ 2402.244185] FAULT_INJECTION: forcing a failure.
[ 2402.244185] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2402.246610] CPU: 1 PID: 14026 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2402.248550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2402.250819] Call Trace:
[ 2402.251329]  <TASK>
[ 2402.251786]  dump_stack_lvl+0x8b/0xb3
[ 2402.252585]  should_fail.cold+0x5/0xa
[ 2402.253375]  prepare_alloc_pages+0x17b/0x500
[ 2402.254264]  __alloc_pages+0x131/0x4e0
[ 2402.255061]  ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10
[ 2402.256272]  ? lock_release+0x3b2/0x6f0
[ 2402.257077]  ? avc_has_perm_noaudit+0x1c8/0x390
[ 2402.258034]  ? find_held_lock+0x2c/0x110
[ 2402.258857]  ? lock_release+0x3b2/0x6f0
[ 2402.259625]  ? __filemap_get_folio+0x2d1/0xfd0
[ 2402.260562]  ? __sanitizer_cov_trace_cmp2+0x22/0x80
[ 2402.261557]  alloc_pages_vma+0xde/0x500
[ 2402.262383]  shmem_alloc_page+0x107/0x1d0
[ 2402.263217]  ? shmem_add_to_page_cache+0x1630/0x1630
[ 2402.264284]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2402.265372]  ? percpu_counter_add_batch+0xb4/0x170
[ 2402.266369]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2402.267358]  ? __vm_enough_memory+0x184/0x360
[ 2402.268291]  shmem_getpage_gfp.constprop.0+0x651/0x2180
[ 2402.269383]  ? shmem_unuse_inode+0xdd0/0xdd0
[ 2402.270263]  ? ktime_get_coarse_real_ts64+0x159/0x190
[ 2402.271304]  ? fault_in_readable+0x192/0x250
[ 2402.272221]  ? is_valid_gup_flags+0x70/0x70
[ 2402.273096]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2402.274108]  shmem_write_begin+0xfd/0x1d0
[ 2402.274952]  generic_perform_write+0x208/0x510
[ 2402.275902]  ? folio_unlock+0xb0/0xb0
[ 2402.276686]  ? iput+0x70/0x70
[ 2402.277323]  ? generic_write_checks+0x25f/0x390
[ 2402.278279]  __generic_file_write_iter+0x306/0x4b0
[ 2402.279281]  generic_file_write_iter+0xd7/0x220
[ 2402.280225]  ? iov_iter_init+0x45/0x1b0
[ 2402.281039]  new_sync_write+0x437/0x660
[ 2402.281847]  ? new_sync_read+0x6f0/0x6f0
[ 2402.282661]  ? x86_pmu_enable+0xb20/0xd90
[ 2402.283507]  ? lock_release+0x6f0/0x6f0
[ 2402.284353]  ? lock_is_held_type+0xd7/0x130
[ 2402.285252]  vfs_write+0x7d1/0xae0
[ 2402.285987]  __x64_sys_pwrite64+0x1fd/0x250
[ 2402.286863]  ? vfs_write+0xae0/0xae0
[ 2402.287613]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2402.288664]  do_syscall_64+0x3b/0x90
[ 2402.289452]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2402.290486] RIP: 0033:0x7f2f73ca6ab7
[ 2402.291340] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2402.296004] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2402.297623] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2402.299077] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004
[ 2402.300528] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2402.301965] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 2402.303404] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 2402.304874]  </TASK>
[ 2402.323403] loop6: detected capacity change from 0 to 512
[ 2402.334063] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 2417.600689] FAULT_INJECTION: forcing a failure.
[ 2417.600689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2417.601990] CPU: 0 PID: 14038 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2417.602999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2417.604201] Call Trace:
[ 2417.604481]  <TASK>
[ 2417.604716]  dump_stack_lvl+0x8b/0xb3
[ 2417.605136]  should_fail.cold+0x5/0xa
[ 2417.605567]  copy_page_from_iter_atomic+0x4e4/0x1b20
[ 2417.606120]  ? iov_iter_get_pages_alloc+0x1090/0x1090
[ 2417.606668]  ? fault_in_readable+0x192/0x250
[ 2417.607141]  ? is_valid_gup_flags+0x70/0x70
[ 2417.607609]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2417.608142]  ? shmem_write_begin+0xfd/0x1d0
[ 2417.608617]  ? shmem_write_begin+0x106/0x1d0
[ 2417.609094]  generic_perform_write+0x27e/0x510
[ 2417.609583]  ? folio_unlock+0xb0/0xb0
[ 2417.609987]  ? iput+0x70/0x70
[ 2417.610320]  ? generic_write_checks+0x25f/0x390
[ 2417.610830]  __generic_file_write_iter+0x306/0x4b0
[ 2417.611355]  generic_file_write_iter+0xd7/0x220
[ 2417.611855]  ? iov_iter_init+0x45/0x1b0
[ 2417.612280]  new_sync_write+0x437/0x660
[ 2417.612735]  ? new_sync_read+0x6f0/0x6f0
[ 2417.613190]  ? x86_pmu_enable+0xb20/0xd90
[ 2417.613658]  ? lock_release+0x6f0/0x6f0
[ 2417.614109]  ? lock_is_held_type+0xd7/0x130
[ 2417.614600]  vfs_write+0x7d1/0xae0
[ 2417.615011]  __x64_sys_pwrite64+0x1fd/0x250
[ 2417.615502]  ? vfs_write+0xae0/0xae0
[ 2417.615922]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2417.616521]  do_syscall_64+0x3b/0x90
[ 2417.616949]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2417.617565] RIP: 0033:0x7f2f73ca6ab7
[ 2417.618257] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2417.620174] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2417.621015] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2417.621800] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004
[ 2417.622585] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2417.623277] loop4: detected capacity change from 0 to 70
[ 2417.623363] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 2417.625245] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 2417.625998] EXT4-fs: Ignoring removed nobh option
[ 2417.626041]  </TASK>
19:59:38 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:59:38 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 15)

19:59:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:38 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x269c, 0x0, 0x0)

19:59:38 executing program 2:
sync()
sync()

19:59:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x4014)

[ 2417.643750] loop5: detected capacity change from 0 to 77
[ 2417.654929] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2417.661815] loop6: detected capacity change from 0 to 512
[ 2417.664991] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2417.678825] loop4: detected capacity change from 0 to 70
[ 2417.684885] EXT4-fs: Ignoring removed nobh option
[ 2417.689726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:59:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000020000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2417.708774] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2417.716261] loop5: detected capacity change from 0 to 77
[ 2417.743713] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
19:59:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x39c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d6721b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5c154e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ac923eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x412c2995}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1068716b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383a39de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29dd007}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d4ff7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb06f49f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49409413}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43537058}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75be7934}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aefa89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35a7593b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c85682}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x248344fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42858054}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aa0308}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b260864}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cd93e76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d74b235}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcce8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xda863dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad4da64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a2061c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65bfc695}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x685a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4abe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d10ef40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f63d98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x397cf12a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c02d8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b770600}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6077d2ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9918}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f258c39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x118d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x266c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f74}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b445c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb00c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fd5065c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8d3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa210}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x887c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ff2518}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75190cf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fce}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2880}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x458a9af6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b2c2f70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee0a963}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d908f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b23adf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9d58e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3960}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165113af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20eff3cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4edb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c47ae79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x783446f3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da8111f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62028465}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6508}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ea}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

19:59:38 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2a00, 0x0, 0x0)

19:59:38 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 16)

19:59:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:38 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0xe7f, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000015c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[ 2417.962908] loop4: detected capacity change from 0 to 70
[ 2417.967331] EXT4-fs: Ignoring removed nobh option
[ 2417.973567] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2417.983923] loop5: detected capacity change from 0 to 77
[ 2417.987935] FAULT_INJECTION: forcing a failure.
[ 2417.987935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2417.990561] CPU: 1 PID: 14069 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2417.992462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2417.994711] Call Trace:
[ 2417.995223]  <TASK>
[ 2417.995668]  dump_stack_lvl+0x8b/0xb3
[ 2417.995742] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2417.996459]  should_fail.cold+0x5/0xa
[ 2417.996498]  copy_page_from_iter_atomic+0x4e4/0x1b20
[ 2418.000152]  ? iov_iter_get_pages_alloc+0x1090/0x1090
[ 2418.001197]  ? fault_in_readable+0x192/0x250
[ 2418.002084]  ? is_valid_gup_flags+0x70/0x70
[ 2418.002947]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2418.003950]  ? shmem_write_begin+0xfd/0x1d0
[ 2418.004815]  ? shmem_write_begin+0x106/0x1d0
[ 2418.005698]  generic_perform_write+0x27e/0x510
[ 2418.006621]  ? folio_unlock+0xb0/0xb0
[ 2418.007385]  ? iput+0x70/0x70
[ 2418.008012]  ? generic_write_checks+0x25f/0x390
[ 2418.008968]  __generic_file_write_iter+0x306/0x4b0
[ 2418.009958]  generic_file_write_iter+0xd7/0x220
[ 2418.010883]  ? iov_iter_init+0x45/0x1b0
[ 2418.011679]  new_sync_write+0x437/0x660
[ 2418.012499]  ? new_sync_read+0x6f0/0x6f0
[ 2418.013319]  ? x86_pmu_enable+0xb20/0xd90
[ 2418.014156]  ? lock_release+0x6f0/0x6f0
[ 2418.014965]  ? lock_is_held_type+0xd7/0x130
[ 2418.015830]  vfs_write+0x7d1/0xae0
[ 2418.016563]  __x64_sys_pwrite64+0x1fd/0x250
[ 2418.017434]  ? vfs_write+0xae0/0xae0
[ 2418.018186]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2418.019222]  do_syscall_64+0x3b/0x90
[ 2418.019974]  entry_SYSCALL_64_after_hwframe+0x44/0xae
19:59:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9ac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2418.021016] RIP: 0033:0x7f2f73ca6ab7
[ 2418.021992] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2418.025647] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2418.027143] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2418.028597] RDX: 0000000000000009 RSI: 0000000020010300 RDI: 0000000000000004
[ 2418.030017] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2418.031424] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004
[ 2418.032836] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
[ 2418.034272]  </TASK>
[ 2418.038266] loop4: detected capacity change from 0 to 70
[ 2418.039727] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2418.041536] Buffer I/O error on dev loop4, logical block 1, async page read
[ 2418.054306] loop6: detected capacity change from 0 to 512
[ 2418.068678] loop5: detected capacity change from 0 to 77
[ 2418.072743] EXT4-fs: Ignoring removed nobh option
[ 2418.117805] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2418.122619] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2418.144530] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
19:59:56 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x3000, 0x0, 0x0)

19:59:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

19:59:56 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008810)

19:59:56 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000002000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:56 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 17)

19:59:56 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

19:59:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x39c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d6721b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5c154e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ac923eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x412c2995}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1068716b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383a39de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29dd007}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d4ff7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb06f49f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49409413}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43537058}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75be7934}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aefa89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35a7593b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c85682}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x248344fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42858054}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aa0308}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b260864}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cd93e76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d74b235}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcce8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xda863dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad4da64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a2061c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65bfc695}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x685a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4abe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d10ef40}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f63d98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x397cf12a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c02d8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b770600}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6077d2ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9918}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f258c39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x118d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x266c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f74}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b445c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb00c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fd5065c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8d3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa210}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x887c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ff2518}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75190cf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fce}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2880}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x458a9af6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b2c2f70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee0a963}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45d908f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b23adf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9d58e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3960}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165113af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20eff3cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4edb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c47ae79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x783446f3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da8111f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62028465}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6508}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ea}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2435.317685] FAULT_INJECTION: forcing a failure.
[ 2435.317685] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2435.320359] CPU: 0 PID: 14088 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2435.322383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2435.324838] Call Trace:
[ 2435.325386]  <TASK>
[ 2435.325868]  dump_stack_lvl+0x8b/0xb3
[ 2435.326694]  should_fail.cold+0x5/0xa
[ 2435.327532]  prepare_alloc_pages+0x17b/0x500
[ 2435.328493]  __alloc_pages+0x131/0x4e0
[ 2435.329354]  ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10
[ 2435.330639]  ? lock_release+0x3b2/0x6f0
[ 2435.331502]  ? avc_has_perm_noaudit+0x1c8/0x390
[ 2435.332506]  ? find_held_lock+0x2c/0x110
[ 2435.333408]  ? lock_release+0x3b2/0x6f0
[ 2435.334272]  ? __filemap_get_folio+0x2d1/0xfd0
[ 2435.335262]  ? __sanitizer_cov_trace_cmp2+0x22/0x80
[ 2435.336352]  alloc_pages_vma+0xde/0x500
[ 2435.337239]  shmem_alloc_page+0x107/0x1d0
[ 2435.338125]  ? shmem_add_to_page_cache+0x1630/0x1630
[ 2435.339244]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2435.340415]  ? percpu_counter_add_batch+0xb4/0x170
[ 2435.341487]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2435.342555]  ? __vm_enough_memory+0x184/0x360
[ 2435.343524]  shmem_getpage_gfp.constprop.0+0x651/0x2180
[ 2435.344704]  ? shmem_unuse_inode+0xdd0/0xdd0
[ 2435.345633]  ? ktime_get_coarse_real_ts64+0x159/0x190
[ 2435.346726]  ? fault_in_readable+0x192/0x250
[ 2435.347663]  ? is_valid_gup_flags+0x70/0x70
[ 2435.348549]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2435.348605] loop4: detected capacity change from 0 to 70
[ 2435.349609]  shmem_write_begin+0xfd/0x1d0
[ 2435.349648]  generic_perform_write+0x208/0x510
[ 2435.352195] loop5: detected capacity change from 0 to 77
[ 2435.352505]  ? folio_unlock+0xb0/0xb0
[ 2435.354311]  ? iput+0x70/0x70
[ 2435.354936]  ? generic_write_checks+0x25f/0x390
[ 2435.355878]  __generic_file_write_iter+0x306/0x4b0
[ 2435.356867]  generic_file_write_iter+0xd7/0x220
[ 2435.357794]  ? iov_iter_init+0x45/0x1b0
[ 2435.358586]  new_sync_write+0x437/0x660
[ 2435.359392]  ? new_sync_read+0x6f0/0x6f0
[ 2435.360205]  ? x86_pmu_enable+0xb20/0xd90
[ 2435.361050]  ? lock_release+0x6f0/0x6f0
[ 2435.361868]  ? lock_is_held_type+0xd7/0x130
[ 2435.362737]  vfs_write+0x7d1/0xae0
[ 2435.363452]  __x64_sys_pwrite64+0x1fd/0x250
[ 2435.363570] EXT4-fs: Ignoring removed nobh option
[ 2435.364319]  ? vfs_write+0xae0/0xae0
[ 2435.364357]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2435.367082]  do_syscall_64+0x3b/0x90
[ 2435.367821]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2435.368829] RIP: 0033:0x7f2f73ca6ab7
[ 2435.369547] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2435.373116] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2435.374590] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2435.375979] RDX: 000000000000001d RSI: 0000000020011500 RDI: 0000000000000004
[ 2435.377366] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2435.378740] R10: 0000000000002200 R11: 0000000000000293 R12: 0000000000000004
[ 2435.380114] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 2435.381528]  </TASK>
[ 2435.390667] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2435.404328] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2435.420925] loop5: detected capacity change from 0 to 77
[ 2435.438555] loop4: detected capacity change from 0 to 70
[ 2435.443744] EXT4-fs: Ignoring removed nobh option
[ 2435.460175] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
19:59:56 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2435.466662] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:59:56 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

19:59:56 executing program 2:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

19:59:56 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x11, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r7, 0x30b}, 0x14}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2435.576600] loop6: detected capacity change from 0 to 512
19:59:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

19:59:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2435.633687] EXT4-fs error (device loop6): __ext4_fill_super:5277: inode #2: comm syz-executor.6: iget: root inode unallocated
[ 2435.641342] EXT4-fs (loop6): get root inode failed
[ 2435.642483] EXT4-fs (loop6): mount failed
19:59:56 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x3600, 0x0, 0x0)

19:59:56 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2435.714250] loop5: detected capacity change from 0 to 77
19:59:56 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='mountinfo\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

[ 2435.733707] loop4: detected capacity change from 0 to 70
[ 2435.747055] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2435.752173] EXT4-fs: Ignoring removed nobh option
19:59:56 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 18)

[ 2435.782630] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
19:59:56 executing program 3:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x1c})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4040000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2435.848358] FAULT_INJECTION: forcing a failure.
[ 2435.848358] name failslab, interval 1, probability 0, space 0, times 0
[ 2435.850604] CPU: 0 PID: 14129 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2435.852460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2435.854654] Call Trace:
[ 2435.855151]  <TASK>
[ 2435.855584]  dump_stack_lvl+0x8b/0xb3
[ 2435.856347]  should_fail.cold+0x5/0xa
[ 2435.857119]  ? xas_alloc+0x332/0x440
[ 2435.857854]  should_failslab+0x5/0x10
[ 2435.858598]  kmem_cache_alloc+0x69/0x490
[ 2435.859399]  xas_alloc+0x332/0x440
[ 2435.860106]  xas_create+0x607/0x1030
[ 2435.860860]  ? lock_acquire+0x1b2/0x4d0
[ 2435.861654]  xas_store+0x90/0x1c40
[ 2435.862357]  ? xas_find_conflict+0x4a6/0x9e0
[ 2435.863229]  shmem_add_to_page_cache+0x1128/0x1630
[ 2435.864188]  ? shmem_writepage+0xed0/0xed0
[ 2435.865032]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2435.866010]  shmem_getpage_gfp.constprop.0+0x796/0x2180
[ 2435.867071]  ? shmem_unuse_inode+0xdd0/0xdd0
[ 2435.867971]  ? ktime_get_coarse_real_ts64+0x159/0x190
[ 2435.868989]  ? fault_in_readable+0x192/0x250
[ 2435.869852]  ? is_valid_gup_flags+0x70/0x70
[ 2435.870693]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2435.871668]  shmem_write_begin+0xfd/0x1d0
[ 2435.872475]  generic_perform_write+0x208/0x510
[ 2435.873387]  ? folio_unlock+0xb0/0xb0
[ 2435.874127]  ? iput+0x70/0x70
[ 2435.874735]  ? generic_write_checks+0x25f/0x390
[ 2435.875658]  __generic_file_write_iter+0x306/0x4b0
[ 2435.876633]  generic_file_write_iter+0xd7/0x220
[ 2435.877544]  ? iov_iter_init+0x45/0x1b0
[ 2435.878332]  new_sync_write+0x437/0x660
[ 2435.879142]  ? new_sync_read+0x6f0/0x6f0
[ 2435.879969]  ? x86_pmu_enable+0xb20/0xd90
[ 2435.880850]  ? lock_release+0x6f0/0x6f0
[ 2435.881729]  ? lock_is_held_type+0xd7/0x130
[ 2435.882672]  vfs_write+0x7d1/0xae0
[ 2435.883462]  __x64_sys_pwrite64+0x1fd/0x250
[ 2435.884406]  ? vfs_write+0xae0/0xae0
[ 2435.885235]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2435.886360]  do_syscall_64+0x3b/0x90
[ 2435.887185]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2435.888299] RIP: 0033:0x7f2f73ca6ab7
[ 2435.889108] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2435.893080] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2435.894712] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2435.896245] RDX: 000000000000001d RSI: 0000000020011500 RDI: 0000000000000004
[ 2435.897784] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2435.899314] R10: 0000000000002200 R11: 0000000000000293 R12: 0000000000000004
[ 2435.900853] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 2435.902413]  </TASK>
[ 2435.944612] loop6: detected capacity change from 0 to 512
[ 2435.963468] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
20:00:13 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e5fdffffffffffff29000000040000000000000000000000380000000000000029000000360000001603000000000000c20400000009c9102001000000000000000000000000000205020003000100007f83eade053af3c8c6a4870ef7a0e56f0dde3d38771ccf3752c09db32aa797769cb240ebe42f62abca56fefd39511154aa0f878f15837a0af016e1c43355bfd4dfa6280462ccb85adf80413bcaf9ce30c09acc4521263390"], 0x50}}], 0x2, 0x0)

20:00:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:00:13 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 19)

20:00:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:13 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:00:13 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x3c00, 0x0, 0x0)

20:00:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006020000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="eb1f000000000000000003000000"], 0x14}}, 0x0)

[ 2452.871270] loop4: detected capacity change from 0 to 70
[ 2452.885297] EXT4-fs: Ignoring removed nobh option
[ 2452.890967] loop5: detected capacity change from 0 to 77
[ 2452.895469] FAULT_INJECTION: forcing a failure.
[ 2452.895469] name failslab, interval 1, probability 0, space 0, times 0
[ 2452.897836] CPU: 1 PID: 14159 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2452.899856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2452.902233] Call Trace:
[ 2452.902775]  <TASK>
[ 2452.903249]  dump_stack_lvl+0x8b/0xb3
[ 2452.904082]  should_fail.cold+0x5/0xa
[ 2452.904910]  ? cgroup_rstat_updated+0x28/0x2e0
[ 2452.905892]  ? create_object.isra.0+0x3a/0xa20
[ 2452.906863]  should_failslab+0x5/0x10
[ 2452.907671]  kmem_cache_alloc+0x69/0x490
[ 2452.908548]  create_object.isra.0+0x3a/0xa20
[ 2452.909488]  ? kasan_unpoison+0x23/0x50
[ 2452.910344]  kmem_cache_alloc+0x244/0x490
[ 2452.911246]  xas_alloc+0x332/0x440
[ 2452.912014]  xas_create+0x607/0x1030
[ 2452.912826]  ? lock_acquire+0x1b2/0x4d0
[ 2452.913707]  xas_store+0x90/0x1c40
[ 2452.914476]  ? xas_find_conflict+0x4a6/0x9e0
[ 2452.915429]  shmem_add_to_page_cache+0x1128/0x1630
[ 2452.916477]  ? shmem_writepage+0xed0/0xed0
[ 2452.917436]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2452.918532]  shmem_getpage_gfp.constprop.0+0x796/0x2180
[ 2452.919693]  ? shmem_unuse_inode+0xdd0/0xdd0
[ 2452.920620]  ? ktime_get_coarse_real_ts64+0x159/0x190
[ 2452.921730]  ? fault_in_readable+0x192/0x250
[ 2452.922712]  ? is_valid_gup_flags+0x70/0x70
[ 2452.923667]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2452.924737]  shmem_write_begin+0xfd/0x1d0
[ 2452.925659]  generic_perform_write+0x208/0x510
[ 2452.926658]  ? folio_unlock+0xb0/0xb0
[ 2452.927507]  ? iput+0x70/0x70
[ 2452.928164]  ? generic_write_checks+0x25f/0x390
[ 2452.929180]  __generic_file_write_iter+0x306/0x4b0
[ 2452.930249]  generic_file_write_iter+0xd7/0x220
[ 2452.931242]  ? iov_iter_init+0x45/0x1b0
[ 2452.932111]  new_sync_write+0x437/0x660
[ 2452.932970]  ? new_sync_read+0x6f0/0x6f0
[ 2452.933850]  ? x86_pmu_enable+0xb20/0xd90
[ 2452.934741]  ? lock_release+0x6f0/0x6f0
[ 2452.935601]  ? lock_is_held_type+0xd7/0x130
[ 2452.936525]  vfs_write+0x7d1/0xae0
[ 2452.937318]  __x64_sys_pwrite64+0x1fd/0x250
[ 2452.938228]  ? vfs_write+0xae0/0xae0
[ 2452.939014]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2452.940104]  do_syscall_64+0x3b/0x90
[ 2452.940904]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2452.941975] RIP: 0033:0x7f2f73ca6ab7
[ 2452.942748] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2452.946591] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2452.948172] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2452.949665] RDX: 000000000000001d RSI: 0000000020011500 RDI: 0000000000000004
[ 2452.951154] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2452.952641] R10: 0000000000002200 R11: 0000000000000293 R12: 0000000000000004
[ 2452.954137] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 2452.955631]  </TASK>
[ 2452.957438] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
20:00:13 executing program 3:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xda, 0x401, 0x7ff})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x4695, 0x9a, 0x8, 0xe, "f3742c3f1268c6b8690c44de2c7a6d25e51d0d"})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2452.976029] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2452.977683] loop4: detected capacity change from 0 to 70
[ 2452.987299] EXT4-fs: Ignoring removed nobh option
20:00:13 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r1=>0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
r3 = getpid()
syz_open_procfs(r3, &(0x7f0000000040)='status\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x354, 0x2a, 0x8, 0x70bd2a, 0x25dfdbff, {0x19}, [@typed={0x4, 0x33}, @nested={0x139, 0xc, 0x0, 0x1, [@typed={0x36, 0x52, 0x0, 0x0, @binary="482f101718324cb2b2355e95e341ce9e47cb96a986fce3f45a47052cb249536a7da991abb9e59f1ff4e89f4d8d15ea107490"}, @generic="68e6ae4a2b31da6afd931e88b850af0b965f2455b9e986026c9273bd3bf01d7f15b5ee22b33d8766d64d33e308c1e915a7e1dd95ccccb2facb186e4498ad0c75aa875b0d21b4ec0774c8bdb426db588f7c9fde1fd0795ee1483db6f2b3e874d52ad94cd4729a2f493bf0a7714c1305c72d965b884fa3f5f4d45e79982a811349da3cbcfa68e6649a7e0409a23e80769dc336e8b03a9fda108e80b3f00df7228139d3c0826aacd1128e4e2833398fca321c5fd9a50f2c2b08803c005dcb81d915897619ea8be89c705cbec7559467e7cda0ebce02685ef31bc6ceb6acde03bdf1ea831daa559d73e411a050018ca44649c73ccda23b8a6857bc", @typed={0x4, 0x93}]}, @nested={0x11b, 0x83, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x90, 0x0, 0x0, @uid=r2}, @generic="d6b3a88f5b47b9fb539baf0e805a68c236ca24848ad0498e9c58679b8d5c4c49f9abebefb56e376aa12ebbf73126d5f37b72b10600b67264b8421bd18a2d54c9a069da3026ff0b3c24f420c5145e12", @generic="23b11c0211c20392", @generic="2ceb5cb2c03cca1e275237e33d", @generic="650245c374ec13911dcfe64dcf33487cc1d65531c8aedd46438c101eafe19109a2dec2995fc3ed8118a33d70163d8b08f7fb6d18273f5a6ef83f3ebced33be007c207fd9a6fcf91e1d6cf28c89c0", @generic="596487e3250b8da2cf6fd8e7b32fa1376abe756807b7c2148bf91b62422fd9ab8f01777f9d16", @generic="026769893d7385ebbbfb916aa9843ab6ba49e85c2750145f", @typed={0x8, 0x67, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="c415fb77a20b8c10f203b70db118c3"]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r3}, @generic="47156205ffa91e148090b31ecbc33f86626bc23f1fc5e8783736d26d595aef2be0cd7f67ab80b04827d87e54341ab29d4eb961446febb0b7a032e29c8dacd91798df03a23dca26802586043ea9688fdb78e16bf4e8609c5196724966779f1ae8ea1bffa6b0031192a7a137ee057e83a88755b374d413e1b9f505f897b7685a10900dfb3182ccbad26cde0d3f5f6ffbc3f5bd99b24c336e65a4eef646e5643f756906258ef40a51ef11dd032bb75b1681e9741db7f908b0510e21457550ca349542acb940e58f0f89e386132a7b5d2dd9645abec269", @typed={0x4, 0x1}]}, 0x354}, 0x1, 0x0, 0x0, 0x1}, 0x4804)

[ 2452.999689] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2453.002217] loop5: detected capacity change from 0 to 77
[ 2453.015099] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006030000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2453.039047] loop6: detected capacity change from 0 to 512
20:00:14 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400))
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000880), &(0x7f0000000080)='system_u:object_r:dhcpd_state_t:s0\x00', 0x23, 0x0)

[ 2453.121145] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
20:00:14 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x3f00, 0x0, 0x0)

20:00:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:00:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa18b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b135093}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12d3915}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x106a9c41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752f7b6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46f621cd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a9ff906}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b8dbb63}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b5a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e89c79b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9e7b30e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe77e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7538d1ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x447e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f1c0a6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc899}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b7ec2ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fcc9f36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ed9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe026}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cde4426}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x596002b0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bd5ee7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x931a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x229b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="000040000c800c000b8008000a00419900000c000b8008000a004d10000024000b80080009006c0ea7903652289a8b5b000008000a00556a000008000900ad01aa45340004800500030001000000050003000500000005000300000000000500030006000000050003000600000005d9030001000000"], 0x88}, 0x1, 0x0, 0x0, 0x21}, 0x20000005)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x3079899cd1911feb}, 0x14}}, 0x0)

[ 2453.223922] loop4: detected capacity change from 0 to 70
[ 2453.230541] EXT4-fs: Ignoring removed nobh option
[ 2453.255959] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (17 blocks)
[ 2453.292183] loop5: detected capacity change from 0 to 77
[ 2453.326990] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2453.340807] loop5: detected capacity change from 0 to 77
[ 2453.353636] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:27 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x6000, 0x0, 0x0)

20:00:27 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006040000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:27 executing program 0:
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

20:00:27 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:27 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2466.981870] loop4: detected capacity change from 0 to 73
[ 2466.989642] FAULT_INJECTION: forcing a failure.
[ 2466.989642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2466.990945] CPU: 1 PID: 14198 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2466.991974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2466.993191] Call Trace:
[ 2466.993474]  <TASK>
[ 2466.993726]  dump_stack_lvl+0x8b/0xb3
[ 2466.994157]  should_fail.cold+0x5/0xa
[ 2466.994580]  copy_page_from_iter_atomic+0x4e4/0x1b20
[ 2466.995143]  ? iov_iter_get_pages_alloc+0x1090/0x1090
[ 2466.995705]  ? fault_in_readable+0x192/0x250
[ 2466.996190]  ? is_valid_gup_flags+0x70/0x70
[ 2466.996662]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2466.997218]  ? shmem_write_begin+0xfd/0x1d0
[ 2466.997680]  ? shmem_write_begin+0x106/0x1d0
[ 2466.998155]  generic_perform_write+0x27e/0x510
[ 2466.998655]  ? folio_unlock+0xb0/0xb0
[ 2466.999072]  ? iput+0x70/0x70
[ 2466.999431]  ? generic_write_checks+0x25f/0x390
[ 2466.999961]  __generic_file_write_iter+0x306/0x4b0
[ 2467.000495]  generic_file_write_iter+0xd7/0x220
[ 2467.000985]  ? iov_iter_init+0x45/0x1b0
[ 2467.001427]  new_sync_write+0x437/0x660
[ 2467.001865]  ? new_sync_read+0x6f0/0x6f0
[ 2467.002312]  ? x86_pmu_enable+0xb20/0xd90
[ 2467.002768]  ? lock_release+0x6f0/0x6f0
[ 2467.003216]  ? lock_is_held_type+0xd7/0x130
[ 2467.003689]  vfs_write+0x7d1/0xae0
[ 2467.004084]  __x64_sys_pwrite64+0x1fd/0x250
[ 2467.004556]  ? vfs_write+0xae0/0xae0
[ 2467.004970]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2467.005548]  do_syscall_64+0x3b/0x90
[ 2467.005971]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2467.006537] RIP: 0033:0x7f2f73ca6ab7
[ 2467.006953] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2467.008968] RSP: 002b:00007f2f71268f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2467.009815] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6ab7
[ 2467.010576] RDX: 000000000000001d RSI: 0000000020011500 RDI: 0000000000000004
[ 2467.011361] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2467.012124] R10: 0000000000002200 R11: 0000000000000293 R12: 0000000000000004
[ 2467.012904] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 2467.013720]  </TASK>
[ 2467.023216] EXT4-fs: Ignoring removed nobh option
[ 2467.033297] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (18 blocks)
[ 2467.035360] loop5: detected capacity change from 0 to 78
20:00:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4000c004}, 0x4000080)

20:00:27 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x402040, 0x142179a3a239b767)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}, {@cache_fscache}, {@nodevmap}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', r4}}]}})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}]}})

20:00:27 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 20)

[ 2467.047581] loop4: detected capacity change from 0 to 73
[ 2467.049117] EXT4-fs: Ignoring removed nobh option
[ 2467.055330] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (18 blocks)
20:00:28 executing program 0:
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

[ 2467.070474] loop6: detected capacity change from 0 to 512
20:00:28 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006050000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2467.098663] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xac46, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2467.123493] loop5: detected capacity change from 0 to 78
[ 2467.134438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2467.136006] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:28 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x9c26, 0x0, 0x0)

[ 2467.179079] loop4: detected capacity change from 0 to 86
20:00:28 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4)
sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="254df121b3f00f843a812ad7f249ca7bb7c0f8a0e9fecabb8d3069356679194375ee3939f5b4951640f07ba943d8a1bf92bcd6afdda89a8503c81011ca0b17", 0x3f}, {&(0x7f0000000180)="f77560458a0324fd4f0b305df65a63f52086e83fd668532e085843b3142c0a11a7aeada90e79e9ad40059f5520ecbd52fd917ad07fef", 0x36}], 0x2}, 0x0)

20:00:28 executing program 0:
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

[ 2467.191464] EXT4-fs: Ignoring removed nobh option
[ 2467.205801] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (21 blocks)
20:00:28 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 21)

20:00:28 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006060000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2467.235807] loop4: detected capacity change from 0 to 86
[ 2467.237877] EXT4-fs: Ignoring removed nobh option
20:00:28 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2467.247707] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (21 blocks)
20:00:28 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r1, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

[ 2467.282111] loop5: detected capacity change from 0 to 78
[ 2467.283294] FAULT_INJECTION: forcing a failure.
[ 2467.283294] name failslab, interval 1, probability 0, space 0, times 0
[ 2467.284569] CPU: 1 PID: 14233 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2467.285638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2467.286842] Call Trace:
[ 2467.287122]  <TASK>
[ 2467.287367]  dump_stack_lvl+0x8b/0xb3
[ 2467.287802]  should_fail.cold+0x5/0xa
[ 2467.288222]  ? getname_flags.part.0+0x50/0x4f0
[ 2467.288749]  should_failslab+0x5/0x10
[ 2467.289192]  kmem_cache_alloc+0x69/0x490
[ 2467.289641]  getname_flags.part.0+0x50/0x4f0
[ 2467.290126]  getname+0x8e/0xd0
[ 2467.290481]  do_sys_openat2+0xf5/0x4d0
[ 2467.290899]  ? build_open_flags+0x6f0/0x6f0
[ 2467.291382]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2467.291975]  __x64_sys_openat+0x13f/0x1f0
[ 2467.292419]  ? __x64_sys_open+0x1c0/0x1c0
[ 2467.292891]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2467.293454]  do_syscall_64+0x3b/0x90
[ 2467.293879]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2467.294438] RIP: 0033:0x7f2f73ca6a04
[ 2467.294849] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2467.296884] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2467.297708] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2467.298502] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2467.299290] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2467.300085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2467.300871] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2467.301683]  </TASK>
20:00:28 executing program 2:
pipe(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)

[ 2467.311211] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2467.320782] loop5: detected capacity change from 0 to 78
[ 2467.324176] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:28 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 22)

20:00:28 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:28 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006070000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2467.395856] FAULT_INJECTION: forcing a failure.
[ 2467.395856] name failslab, interval 1, probability 0, space 0, times 0
[ 2467.397143] CPU: 1 PID: 14239 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2467.398191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2467.399423] Call Trace:
[ 2467.399701]  <TASK>
[ 2467.399943]  dump_stack_lvl+0x8b/0xb3
[ 2467.400365]  should_fail.cold+0x5/0xa
[ 2467.400773]  ? create_object.isra.0+0x3a/0xa20
[ 2467.401279]  should_failslab+0x5/0x10
[ 2467.401694]  kmem_cache_alloc+0x69/0x490
[ 2467.402154]  create_object.isra.0+0x3a/0xa20
[ 2467.402635]  ? kasan_unpoison+0x23/0x50
[ 2467.403060]  kmem_cache_alloc+0x244/0x490
[ 2467.403528]  getname_flags.part.0+0x50/0x4f0
[ 2467.404011]  getname+0x8e/0xd0
[ 2467.404379]  do_sys_openat2+0xf5/0x4d0
[ 2467.404806]  ? build_open_flags+0x6f0/0x6f0
[ 2467.405305]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2467.405901]  __x64_sys_openat+0x13f/0x1f0
[ 2467.406361]  ? __x64_sys_open+0x1c0/0x1c0
[ 2467.406811]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2467.407379]  do_syscall_64+0x3b/0x90
[ 2467.407786]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2467.408362] RIP: 0033:0x7f2f73ca6a04
[ 2467.408754] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2467.410783] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2467.411614] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2467.412391] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2467.413188] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2467.413969] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2467.414747] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2467.415532]  </TASK>
[ 2467.418352] loop6: detected capacity change from 0 to 512
[ 2467.435155] loop5: detected capacity change from 0 to 78
[ 2467.438772] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2467.443045] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2467.458433] loop5: detected capacity change from 0 to 78
[ 2467.470001] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:41 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r1, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:00:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:00:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:41 executing program 2:
pipe(&(0x7f0000000180))
syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"])

20:00:41 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xad01, 0x0, 0x0)

20:00:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x41)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r5, 0x30b}, 0x14}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x7000000}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x109, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400e044}, 0x8000)

20:00:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006080000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 23)

[ 2480.793514] loop4: detected capacity change from 0 to 256
[ 2480.796628] loop5: detected capacity change from 0 to 78
[ 2480.805649] EXT4-fs: Ignoring removed nobh option
[ 2480.810241] FAULT_INJECTION: forcing a failure.
[ 2480.810241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2480.811541] CPU: 1 PID: 14268 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2480.812569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2480.813805] Call Trace:
[ 2480.814076]  <TASK>
[ 2480.814323]  dump_stack_lvl+0x8b/0xb3
[ 2480.814746]  should_fail.cold+0x5/0xa
[ 2480.815158]  strncpy_from_user+0x34/0x3e0
[ 2480.815610]  getname_flags.part.0+0x95/0x4f0
[ 2480.816087]  getname+0x8e/0xd0
[ 2480.816446]  do_sys_openat2+0xf5/0x4d0
[ 2480.816867]  ? build_open_flags+0x6f0/0x6f0
[ 2480.817351]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2480.817942]  __x64_sys_openat+0x13f/0x1f0
[ 2480.818387]  ? __x64_sys_open+0x1c0/0x1c0
[ 2480.818837]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2480.819397]  do_syscall_64+0x3b/0x90
[ 2480.819808]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2480.820357] RIP: 0033:0x7f2f73ca6a04
[ 2480.820752] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2480.822726] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2480.823525] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2480.824314] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2480.825094] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2480.825895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2480.826661] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2480.827470]  </TASK>
[ 2480.830440] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (64 blocks)
[ 2480.837619] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2480.870847] loop4: detected capacity change from 0 to 256
[ 2480.872201] loop5: detected capacity change from 0 to 78
[ 2480.875586] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2480.877347] EXT4-fs: Ignoring removed nobh option
[ 2480.896009] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (64 blocks)
[ 2496.682771] loop5: detected capacity change from 0 to 78
[ 2496.689465] FAULT_INJECTION: forcing a failure.
[ 2496.689465] name failslab, interval 1, probability 0, space 0, times 0
[ 2496.690602] CPU: 0 PID: 14282 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2496.691531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2496.692629] Call Trace:
[ 2496.692883]  <TASK>
[ 2496.693106]  dump_stack_lvl+0x8b/0xb3
[ 2496.693495]  should_fail.cold+0x5/0xa
[ 2496.693875]  ? __alloc_file+0x21/0x240
[ 2496.694266]  should_failslab+0x5/0x10
[ 2496.694641]  kmem_cache_alloc+0x69/0x490
[ 2496.695046]  __alloc_file+0x21/0x240
[ 2496.695418]  alloc_empty_file+0x6d/0x170
[ 2496.695821]  path_openat+0xe1/0x28a0
[ 2496.696203]  ? path_lookupat+0x850/0x850
[ 2496.696603]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2496.697121]  ? lock_is_held_type+0xd7/0x130
[ 2496.697552]  do_filp_open+0x1aa/0x400
[ 2496.697920]  ? may_open_dev+0xf0/0xf0
[ 2496.698297]  ? lock_release+0x3b2/0x6f0
[ 2496.698684]  ? alloc_fd+0x2f0/0x670
[ 2496.699070]  ? lock_downgrade+0x6d0/0x6d0
[ 2496.699479]  ? rwlock_bug.part.0+0x90/0x90
[ 2496.699931]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2496.700509]  ? _find_next_bit+0x1e5/0x260
[ 2496.700953]  ? _raw_spin_unlock+0x24/0x40
[ 2496.701388]  ? alloc_fd+0x2f0/0x670
[ 2496.701765]  do_sys_openat2+0x16d/0x4d0
[ 2496.702198]  ? build_open_flags+0x6f0/0x6f0
[ 2496.702663]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2496.703206]  __x64_sys_openat+0x13f/0x1f0
[ 2496.703645]  ? __x64_sys_open+0x1c0/0x1c0
[ 2496.704083]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2496.704627]  do_syscall_64+0x3b/0x90
[ 2496.705031]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2496.705572] RIP: 0033:0x7f2f73ca6a04
[ 2496.705961] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2496.707877] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2496.708672] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2496.709417] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2496.710176] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2496.710918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2496.711661] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2496.712417]  </TASK>
[ 2496.720885] loop4: detected capacity change from 0 to 384
[ 2496.722524] EXT4-fs: Ignoring removed nobh option
[ 2496.736132] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (96 blocks)
[ 2496.737976] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:00:57 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r1, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:00:57 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xc00c, 0x0, 0x0)

20:00:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x30000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:00:57 executing program 3:
fork()
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x0, 0x25dfdbff}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x7000000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}]}, 0x54}}, 0x4000005)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4005)

20:00:57 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006180000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:57 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=<r1=>0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
read$hiddev(r2, &(0x7f0000000000)=""/108, 0x6c)
openat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x19)
ppoll(&(0x7f0000004840)=[{r1}], 0x1, 0x0, 0x0, 0x0)

20:00:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:57 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 24)

[ 2496.749516] loop5: detected capacity change from 0 to 78
[ 2496.755521] loop4: detected capacity change from 0 to 384
[ 2496.756395] EXT4-fs: Ignoring removed nobh option
[ 2496.758287] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2496.762316] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (96 blocks)
20:00:57 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000061c0000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:00:57 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 25)

[ 2496.845186] loop5: detected capacity change from 0 to 78
[ 2496.854512] FAULT_INJECTION: forcing a failure.
[ 2496.854512] name failslab, interval 1, probability 0, space 0, times 0
[ 2496.855846] CPU: 0 PID: 14307 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2496.856920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2496.858190] Call Trace:
[ 2496.858477]  <TASK>
[ 2496.858737]  dump_stack_lvl+0x8b/0xb3
[ 2496.859174]  should_fail.cold+0x5/0xa
[ 2496.859617]  ? create_object.isra.0+0x3a/0xa20
[ 2496.860128]  should_failslab+0x5/0x10
[ 2496.860552]  kmem_cache_alloc+0x69/0x490
[ 2496.861010]  create_object.isra.0+0x3a/0xa20
[ 2496.861502]  ? kasan_unpoison+0x23/0x50
[ 2496.861971]  kmem_cache_alloc+0x244/0x490
[ 2496.862443]  __alloc_file+0x21/0x240
[ 2496.862882]  alloc_empty_file+0x6d/0x170
[ 2496.863355]  path_openat+0xe1/0x28a0
[ 2496.863801]  ? path_lookupat+0x850/0x850
[ 2496.864282]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2496.864896]  ? lock_is_held_type+0xd7/0x130
[ 2496.865404]  do_filp_open+0x1aa/0x400
[ 2496.865858]  ? may_open_dev+0xf0/0xf0
[ 2496.866293]  ? lock_release+0x3b2/0x6f0
[ 2496.866761]  ? alloc_fd+0x2f0/0x670
[ 2496.867195]  ? lock_downgrade+0x6d0/0x6d0
[ 2496.867615]  ? rwlock_bug.part.0+0x90/0x90
[ 2496.868119]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2496.868673]  ? _find_next_bit+0x1e5/0x260
[ 2496.869163]  ? _raw_spin_unlock+0x24/0x40
[ 2496.869659]  ? alloc_fd+0x2f0/0x670
[ 2496.870105]  do_sys_openat2+0x16d/0x4d0
[ 2496.870573]  ? build_open_flags+0x6f0/0x6f0
[ 2496.871090]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2496.871724]  __x64_sys_openat+0x13f/0x1f0
[ 2496.872213]  ? __x64_sys_open+0x1c0/0x1c0
[ 2496.872681]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2496.873272]  do_syscall_64+0x3b/0x90
[ 2496.873718]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2496.874309] RIP: 0033:0x7f2f73ca6a04
[ 2496.874723] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2496.876780] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2496.877643] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2496.878446] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
20:00:57 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xf000, 0x0, 0x0)

[ 2496.879240] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2496.880191] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2496.880976] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2496.881783]  </TASK>
[ 2496.885628] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2496.927611] loop6: detected capacity change from 0 to 512
[ 2496.931680] loop4: detected capacity change from 0 to 512
[ 2496.934225] EXT4-fs: Ignoring removed nobh option
20:00:57 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006680000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:00:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2496.964097] loop5: detected capacity change from 0 to 78
20:00:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x8fe]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000003300)=ANY=[@ANYBLOB="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"])
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17, 0xff}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
[ 2496.975409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2496.977448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
pwritev(r1, &(0x7f0000002880)=[{&(0x7f00000005c0)="9851f924a7ee725f3d194cba65c8cf28ccb057dbfcc52fa6d8b91b1c5008e77cc5e8f650ef25e2327663277547d064e07c355dd74d41679bf1b15e34c2b6e8fd2fa4f457641efa56e51c78cb32e51a3860115c6c80a3cf775626b910a592d40dbba64e04a12e5f1c4a6dfe3cd1d698d4b8623d21eb4e51c67ec15987e3d310e2d754c4b6a1b03bcee503bff511a159fc00b0056d53326b86d5b11e687ec708540c235f445c10de", 0xa7}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="91171fb8c54a98ffa9efccb136794f4d30c5c8decde291cb0039fe6d34f5172ae1ced6005900123e6f9cfd8c2753b4f8d9ab427ecc3da7d5cde047b8c56b8d4694867477f9578e0fef43f1d4dab874185c568d1786db99392010ca8ea7ff5798e9f4a8a1d96a088a2bb741196cae7d072890ba675b1c596509e9a965dd0491b78618716e0f097cd482e0594ee1fe522f3b409327901503fa4b65c02c7f1036b7086d86d1a4ddbc20b1e1b9837e4970dd7b253d51884621d8d7c8b240dd319fccc4078f00616ac3cb31c652db5247dd191467ac2ec5d5b5bc308b8992daf160bd929ffc95eda7a8", 0xe7}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000004340)="e90250cbe55669fe2fdb86f300ac8681afb27b2a99164bfe25a0361451bc689bf2d38109ed9d7a76cbc782144bfd0817955b9c012c87f09b2d758e2cd8b522a8340ac7814032c0243ee24ee5a32010e125f9a463055fb11a3c7769086dc4c6ad50e198bcec7ec60c554111ffba306f3b41b5871f65ff7ee929c6f5bd53e1027edf6f21743001277fca8b8cd8609e285c1d9ce3da5321ad9802a51a18c7907340c5fa4d35ae2a014d05986bc718440871e3364c3631c0b341bd5bcf56fc21c5019e52a520806cf6c3fcbaded6a7733399bf80bc8eded94dfd73726a6b4e5f30e825cbba25737e6d768ee875b7abc6e498212f834a79770608fb86fc840dc748af18d821189131e0a7298d03acca4a87c1a01d878fb56c24d275351f3281fd2812ec48818e0f33a33761a2b16efb892afc8aae8f8c6161251550a3668532d16591707b48f98817c093b547278b4b0ff34af791feba1f9b069841a0da0e82697eb8db0668bf545f924eeda97326da64cd07fbb1b2fcf0bb4282d7d34d909b7628380dda7cc72238665f6940a5807a8e923cac6640a6395feb200d134a63550be362e74bd5e54f407b5c88cc25d083e7016e1581076e3cb3c606fef840ac3e68b5834d1f0da21978d9bab25f52534e9407a0d63dfc8aecff927f3bfc3d9678ce757ad42fc6c9333939eea5ac4783faa21160d259acfcc373fd4bd7ae8b049193b5cbcd6cc86741f20ceae2c7b6b7fbd0120e0b734f1c9169947e7310ad6f40f2886e90346d22f0ab45f6cce950d7ade9ac7f219e043a3c90075c562d239a8b494cb483f5f4029f6f96dd290663d093863ccc5bc1df07ec4df0d0fc84e5fae342d7dd4c485ce410889a3674c893dbbb08ea2e6a573002d59f5db7ef24bec4e243ffc0da7cbaa09a6b310d495ae7998da38dbe93aadba84f12d494d5f76c7d359c36c64674e881d9f9842a025cf8ee8366ed095b8cafda45005bb7d3f1d493944a94514fae3df3ed03bf1b470ff8fbdcada3f738d53e72a297610280a81ca5345113e60ff8b22c8c137e5d0ac7d49e35a02b9216b8091aebe0d13c94c0c40e146de2d65a1f8e5b26c5c103e44376a4489904990119a3f927f434ca46b11db2d8c0d1b160b093cf88882c903851e654e2748b47ee4dc24bfc3da8b86837559f36ded2d24adcc478b9aa069645cce4cf616fe16de306406e7aa6789163258a7097db3554a57cd97039cdf5195e0030af456a0378fbd4d71150345a0f6c94fb14d9e31ad776ece6403678d6bf5aa192ba4d0d3f8a6e6a091c01c08082b0b0df1a6bf234fd39dba363c00fa689dcfc83b78d29e72e57452e071ce092c6cadd6b7b57021ec90fc44b033ad74f48614618aef761528f0202ab2eaf2f8597ee95a0937104e5b1d1b49c61ab08f7cb4326289633c78ebf4d509eeb8c78348b70552b29a9190312deeb9e595a663d5908b99048f615dcf857628eca0eedccc0fc25efb40cfe1d52b80fbcbc7200afe62998056c47df61a8ef5d3b80cf1b08678d76e85e2357ef6076b517f684362c4e64b0ba5041473fa42bf7d887ebb7f5dd44d0d07562163aaedaac6e816086915b591adc8641aae941c7f5986bd9cd4b68290c6f71a1cdd994ac68f6c7bd952a27f9bc6ba9fe85633c767a2722d03dd42dec7d3b1d039ac1c37f636da88c989da988138072a0a7bf8fbf18e390b1b0e0a30dc1f766fa65073376b4293f90b617078f5db926834230892040c620a3988f3e6c200bfbf2f6222c0cbda3469ae03dcff1d62f2d37ffc2795cac5dec747f9ccdc3afa35e336a8dd43435d278e511a236e86943ae9096225e9f8ec6e459b51e114bdc4c24938b662ba795567bcdce0813d0f420cb62b0f55527f7815e54d4032f8e453d3abe5ac671a0a18ac8934d78122f61141eff4eea051980cf02d75672c00e28becfbd241e99c4b953ff4dadbad920bb74190f67af3cc87da695769450d70c77cdb547125b4af25bc521f3065e83ba106052e62d15c8e26fb4f305654e935e4e5ba287d057ad183af2e0ccd7d31af9d04d9d8de507a4cabfd1e74e052a01cf1384184ed6fb650c99891c5da6ca3fa33e703cd1fedd02074ec67a73ebc6839b8a72920a9e1aa6760680fd987a57eae0feda59083281909715daa4061a63ed7fd1f09a206bfcfc54ff101dfb1a0979c9466731871a99e51a633dee5878d76c1453e49bb1af603123ea9100bba9fe8058638b4386e51b692e52c305ab5365f7a9708791d04862c70ac4582d674b9f4655b7dc71014c1a13c23f8d1640c7d9e8685a8bbd370261c8f1b7da296914b07a7a9f71b4e4991c75fc528461ec196db7ff106f81172cba684b843a1896257b7a6f12e41595a8bb4ba72ddb943cfb6eebf9a26e84aad58e8c7df965382931b4b243199e9deac67583a5f1c2de98c2b418eaca46afb3c894e2513841326edf60831cac99c5c23817c35aa50463eaa90ef34b13af120aaa928a6afe1683109e12bf3f073470186dda91219d29503a6da743681b1cdef3caf500f404be673da4c4eb0100449141e0fbbc153890c2cedcbe173ac0ad62968e4e0f9944a2cda56f7f67cacd7968dee1388071e90b35994be86aa1635f7d3aa8112727d2985ee6e82257cdd89ebe9093c1be7468b0cdad041863f6f91510db8f214e4994b77328e2fec152ac091c5459610056b79b33df8826fb57c7c4043f4bc5c30b52ce5230f42d3dab1fdcd2320d82e160cde38eec99540ac0ad4ca26f5b1a5bec31f66fe2b50e9e4d0ec06ed394daa70d4cfb3d8f9cf2c2db02e95cc10960393cf8f00f8c539cd5d35fe3551763055d5ff7ceb7c7beb66dfae961e0d81e83091e1fc7f869482dc903ac6595401f7275f91ff11be95e32710e9baabc41701bf3cb147ef6280e87a114b5b8aac4fb6fc0c0c6eb0d6d67a694fe861892673d4508559e55ed68981c6155abfd7e607491555e60be16b86bf21bf23c608406f988af87f2e6a4aff035c8697bbc68b0bb39a93d01769f7849d6a128bd73bf2a8d8f16be8585ace7b77de2a95d2a9c2b74743bb286830febff4f13153647bacbb48a84eae8b857dddd087e5fe30b4ae95bb5f416cf5879a596ecd6ad33b1ac1a94d58ca6b9fb4ada8cdfaac19c1e4eef8a6fdc9b7a483637bb9d76f9d9ccf870345ccb5fe77665523f176c624cb6cdf6de7e5d8bc15add28f90a9be543e0fb82d1cc51e1991064dc42392680defef78994692a37fab304f3d834276c72310f6bceacef6e5f571b4d9d11758bad389483b6f3c1e48ef316b9dc26726b5a656c7259ddc0f901f859ecceeac240984bdbca7f00a0ad5a013f97778b687504bd0728f2fefb5475e3ceb4cb2b322226ad79f2e18aa94cb143211157349ee4855aaf32a5bc2eaefb69b3443d35d8a26c4eb59f264aa54e4e475389a5ceb7a356bfc12b79840e7f5454297e6b6719e18f9e269c0335fc6ef51e51a3c547a9e1be6146f3fb82dcc6af2d3f62c7eeb9af4cf24240db5349f45786a94ef2efd6a3d6adfadd10d9b97152ed7019367df02302f52151d234b383fa1b55ed783a6e342650f619bca289af59138bd25537b5bac115120904b32c1fc527fcfe314cf9d3cd816e53a3ef565c2d6996b9027681352de004a34575b93c6a9ce6b83f60ec777409fa9de3f030b9d59d7f6955b2fad14fb07cd078b63cb8c8b9bf18a33be5aca27824f94e891fc075526b88c4408f15da9afd279b67f81a4691cc2ce63c39cdcce2eee90dd455bdcba76b2f99f949539c2f1faaa2667df49909d61bead1345ebbffb6f2e52fa043a33cafeca5072362a0d52036bccfe36e3e6a0d95718659564113a51f24b3bdee5599ce41d98db1259e2611012da4c0de3d4ea68938691677230b1cd0cff112ce7a036e60cbd59933ce73d86f524c8b40f561d970684993266bbdc0d5dc561f9c3b52f833f6f69a513f703a51ceb0b85908d3b921be2ce4e86c6e30a7de9159e61a0f0289dedb0d96f21b70f8c3808bd1a564a15157796f5a012551380011d4a0b2cfee26cfacc2392e42ffd91c407bf114b2c67973f0983eb24a324e9cc998d6c82c950252cabcc3aa9902b86378c01974794643bcebac0246ea05ccd38bd6577262de6a3e5cc8e6066165a5ddceb9e4b1e16048560c65a3b809a2798762607fecf3f5a405ad11ccaa96ca35f385dcfa44e2d427780d7c2820a8fd1234b82358520c1fd8c0a3a97f03ba0587a9ceff6e3176ab2576777136804e59b7be5b52bc47f193e3be110c83c6d8aa431a753f6116ce8c142e8378f0f3909f52f361ccdf941ee044d7812a22c5915ac40bd8c415ba8df5bd7aa0d858b3856435d4aa7767864735811077dc31daaeae0bfb2786b06dc45ef579b47fe443ecf981d17cf1ddbe167dd7cf479c724f2276246db494cfbc08bd67603ee0e88a245bbc7ba6f0d5059f841cb029ab5954c5533701c9e85efec52bc74e4b9d894518eca5a8b9d5ee830a3249ba3e21dae34a8d4b428cc740f4591a1eca2ad43cef01ff49950d888e82304bb6fa51ddb45435d91a30c41b2838ac0c99e0eb59b445cf9018be1346524db06a9868072357c21ecf997a2cd36aea1f390615f9717562f2a4135cff8cca169da6451fbfca0e66a0f9fb1d3b4fecc51d0c7db5f270c7827cca9072bab8e39dc6ba321b51e619c513c65c21d7cf0a4aa1b352cb31d76c356bb07e77c8c719ae88cfce4b2bc6777fc48791da9488b4b62cd16eeb26eeff3cf77e7efc0df600b4db242aca12e84d581c5b4bce5cbce73f9886e521626e07300ff8527a8c50d022b43bb35efa902059c4762a6c33fff9a8bec14248951218c8846d31c85baf036d004e09a25ce290a4b611af26338a7a53255c89c2299822ff35838e5c172d7a10e37feaca8c64027eefda1c8a11ff9c4048a9bfa7928f90fe868376e4c89ae355ceae5e649caf034d4888f3917f2dbacb94f32784150a6941c8eaa324518446ccc8897762dddf78d7c79881e215e33dac77e5fd51846383180819815e7dba3ce0bbc1122ac7bf1a5e4cb2be164fb5fdc572ed3240987906c2c326fb1445302217697a74f674b0db273bf25a4d7637f9905aae4546bc6246c5d97b46ed2d51d0a64a108f7ff7aab4d7e73b99f33c6f0dcf41ef52ad4303dcdef76f4fac9a3c500520dd5e674b8433998ad4042b3fa10b5d1872b654375343a5bdfa4ad4e39b8641de40d1b925c6edc6768f68594e0b1dc7ccf5c7bd2240257c9d37e32c18104991d0fc2bd05f9ce8457559f042f1e6ea82ce4ae028aa74ee27daab55c37ae7043cc46459e853ece45552bd853fcd2698a88095fdaa0225f41c3aed30ad666eb0c4fdddad65a5efedb4cf132c30ec9278a0e7e653a23619cf79d7102d8f6aa4656df72ddf4e2f38b7b8f12349457aa6f3e9ed55a1fd837b05eaef6470d15ca102ad300a563a63f03c24915ca128e8b01a41506f8f6e67ea12cdcb4f4f59d9414d9636a0ce0410cbc9e7bfd598823d1a16edb2c7c582f0bf2c31a277ad53ab1f0dd389730ba4935cc9f0a45391267ca487f2b972a88f3fb8ba9f4a094bccf35950942ce7bde21aaed3072d4fd4df5d9852b2124d2bf8a82402e545f58c76504fc0f8ecf6bfdaa6709942d8e90640e8ff50e217b61d8e3e67ccf83dc8d47d93c2099ebd82a8dbb8caceb39e041889c37490c3fe06adeefb6bb468c28486e0efd09498f78938598c92c9aa2ee9146438e1c1d620869fd7fec7ee22385d6f435e66a35b1fd1b1e0063998bf53f49b3f8e07e4ae17b7d572debf373e3c670712e05d", 0x1000}, {&(0x7f00000027c0)="4cb93dad87c84d72e2f5f0fe166c96a1588f6b44cc31040e3581f3ac2e7ce3cac8d26c4ddfc2da654d31643d16edc57c34f1526894e3d1004034163d79fbd1afc5f28c420b1d79e3618dfd09a9e57fc1bcb3a31e9a1f8c17a068d7579ebcf06c2e681c401adff692a456c104ede9ab43722d7a446174ac82743d02302d3e9cc2a1cd23a25dfce920dfe8c9e55d1e01e83fa402de824e90", 0x97}, {&(0x7f0000005340)="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", 0x1000}], 0x7, 0x8, 0x10001)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)="19", 0x1}, {&(0x7f0000000240)="d003a2c9da086f393d61604f97ae9c2d6682d1370a405ed57a7112e9984eff6796893a2432d952ad3cde33d4d107d8abf630c334cf7c0af95b5a27870deeb27baab2b2ede959b5005ea493069b842afc057cd97f699cfc330c5247f901a3c6", 0x5f}, {&(0x7f0000000300)="a142628e1489894ad0804bd2cacce42b59a430e40f14ddf083826f4dfc5ccb7c29462e7cf7d31f52f16342fee45308628f813a63d431cfc0096aad99cf22cdaff5", 0x41}, {&(0x7f0000000380)="7cadcbbd2fcc80af18bbf748671f2d18cb3953fc9eb857200bc876b9c5216a59c5663ca871b7aea1f7072ceb2378149e34922f9801c8eca3f9a970edc7241c4d9224a8598282c3a57d5d466f7794185f294ce5e9f699727d5ac3aecf7948335dab3b1dcd8afe70ce8ee51919af2d893d660a286429f1d28c738c880faa5a2346be6bb1303ab14d0cdba41b00267290c7e5c974bde08991610b2fc6857a1d6be1c8f802ed1cad3619aeba62699533d297830feb6e6041bed653c2f1c26a85007828768c8c092e9d8c2336d2429e9eb5b7f833df91d0124ef6f7", 0xd9}, {&(0x7f0000000480)="c24a49c8153db54955d180b49732ce8117dbc313d61d8e480fbfc1845a1f5d5181192955c42a59fbab3bd5ba289493636bd52b02062e2b185b23898fae38ab994137d699a423f3678388715580097f3f79e1cab9e3c9bf091c6b9718e084d9c8833ddb0ec2456f05590d18dd04ad2144e7b4a7609a7c6a9ea6602067351bb6d82c44208658f5015046bcb3a52e567a67d35ce7dcbe90", 0x96}, {&(0x7f0000000680)="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", 0x1000}], 0x6, 0x8000000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000032c0), 0x0, 0x0)
read(r3, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7fffffff)

[ 2497.009044] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2497.052864] loop2: detected capacity change from 0 to 264192
[ 2497.064388] loop5: detected capacity change from 0 to 78
[ 2497.066590] FAT-fs (loop2): bogus number of reserved sectors
[ 2497.067407] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2497.074278] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2497.888736] loop2: detected capacity change from 0 to 264192
[ 2497.905499] FAT-fs (loop2): Unrecognized mount option "trusted.overlay.origin" or missing value
[ 2498.387255] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
20:01:13 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 26)

20:01:13 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x100000, 0x0, 0x0)

20:01:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40003, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140ff32c829a7495c2577b4d647fb1c406256baa8675ad5fd105b61cce4bee764f4125e06c02d87b1cabfab88f776704f6e86a234133c8b06eb6b2452dad2120e73fef89628904c818d382a8199429bb5dec83731221f6ed34a6df8c212692a2ef9a4ba45455bfb9f22e44397fe0fef032aa2e16da3cf094b325f928e105e75213f1dc856268ca9f25b7c56355c45bd2dd29014772ccf2d531a1d100", @ANYRES16=r2, @ANYBLOB="eb1fffffffff0000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)

20:01:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x19}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60040051}, 0x20004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="040007000000fd030025060000000c00990009000000290000001800178004000400040003000400050004000300040005001c00e701d4e659f5ecdc6f09daf259750d559affba6f5ecb192800178004000400040001000400030004000400040000000000000000000100048136000400020018001780040003000400020004000100040006000400050008000500090000000a0018000301000303030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x8005)

20:01:13 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:01:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006fe0000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2512.386476] loop5: detected capacity change from 0 to 78
[ 2512.398652] loop4: detected capacity change from 0 to 512
[ 2512.401538] EXT4-fs: Ignoring removed nobh option
[ 2512.404328] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2512.417399] FAULT_INJECTION: forcing a failure.
[ 2512.417399] name failslab, interval 1, probability 0, space 0, times 0
[ 2512.419951] CPU: 1 PID: 14350 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2512.422018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2512.424450] Call Trace:
[ 2512.425009]  <TASK>
[ 2512.425493]  dump_stack_lvl+0x8b/0xb3
[ 2512.426341]  should_fail.cold+0x5/0xa
[ 2512.427176]  ? security_file_alloc+0x34/0x170
[ 2512.428156]  should_failslab+0x5/0x10
[ 2512.428980]  kmem_cache_alloc+0x69/0x490
[ 2512.429887]  security_file_alloc+0x34/0x170
[ 2512.430830]  __alloc_file+0xb6/0x240
[ 2512.431641]  alloc_empty_file+0x6d/0x170
[ 2512.432521]  path_openat+0xe1/0x28a0
[ 2512.433344]  ? path_lookupat+0x850/0x850
[ 2512.434228]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2512.435360]  ? lock_is_held_type+0xd7/0x130
[ 2512.436289]  do_filp_open+0x1aa/0x400
[ 2512.437101]  ? may_open_dev+0xf0/0xf0
[ 2512.437925]  ? lock_release+0x3b2/0x6f0
[ 2512.438786]  ? alloc_fd+0x2f0/0x670
[ 2512.439572]  ? lock_downgrade+0x6d0/0x6d0
[ 2512.440466]  ? rwlock_bug.part.0+0x90/0x90
[ 2512.441375]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2512.442568]  ? _find_next_bit+0x1e5/0x260
[ 2512.443458]  ? _raw_spin_unlock+0x24/0x40
[ 2512.444351]  ? alloc_fd+0x2f0/0x670
[ 2512.445148]  do_sys_openat2+0x16d/0x4d0
[ 2512.446010]  ? build_open_flags+0x6f0/0x6f0
[ 2512.446942]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2512.448125]  __x64_sys_openat+0x13f/0x1f0
[ 2512.449016]  ? __x64_sys_open+0x1c0/0x1c0
[ 2512.449918]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2512.451027]  do_syscall_64+0x3b/0x90
[ 2512.451822]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2512.452907] RIP: 0033:0x7f2f73ca6a04
[ 2512.453685] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2512.457576] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2512.459198] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2512.460696] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2512.462211] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2512.463711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2512.465206] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2512.466740]  </TASK>
[ 2512.494640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
20:01:13 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100100, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}, 0x4000}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)

[ 2512.518293] loop5: detected capacity change from 0 to 78
[ 2512.555241] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:01:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000300660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x3079899cd1911feb}, 0x14}}, 0x40)

20:01:13 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 27)

20:01:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:13 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x600000, 0x0, 0x0)

20:01:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:13 executing program 3:
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100), &(0x7f0000000140))
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010102, @in6=@private0, 0x4e21, 0x7, 0x4e21, 0x0, 0xa, 0xa0, 0xa0, 0x84, 0x0, r0}, {0x400, 0x7, 0x4, 0x5, 0x5, 0x4, 0x485781df}, {0x1, 0x0, 0x2, 0x9}, 0x4d, 0x6e6bbd, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x2b}, 0x2, @in=@multicast1, 0x3500, 0x0, 0x0, 0x7f, 0x6, 0xfed3, 0xffff8000}}, 0xe8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="110008e2f9a6929c734df9f05768be55be3587a8bd51279d1a7d7a874aad6a3767bf0feeece5bd8810f5fef04f00000000000000000056ff41dfac02a42b3810d95ab9fdc1ccb712cc5e58752d74a9773d98f700855f25915ee3ba4e13c3cd6c336ac552356c4a9804e9f60f1e4ff60fdfc844f0bce3ee7cf9e026fa448dd868f7a94e185b9dabd35b9eebe5a3f7e081ebbc41d52f467830796e719d11cdf56039ee521cdf54d08c4e5c0091810bac5563bf1eb81b", @ANYRES16=r6, @ANYBLOB="010000000000000000002e00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4)

20:01:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006800400660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:13 executing program 2:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x123008, 0x0)
getresuid(&(0x7f0000000480)=<r0=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x8001, &(0x7f0000000540)={'trans=unix,', {[{@noextend}, {@version_9p2000}, {@privport}, {@fscache}], [{@euid_gt={'euid>', 0xee00}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', r0}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@dont_measure}]}})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200))
mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa5800, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x80)
mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x201000, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x21004, 0x0)

[ 2512.768260] FAULT_INJECTION: forcing a failure.
[ 2512.768260] name failslab, interval 1, probability 0, space 0, times 0
[ 2512.770664] CPU: 1 PID: 14364 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2512.772652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2512.775025] Call Trace:
[ 2512.775557]  <TASK>
[ 2512.776017]  dump_stack_lvl+0x8b/0xb3
[ 2512.776814]  should_fail.cold+0x5/0xa
[ 2512.777614]  ? create_object.isra.0+0x3a/0xa20
[ 2512.778555]  should_failslab+0x5/0x10
[ 2512.779333]  kmem_cache_alloc+0x69/0x490
[ 2512.780177]  create_object.isra.0+0x3a/0xa20
[ 2512.781073]  ? kasan_unpoison+0x23/0x50
[ 2512.781907]  kmem_cache_alloc+0x244/0x490
[ 2512.782768]  security_file_alloc+0x34/0x170
[ 2512.783666]  __alloc_file+0xb6/0x240
[ 2512.784438]  alloc_empty_file+0x6d/0x170
[ 2512.785258]  path_openat+0xe1/0x28a0
[ 2512.786052]  ? path_lookupat+0x850/0x850
[ 2512.786883]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2512.787957]  ? lock_is_held_type+0xd7/0x130
[ 2512.788836]  do_filp_open+0x1aa/0x400
[ 2512.789607]  ? may_open_dev+0xf0/0xf0
[ 2512.790395]  ? lock_release+0x3b2/0x6f0
[ 2512.791204]  ? alloc_fd+0x2f0/0x670
[ 2512.791943]  ? lock_downgrade+0x6d0/0x6d0
[ 2512.792788]  ? rwlock_bug.part.0+0x90/0x90
[ 2512.793649]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2512.794786]  ? _find_next_bit+0x1e5/0x260
[ 2512.795634]  ? _raw_spin_unlock+0x24/0x40
[ 2512.796186] loop5: detected capacity change from 0 to 79
[ 2512.796483]  ? alloc_fd+0x2f0/0x670
[ 2512.798286]  do_sys_openat2+0x16d/0x4d0
[ 2512.799090]  ? build_open_flags+0x6f0/0x6f0
[ 2512.799970]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2512.801084]  __x64_sys_openat+0x13f/0x1f0
[ 2512.801934]  ? __x64_sys_open+0x1c0/0x1c0
[ 2512.802779]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2512.803818]  do_syscall_64+0x3b/0x90
[ 2512.804575]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2512.805604] RIP: 0033:0x7f2f73ca6a04
[ 2512.806347] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2512.809997] RSP: 002b:00007f2f71268ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2512.811492] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73ca6a04
[ 2512.812887] RDX: 0000000000000002 RSI: 00007f2f71269000 RDI: 00000000ffffff9c
[ 2512.814288] RBP: 00007f2f71269000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2512.815690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2512.817091] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2512.818528]  </TASK>
[ 2512.824624] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:01:13 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x80ffff, 0x0, 0x0)

[ 2512.848554] loop4: detected capacity change from 0 to 512
[ 2512.858475] EXT4-fs: Ignoring removed nobh option
[ 2512.863676] 9pnet_fd: p9_fd_create_unix (14374): problem connecting socket: ./file0: -111
[ 2512.894474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2512.902507] 9pnet_fd: p9_fd_create_unix (14374): problem connecting socket: ./file0: -111
20:01:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2512.933423] loop6: detected capacity change from 0 to 512
20:01:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000500660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2512.972361] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
20:01:26 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:01:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000600660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40005, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:26 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000fddda784adff180000004e168991b3"])
write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14)

[ 2525.637485] FAULT_INJECTION: forcing a failure.
[ 2525.637485] name failslab, interval 1, probability 0, space 0, times 0
[ 2525.638817] CPU: 0 PID: 14408 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2525.639818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2525.641000] Call Trace:
[ 2525.641270]  <TASK>
[ 2525.641505]  dump_stack_lvl+0x8b/0xb3
[ 2525.641919]  should_fail.cold+0x5/0xa
[ 2525.642347]  ? alloc_workqueue+0x914/0xeb0
[ 2525.642798]  should_failslab+0x5/0x10
[ 2525.643198]  __kmalloc+0x72/0x440
[ 2525.643570]  alloc_workqueue+0x914/0xeb0
[ 2525.644018]  ? do_raw_spin_unlock+0x4f/0x210
[ 2525.644488]  ? _raw_spin_unlock+0x24/0x40
[ 2525.644630] loop4: detected capacity change from 0 to 512
[ 2525.644944]  ? bd_prepare_to_claim+0x164/0x300
[ 2525.644962]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 2525.644987]  ? __fget_files+0x28d/0x470
[ 2525.647627]  ? loop_configure+0x62b/0x1950
[ 2525.648082]  loop_configure+0x6ec/0x1950
[ 2525.648526]  ? putname+0xfe/0x140
[ 2525.648913]  lo_ioctl+0x7c5/0x18b0
[ 2525.649301]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2525.649817]  ? loop_set_status_old+0x1b0/0x1b0
[ 2525.650336]  ? avc_ss_reset+0x180/0x180
[ 2525.650771]  ? __lock_acquire+0xbac/0x6120
[ 2525.651281]  ? selinux_inode_getsecctx+0x90/0x90
[ 2525.651787]  ? loop_set_status_old+0x1b0/0x1b0
[ 2525.652303]  blkdev_ioctl+0x362/0x7f0
[ 2525.652701]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2525.653232]  ? __x64_sys_ioctl+0x97/0x210
[ 2525.653664]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2525.654304]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2525.654799]  __x64_sys_ioctl+0x196/0x210
[ 2525.655248]  do_syscall_64+0x3b/0x90
[ 2525.655648]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2525.656218] RIP: 0033:0x7f2f73cf38d7
[ 2525.656603] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2525.658644] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2525.659441] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73cf38d7
[ 2525.660232] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2525.660551] EXT4-fs: Ignoring removed nobh option
[ 2525.661007] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2525.661017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2525.661025] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2525.661047]  </TASK>
20:01:26 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xc0ffff, 0x0, 0x0)

20:01:26 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:26 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x3079899cd1911feb}, 0x14}}, 0x0)

20:01:26 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 28)

[ 2525.671966] loop5: detected capacity change from 0 to 79
[ 2525.704614] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:01:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000700660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2525.736369] loop5: detected capacity change from 0 to 79
[ 2525.757316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2525.760014] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
20:01:41 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:01:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006001800660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=<r2=>0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x80400)
r4 = getpid()
syz_open_procfs(r4, &(0x7f0000000040)='status\x00')
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x18, 0x27, 0x800, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x79, 0x0, 0x0, @fd=r0}]}, 0x18}, {&(0x7f00000014c0)={0x14b0, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x333, 0x0, 0x0, 0x1, [@generic="47b8021b3b96cc09c517a6c77fb75d267308189ff81d2815374e300faf11bec2b4d7c8691061997aa5a2a5ea7bfc649b9eb0b8702ca7a61e0d488cb5dbf0fcf71ee9d0325b97baa870087b5e548aa70782f4abb03cb0e36a920233495fcadd8d21fa7a7989bccc99e230a0cd3f846b4ceeffeb9d8020c7f0a751fcb64a59dc4a6de179512b76288d85b50a6818f8c999736b9df1d9f07ae069c0f92bb6", @generic, @generic="826ffe55d475c5b82683a06a82f9d7adfab83effcf3183c18200bfdeb59058b89660775c5ca882b0c430b9716e0a092eabfeb7175c1ea3c8cdeede592edfed58f0057bbebae2f9514d7f7863b6df23214e5d7b9278636656cbd541ab511ff6c9c06d944252129c4d2359c0f40b946c21cc97ffca90733ab2882ac0251ad8b8931d32cdcd5cf4e6638cc5c1317562a9b58f1cde96aca25745be06855e63de180ef59723073ae97e6db80020cde051e743888949afad702ed4ecd0a42f89571c15741268d5a925736cc9ebca6ed3802636ebb0a4bae7891f6572fbe319fa0271", @generic="5763391109fa0b1fb805517eecaae9c48ec5ec3b7a5a5314491499d3b90ce0ecba6de046dfa51e267c1aa6911626c3c5d06940dd13138d7d927fc356a4a17443d85f4630aaae785ca96f7e7131edd3435094b6bcce2dc1802aa550d9caf0f862d31ab2e97eb1f326752ec47974f4dd57d8f1177955052fb478b409e100ad98ea8ab54b8279700f49d5d89ca487c1ccecad8fa67421bdf26df665ef2c2f87932299a711bd61c430283d58449c2e8ce8eba97d6193", @generic="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"]}, @nested={0xa4, 0x54, 0x0, 0x1, [@typed={0x9f, 0x51, 0x0, 0x0, @binary="cc5b76d7966dafe1ab75cfde062b6e0f34d826018114ca6f745281ba209a7deae5c6af779f2014c947a35a258deedb5e9771f35ae348dd0d1fefcd5fd8ac25e2f6c2b7d0ed1067cdc35dcfb9b079f9e29560efef56bef6c9fd010a7ed7a74f302da764c9a4a9530d45a8b3a3f27cb166794b724e4214cf57d88a62d7f740553979f36bd6f0db362be4e1df6b75f679f845da10923881b1d88a72c9"}]}, @generic="1a4b8fcde397d2c857a88455bdfa641801d0e42e6e0e66721cbc3445ee8b7af0bff91a4fe2515282033e3e36308a917cbc581a3ea7fc99e2306172d9ffc60756e66619502f3d3ae9523e5866ecdf43677955283c45e6ac26d2766a55c1ddb45f14f4a72c7a1f91062dfe8fb8e64fd4e6e7e043877d4ffc90abf3d9fdb6a9fae4f3ee0a2f5fa082084d423324fba32873a7c85d6c0ee3d2e70d789859bf2a63a15af0ce8e4392b574e7e2001ef2788d4f3d236abda6d8a38e937d5cbf6c49bdaaf9d227b5df96550efcf6fda3a5f2be5a1d49d71eafd71870b283b82f7271a1f56a1ebe5c7b82d4f11e438a7499042275b75f3bb5e28e9cc1415051ef69c778ce68349e61fbc5c1e81053c6df444ed16d74f707e06471163c11e879a9559f738d1de9d5ed6a0f1af6229c4e9d915f095a42d1e2f9bda69394a4984a073dc8b7f3758f900e1b07e61cfc7acd50f36a8d3f9c9fb0dd69ebb4f6b33b1b0ceb5fc2edcf8e1ea58b913fa28bae2417bb9e0f30e8e513a3d95bae8c6c03e8ea9fb592d058b608cef072ab1ab2ef3ce336dfcedfd29fcd6fa059fa5e8e997d29eab12a5827b549caa340d8f1797122fcb81a0fa3d0d2600b1f9c26c979ea7ecd79684f24bcec04153275b6aab9018d9198924b3fbec4419b07605075a87ae1e26a55695e7a31121ec10afda55e8ee14fa166cc843d482bdd4b48e2ac9e4426813650d40f861e2cff13b2484d3a3a32e75058b7cf8d5ffe9b630644998f6084f387a9177616c7054d88181508b9c24ef2f4c8eeb6a1ed40ad78cce7123677d5c790fd35f93679fcc6da9c11088b1d908fe14d5bef7427671b81e411b963a489266b8730a78b2b6d93753bb30b9e3791d8064f77c3bdb3bd8cb4f2035b5fbff412a3368ecf290334f6f52cddb2cbaa3a187430324f2873f5afca8a55dc7c25c93caa3e36b446ebeffdaddb424d9ce6006a092e18a3ad4ff28fb04f67aa67e4c6e4da6d7a239777feda2ab0a353c809a2651c4e4f3705ff7482642f06619e92ff433a92763f2ec9f4a13c8a689eb8dc9edd8692c91126d89d210293f20a1ef7e7a17a050826750cd76e7000bdc98f9f6318f9c49f1233f0dcd2d7b740dbca97fa9e300e03b1a1b414dd31b81440908d042ae5450334bfeee5b524a088c78c71f1c16496bd58d45f4abb2f4cbe0656c1eb6fccb273ed58712ede55775e5259dd0df956591bc324128862e042cc220d2983ce743cf4a49f920bd2058b78c5f318e1e7787adc95ad92a1279ccee825f8ad5d8671ac90d1a00bfcf29c88c0824a15b177e12c23a7deb98110b7b0a651564975bca6377dd254f6c959e862d1f688b7f3ebc9cc1be732ccf57e21eff2f2598cfc8282e99d6308ab1ad735d93c0f57b1f4411aaf1fa7ed0ecd64f5104ab951db763623097249defc3994fa36e8f7373506898eb0eaf0c76fa24162db846b7b40f3a0bc89a8d8f8d518f60a96ca37b40e6cdc8149e95bff37060e488d62f9dc572893317c4dc175e3501c3e812ebdba716f6e7f4fa37d66d20da7c02245e7556dc09227311bfba1ff3d960412f95d4a7c4222bfa1c2fa0c857141919dc4998d8bc45e520e28a92323aeec6925dc5c83911d0a778bb30b6ba5e093eb1a943188420ad6af66307e83ed4019f483e11f9cce75ed84a7a5c74a9cd2d78fae914ba0daa493c43c1b98ce46d403f4c86a0af5e06fe143d6df09fdc18a3f949c6d702e1a90fa3a418fd99aef59aa70244b52b24e9e9fb811b8c7663da10f04138b08ba91c968724cff481ae2be98ef4aedc6de1a17207459beb935cdf9e7703d8484de389f0fb7a6549840b9ff5391ca85ec504224ce0d37ac4050f6b043a6aeea93405773892bd080ef5b73ba6b3e4eef008cdc9b6325a8bb7b8b69848ca6a61fe699594ef6004960c95604f3103bb22c64de3d0f3a972f589008786ead96c1dc89fcad953be65fb3f6eae85848f9d1798e30872af56c55bfca5e3801dfa57d656ce987bb03507bc073f9505a053473e220a279036f6c6dbe05ddcda97066b38937e0883d41a0f894fe39797b274eed01ea29aed4fbece00040aa57a8b546c1eb773379afe41d387b7f9c089390ca0c6261880f01087417d73c6c3b16f579594943ff0fd4104b49e359d363303d98c495d51d6b09ab9596f4de029cf37549969c441054d7be57f22b12afff26e24941340d3cd12369dbd38d86653638204384bddf794cc4a7b7aa9bb5eb6bcee61ce3bd424434998e394b786efd29d8af7c890840db0312be6c98f19977c4fe7fc38e9e571c9fe3dca6eb392739f84556ebc01ea8a4d2ddccc340085166216e794461f89097688a1685d0bbb32df1f7a1d65bcb56e6591b5c71b91735adae543f61d33b20de59f53b52f3f9274506f71a277a5b388e620c2ba188695f051b63ae826010d4b323aafde363f2a084aabb0cc512868e76ed0c260a15892363594411da221e6e0851842770d143e6247c9c7fab5f3deaa393e6b06ea4955a2aac550b795a78e61174fd59b7f1102ef6a53bbfeb291035b0c2fecee7b02ec324d69fe83eb3a0922580351b9437fb29d43a3ebb7fb7b26227cccc5eaa6bac2875bee0a8458ed66f2d17eb7db9707101f38c7bd2f9a8eb77d40e9d0bda38949351bcc1c7fa694fe65bf32386172a51276770ab6ebc48137c90bcaf9a83fb8479e1394cd72071ac6eeac9a0ea0370805847166414272ef539e70af2b6e705bf1727e75c35f0c55b583281bc41042c34a29e313bfae680bad47a2c4ff684b3bd4f2b391632cc53de3a759d9ca45bf91872d873c9fa705fe90c82495f915c9759dd88dcf2b4de3fa1b716a1e2787bc9dfe75b6538e98f408e07f5c454d4a331443d377e81d1f28d7fe064a703531e2daa7327d41cbcbf0391596e4fb69d514cef49a871cd89adec1439e484beebaee7f1d91bcc8ce5a9292ad40bd464535310b7973268cb09c8e1183b7228d4407681a819638cb459018ed2d67e022836c69cca456523ca13978f7d09e3ddb932a1cf16963044310b5d96ad603b32b17b79433d01268e53f4b0f0554f4db3268b6e1081e9af195a8f5cdd5026baaf7158959e266cc316fc80f8e571396e81982b015f74bd40ff97d8bef806375b444029d9f6c6ac679db1ff8984d8d7745d09f6e2bddbf648708f02f3eafc830d536a60e5634a7f9346ec0d5b68ef80750d5fe461184a86ce7f7dc90faa95881031fd543193ff8d96b0a499bcca616d61eaffa7c89c5889442f98a84b4ec60e4271d2a4db878daf8f8a839f1ccfd8457c194c990043ec73f4637e939c347b8a27f0aac801380b54325fde6608c797332590fcd42497f6db14cfe7766806cbbccf58d943e50bdbd2c5b9982db37a74e34a7b5cdf27d7cbc0eaa0e2b63da7c52ecbe2aba1e3cf923a6dcf2c70befe29d2e0704d46b2756d113c6449d2ac62537c1c1912d0f61b39f7a890c29f1d324d7e3ea62c2ac907a019f93ee9f629e45d45470c8c736495f2c57902c791410ede612a7ecb57532b1e2d1d120b6d479d00689324f88df16637bc2f9448b073a059e64dad3e6ed166bc9296f75b133c50a2d78b68c346ea212f716e2ab56d8e6b03c809cc72028066359dbfd2aa8a1a779fdb9ab0e0845b85eb83c35b6265fc2a883cacdf152e9ef4f965225884f3fe06dc5a8edcaaa93159217550e7185dd23eeb912b0a682692e12067ba6a486ea797cf8cf87a649f0669d52e5a95a0da04e8e62f64d2abf7708f7f03a7e275573144d3e3330119ad2c17217331b72a8fa351e1a9b28ace5a88d5a8ad07f9b5d699e9d234a745c3a156690c9f79076d12b4c49ec5a5f15a88529e349d835ce9c42df008cc8066ddf3c7934c063cc3528185a6ed4023013f2e427b2c2209ab0d2527ef6f1994dbfa449b912d44bb7007bb5e9ced4e1cb9af679e7350e7d68923a48ec3c61495be06d30df7d27fa9927853f9ad8a10582494c5a65ede6f710503746695a25e0c4af54cf947129d3a70d1340ef34e1439a3a7c242367b34f4535d5550f8ad968f1640fb91e8738cab0e66e05bee865267edc00cc17be0eff5ceb0280767c6fbc3285e9aba916eb7175e04053908043077f7212c3b5ef3195df33eeb28caf629a03777877efd3e0e8d2a819227098950fc7f9b19f1188b15d7b04bc6c31edb09995d52cf93942ada0de660bd9e301df7c5a31ae8384d45216e617dd6197f816d1e7e343f942e71fa561c8a9c3ea2d35347dc4605ca935337a61f7a8f294bd5b923cfa223fdd5b699f2351bcc2350c14f8ae221acb908a26aa90543b31eb11909682e8aa582d76af977992941d7db4204bac2e9cfdbad11cbbe9389a13856f3d21ce597f85b982358723996448345f7cdddd8a1497817742faf46de18d20f5be2383231982979f3abc83c03d1f5a9dffb43cd8411614d7a09840622a231fdc612ba2b34ab2df0ed4e1aab3c3f930a30d0c8362adf00f02f2d89c2e81e7cd9e49ee1577c7cb127e1b675bf583b16b106a208b665157b78626066121d80980464172ca728cc72138edbfdef0d1d05afb006130284e5b0b4fbe445565407546dbd1571294320520d7b9fb70f3b82beffafe540ca75a5cf133118dccc73bbe111850655618a721cec0685efd1ae1de00af48743f1292bf8a682be92a80cb5b5f68569954e837816c6a81c711618f778bc77befac2b7dd44b774ee55615d5631e0a7c26a97b5b16328b44d8f11140f48259716d35b13da7487bb2d04805fbe33f25f8ba8d71c3ddaa55b30a0b7023cb5bf5d789ce899cf0c7a61c935ece19195bbbd75b94aa1910934cd249cfc5a1b50bb0e1f364ff1db090c605f541d1fa2d436693c1abe822426138d6a9d5af7f711cbed1d42881abeb32d5bd509d315a834c34796b849b2f6feee040e6fcdf2796e1f56cc05edb3e947530284aaad171485cbaa742f719c3e761e6b1242495b8e10599e340d93567e7e4527d992f6fb644cb428501db751f4a20d22bf435e5e9bc46b618286f07a7c8ba802de353a98723bbc148ee596c1bdc0228190a4f366aae6d2ed4b0caf37bcc55ce7177eefed3177f92a963c2f024c0cb5b1ca0adffe9cf90533ef9fb19c8044b65f5a6c09a03d5a1ddfbae5767e11af2a21ae631f4c830ff542e96eca84d6467d100435e36a20eecec8c5a7268e1ca67774d9625e2db86dd7bf7837a31a7d3f1bff8cb7269d9272448e2a04ce484d742d65d298eb62a3e7cb034615bc07fa3b9a423cb07b72c9076dad265073214438a6d923120da40a5113be8b643d5b134479f88815926f2477343111f73a98e1d935a21d2fe6edaa1fb59b73aa5a519d2ea64bf4d52b68d867f4f77f8c890f08a660fc9d99eb3111155357310782cdcd6c056e89d160def79f29828e29aebced8f1a84ffcd42579d21ecc22790697c7172bb06c7e6f9fabb18a3e75f744fd089ca41fb9f26b971ab3027df6a60b2d4d15f3ece8d977e9bdfae7f0c88502a23b96c4b3b4e2c1b2681484fa523ac0fa277b832e8b3566fd50179955ed738f2439b9dee9a821b4ddbe3dd668dc3885e04d2d31a65c93ac0b55f98159a2a10ed547da5f3688f9dcb35e5b8095a618618a8bcd52f5a6952f8aa96954657ac1e32f9e2a097cbe3f3b2b8288865e6490ee9422dbf99700e10f39f3ac60f8878d605cf6447129d94856faec0df85536860e915a2ed3a94f63b4f88c2e188f2b5312d7e77b0bb10e94fcc237aa354123908a747c23501350670ae9366d55dea107ab979cbbc7114de56c4da4d17f5f5887bdc980440929e2e", @generic="dc68cc60f2992ca7f390ddce481142870b14b6d8f5f2cbce4fcff11a8e95211ebe605978fc22b2a677df82fd11ecf619604a10019279cba6af616e297189c48d623d5cdd8aba6dcd629939c28da7bc19bbd466e06b876f", @nested={0x70, 0xb, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="cc0439dbad6d9834044ed5983e098f0397c440d8052957e7f6debd899e7bba8cd72fc577a2084060b19c01c65ed3a6f6512b8d709c05e9a53373d36d3dac0d118588c01cf0820e7f479e54ba220220046db05836a83689d0530c2de29df26f8de4cf0772"]}]}, 0x14b0}, {&(0x7f00000000c0)={0x10, 0x1b, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@generic]}, 0x10}, {&(0x7f0000000100)={0x68, 0x41, 0x8, 0x70bd28, 0x25dfdbfb, "", [@typed={0x5, 0x2c, 0x0, 0x0, @str='\x00'}, @nested={0x4d, 0x32, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="35b836c9e66ef6b3e061af4f00846df336df3f1d9f01a986a178325fbcc655bb57f9784af2242cd2e3b4af7abc725c7cc75d0a4f56127def45180a2d70555464ff"]}]}, 0x68}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee00}}}], 0x78, 0x20000004}, 0x87abd1e010ee2774)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x2c, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}]}, 0x2c}], 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x600000, 0x108)

[ 2540.178608] loop5: detected capacity change from 0 to 79
[ 2540.191129] FAULT_INJECTION: forcing a failure.
[ 2540.191129] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2540.192470] CPU: 0 PID: 14439 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2540.193488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2540.194687] Call Trace:
[ 2540.194964]  <TASK>
[ 2540.195203]  dump_stack_lvl+0x8b/0xb3
[ 2540.195622]  should_fail.cold+0x5/0xa
[ 2540.196033]  prepare_alloc_pages+0x17b/0x500
[ 2540.196513]  __alloc_pages+0x131/0x4e0
[ 2540.196933]  ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10
[ 2540.197575]  ? lock_is_held_type+0xd7/0x130
[ 2540.198039]  ? lock_release+0x3b2/0x6f0
[ 2540.198467]  ? __slab_alloc.constprop.0+0x45/0x80
[ 2540.198984]  alloc_pages+0x1a0/0x2f0
[ 2540.199382]  ? mark_held_locks+0x9e/0xe0
[ 2540.199785]  new_slab+0x26a/0x360
[ 2540.200155]  ___slab_alloc+0x8ef/0xea0
[ 2540.200570]  ? alloc_workqueue+0x914/0xeb0
[ 2540.201031]  ? lock_is_held_type+0xd7/0x130
[ 2540.201493]  ? alloc_workqueue+0x914/0xeb0
[ 2540.201944]  __slab_alloc.constprop.0+0x45/0x80
[ 2540.202459]  ? alloc_workqueue+0x914/0xeb0
[ 2540.202910]  __kmalloc+0x359/0x440
[ 2540.203294]  alloc_workqueue+0x914/0xeb0
[ 2540.203722]  ? do_raw_spin_unlock+0x4f/0x210
[ 2540.204153]  ? _raw_spin_unlock+0x24/0x40
[ 2540.204601]  ? bd_prepare_to_claim+0x164/0x300
[ 2540.205086]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 2540.205620]  ? __fget_files+0x28d/0x470
[ 2540.206045]  ? loop_configure+0x62b/0x1950
[ 2540.206507]  loop_configure+0x6ec/0x1950
[ 2540.206941]  ? putname+0xfe/0x140
[ 2540.207322]  lo_ioctl+0x7c5/0x18b0
[ 2540.207699]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2540.208212]  ? loop_set_status_old+0x1b0/0x1b0
[ 2540.208660]  ? avc_ss_reset+0x180/0x180
[ 2540.209086]  ? __lock_acquire+0xbac/0x6120
[ 2540.209571]  ? selinux_inode_getsecctx+0x90/0x90
[ 2540.210080]  ? loop_set_status_old+0x1b0/0x1b0
[ 2540.210539]  blkdev_ioctl+0x362/0x7f0
[ 2540.210944]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2540.211443]  ? __x64_sys_ioctl+0x97/0x210
[ 2540.211880]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2540.212468]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2540.212988]  __x64_sys_ioctl+0x196/0x210
[ 2540.213421]  do_syscall_64+0x3b/0x90
[ 2540.213834]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2540.214405] RIP: 0033:0x7f2f73cf38d7
[ 2540.214806] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2540.216790] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2540.217606] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73cf38d7
[ 2540.218392] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2540.219165] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2540.219936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2540.220506] netlink: 'syz-executor.2': attribute type 28 has an invalid length.
[ 2540.220713] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2540.220738]  </TASK>
20:01:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x300, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x40}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x404c8c5)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x3079899cd1911feb}, 0x14}}, 0x0)

20:01:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:41 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0xf0ffff, 0x0, 0x0)

20:01:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 29)

20:01:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2540.252451] netlink: 'syz-executor.2': attribute type 28 has an invalid length.
[ 2540.256881] loop4: detected capacity change from 0 to 512
[ 2540.261690] EXT4-fs: Ignoring removed nobh option
[ 2540.266052] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2540.277529] loop6: detected capacity change from 0 to 512
[ 2540.287861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
20:01:41 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x2000000, 0x0, 0x0)

20:01:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40007, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

[ 2540.329216] loop5: detected capacity change from 0 to 79
20:01:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006001c00660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2540.341661] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2540.344697] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
20:01:41 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2540.387180] loop5: detected capacity change from 0 to 79
20:01:41 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x11, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000380)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}}, 0x4040800)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65c6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x482f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe2005f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcca3}]}, {0x4}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3e766d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x389a739d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4209ec1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5c94b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d03d164}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1795}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426027d5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d48a5d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8f5a09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ba1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8581}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x796f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe6d309}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ef4}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6061b7cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b9df205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11155607}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2872}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f6ecf58}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb52c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13429eee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a81d0c3}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x81}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008804)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x3079899cd1911feb}, 0x14}}, 0x0)

20:01:41 executing program 2:
mknod(&(0x7f0000000180)='./file0\x00', 0x80, 0x800000)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '#.^,,#\x00'}, &(0x7f0000000100)='[\x00', 0x2, 0x2)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file2\x00'})

[ 2540.458388] loop4: detected capacity change from 0 to 512
[ 2540.459878] EXT4-fs: Ignoring removed nobh option
[ 2540.488022] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2540.496890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
20:01:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006002000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:41 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 30)

[ 2540.587109] FAULT_INJECTION: forcing a failure.
[ 2540.587109] name failslab, interval 1, probability 0, space 0, times 0
[ 2540.588377] CPU: 0 PID: 14470 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2540.589382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2540.590561] Call Trace:
[ 2540.590826]  <TASK>
[ 2540.591064]  dump_stack_lvl+0x8b/0xb3
[ 2540.591475]  should_fail.cold+0x5/0xa
[ 2540.591874]  ? create_object.isra.0+0x3a/0xa20
[ 2540.592349]  should_failslab+0x5/0x10
[ 2540.592751]  kmem_cache_alloc+0x69/0x490
[ 2540.593203]  create_object.isra.0+0x3a/0xa20
[ 2540.593665]  ? kasan_unpoison+0x23/0x50
[ 2540.594107]  __kmalloc+0x25b/0x440
[ 2540.594519]  alloc_workqueue+0x914/0xeb0
[ 2540.594969]  ? do_raw_spin_unlock+0x4f/0x210
[ 2540.595461]  ? _raw_spin_unlock+0x24/0x40
[ 2540.595921]  ? bd_prepare_to_claim+0x164/0x300
[ 2540.596415]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 2540.596973]  ? __fget_files+0x28d/0x470
[ 2540.597402]  ? loop_configure+0x62b/0x1950
[ 2540.597870]  loop_configure+0x6ec/0x1950
[ 2540.598338]  ? putname+0xfe/0x140
[ 2540.598727]  lo_ioctl+0x7c5/0x18b0
[ 2540.599122]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2540.599652]  ? loop_set_status_old+0x1b0/0x1b0
[ 2540.600151]  ? avc_ss_reset+0x180/0x180
[ 2540.600584]  ? __lock_acquire+0xbac/0x6120
[ 2540.601085]  ? selinux_inode_getsecctx+0x90/0x90
[ 2540.601610]  ? loop_set_status_old+0x1b0/0x1b0
[ 2540.602113]  blkdev_ioctl+0x362/0x7f0
[ 2540.602537]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2540.603059]  ? __x64_sys_ioctl+0x97/0x210
[ 2540.603506]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2540.604116]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2540.604639]  __x64_sys_ioctl+0x196/0x210
[ 2540.605095]  do_syscall_64+0x3b/0x90
[ 2540.605506]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2540.606072] RIP: 0033:0x7f2f73cf38d7
[ 2540.606487] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2540.608509] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2540.609335] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73cf38d7
[ 2540.610111] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2540.610907] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2540.611685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2540.612464] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2540.613259]  </TASK>
[ 2540.640943] loop6: detected capacity change from 0 to 512
[ 2540.666981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2554.004459] loop5: detected capacity change from 0 to 79
[ 2554.022262] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
20:01:54 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 31)

20:01:54 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/117, 0x75)

20:01:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006006800660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40008, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:54 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x5000000, 0x0, 0x0)

20:01:54 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40007, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:54 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x3, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x1, 0x270bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x84)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000000000000000000020000"], 0x14}}, 0x0)

[ 2554.042836] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2554.063629] loop4: detected capacity change from 0 to 512
[ 2554.070089] loop2: detected capacity change from 0 to 512
20:01:54 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006048000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

[ 2554.074467] FAULT_INJECTION: forcing a failure.
[ 2554.074467] name failslab, interval 1, probability 0, space 0, times 0
[ 2554.077572] CPU: 1 PID: 14497 Comm: syz-executor.6 Tainted: G        W         5.17.0-rc3-next-20220209 #1
[ 2554.080167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2554.083071] Call Trace:
[ 2554.083517] EXT4-fs: Ignoring removed nobh option
[ 2554.083655]  <TASK>
[ 2554.083670]  dump_stack_lvl+0x8b/0xb3
[ 2554.085512]  should_fail.cold+0x5/0xa
[ 2554.086456]  ? alloc_workqueue_attrs+0x38/0x80
[ 2554.087507]  should_failslab+0x5/0x10
[ 2554.088413]  kmem_cache_alloc_trace+0x55/0x3c0
[ 2554.089462]  alloc_workqueue_attrs+0x38/0x80
[ 2554.090516]  alloc_workqueue+0x939/0xeb0
[ 2554.091405]  ? do_raw_spin_unlock+0x4f/0x210
[ 2554.092374]  ? _raw_spin_unlock+0x24/0x40
[ 2554.093299]  ? bd_prepare_to_claim+0x164/0x300
[ 2554.094286]  ? workqueue_sysfs_register+0x3e0/0x3e0
[ 2554.095392]  ? __fget_files+0x28d/0x470
[ 2554.096264]  ? loop_configure+0x62b/0x1950
[ 2554.097185]  loop_configure+0x6ec/0x1950
[ 2554.098102]  ? putname+0xfe/0x140
[ 2554.098905]  lo_ioctl+0x7c5/0x18b0
[ 2554.099692]  ? avc_has_extended_perms+0x7e8/0xeb0
[ 2554.100754]  ? loop_set_status_old+0x1b0/0x1b0
[ 2554.101761]  ? avc_ss_reset+0x180/0x180
[ 2554.102641]  ? __lock_acquire+0xbac/0x6120
[ 2554.103644]  ? selinux_inode_getsecctx+0x90/0x90
[ 2554.104768]  ? loop_set_status_old+0x1b0/0x1b0
[ 2554.105851]  blkdev_ioctl+0x362/0x7f0
[ 2554.106759]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2554.107893]  ? __x64_sys_ioctl+0x97/0x210
[ 2554.108874]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2554.110163]  ? blkdev_common_ioctl+0x16b0/0x16b0
[ 2554.111282]  __x64_sys_ioctl+0x196/0x210
[ 2554.112238]  do_syscall_64+0x3b/0x90
[ 2554.113124]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2554.114302] RIP: 0033:0x7f2f73cf38d7
20:01:55 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)

[ 2554.115158] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2554.119328] RSP: 002b:00007f2f71268f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2554.121073] RAX: ffffffffffffffda RBX: 00007f2f73d3d970 RCX: 00007f2f73cf38d7
[ 2554.122723] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2554.124347] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2554.125976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2554.127633] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2554.129296]  </TASK>
[ 2554.129773] EXT4-fs: Ignoring removed nobh option
[ 2554.138370] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (19 blocks)
[ 2554.165939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 2554.168042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
20:01:55 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@stripe}]}) (fail_nth: 32)

20:01:55 executing program 2:
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xf4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x2000c040)

20:01:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40009, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@nobh}, {@stripe={'stripe', 0x3d, 0x40}}, {@noload}]})

20:01:55 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x6000000, 0x0, 0x0)

20:01:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x40}}]})

20:01:55 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/117, 0x75)

[ 2557.383050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2557.399178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2557.401521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2557.406318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2557.410171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2557.411984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2557.563549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2557.567845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2557.572120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2557.576501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2557.581006] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2557.584782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2557.625338] Failed to initialize the IGMP autojoin socket (err -2)
[ 2557.703995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2557.711068] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2557.712744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2557.716756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2557.718630] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2557.720504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2557.772089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2557.774569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2557.776539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2557.779434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2557.781321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2557.783036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2557.826627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2557.845705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2557.849508] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2557.851162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2557.854455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2557.856314] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2557.873648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2557.878163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2557.904387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2557.937173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2557.939445] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2557.944587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2557.946408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2557.950775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2557.952750] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2557.974500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2557.978227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2557.989754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2558.030242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2558.030873] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.048116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2558.055145] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2558.059317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2558.087291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2558.090253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2558.299977] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.545617] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.553315] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.615620] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.664326] Failed to initialize the IGMP autojoin socket (err -2)
[ 2558.712119] Failed to initialize the IGMP autojoin socket (err -2)
[ 2559.477990] Bluetooth: hci0: command 0x0409 tx timeout
[ 2561.479588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2561.483325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2561.485867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2561.492070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2561.495663] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2561.497456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2561.526081] Bluetooth: hci0: command 0x041b tx timeout
[ 2561.637617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2561.648309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2561.664394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2561.674578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2561.676587] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2561.680328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2561.687838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2561.688213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2561.692987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2561.700052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2561.708337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2561.728527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2561.729927] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2561.731111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2561.759093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2561.763092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2561.764108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2561.790743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2561.794795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2561.796336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2561.797621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2561.839636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2561.841238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2561.842822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2561.916408] Failed to initialize the IGMP autojoin socket (err -2)
[ 2562.169002] Failed to initialize the IGMP autojoin socket (err -2)
[ 2562.188216] Failed to initialize the IGMP autojoin socket (err -2)
[ 2562.194791] Failed to initialize the IGMP autojoin socket (err -2)
[ 2562.314823] Failed to initialize the IGMP autojoin socket (err -2)
[ 2563.574097] Bluetooth: hci0: command 0x040f tx timeout
[ 2563.638026] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 2563.661463] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 2564.539273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2564.541625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2564.543877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2564.547682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2564.558070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2564.559774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2564.744518] Failed to initialize the IGMP autojoin socket (err -2)
[ 2564.934518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2564.941102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2564.943059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2564.946558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2564.948522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2564.950524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2565.050366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2565.052680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2565.055570] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2565.060799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2565.064261] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2565.065854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2565.134815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2565.136356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2565.137721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2565.139627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2565.140840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2565.142004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2565.229926] Failed to initialize the IGMP autojoin socket (err -2)
[ 2565.388822] Failed to initialize the IGMP autojoin socket (err -2)
[ 2565.415196] Failed to initialize the IGMP autojoin socket (err -2)
[ 2565.621961] Bluetooth: hci0: command 0x0419 tx timeout
[ 2566.616875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2566.621409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2566.623705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2566.636271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2566.639711] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2566.641234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2566.896704] Failed to initialize the IGMP autojoin socket (err -2)
[ 2567.029956] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 2567.124443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2567.131073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2567.133443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2567.139045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2567.141535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2567.143624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2567.445685] Failed to initialize the IGMP autojoin socket (err -2)
[ 2567.759513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2567.763939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2567.765643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2567.770396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2567.773413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2567.775855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2567.821264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2567.824665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2567.826319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2567.829152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2567.830950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2567.832233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2567.897512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2567.899962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2567.901792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2567.905588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2567.908347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2567.909692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2568.133704] Failed to initialize the IGMP autojoin socket (err -2)
[ 2568.153196] Failed to initialize the IGMP autojoin socket (err -2)
[ 2568.202987] Failed to initialize the IGMP autojoin socket (err -2)
[ 2568.501955] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 2569.206744] Bluetooth: hci2: command 0x0409 tx timeout
[ 2569.416652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2569.425459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2569.428716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2569.431870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2569.433706] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2569.435771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2569.619612] Failed to initialize the IGMP autojoin socket (err -2)
[ 2569.680590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2569.683952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2569.686595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2569.763426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2569.766452] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2569.767484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2570.057343] Failed to initialize the IGMP autojoin socket (err -2)
[ 2571.080881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2571.082132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2571.090318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2571.091383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2571.093402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2571.094476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2571.108318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2571.108396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2571.112487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2571.113805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2571.116505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2571.117650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2571.254013] Bluetooth: hci2: command 0x041b tx timeout
[ 2571.440643] Failed to initialize the IGMP autojoin socket (err -2)
[ 2571.446675] Failed to initialize the IGMP autojoin socket (err -2)
[ 2571.894969] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 2572.725979] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 2573.109973] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 2573.302081] Bluetooth: hci2: command 0x040f tx timeout
[ 2574.065535] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2574.068805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2574.073516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2574.076611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2574.080150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2574.081752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2574.199970] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 2574.231268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2574.233837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2574.235580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2574.249125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2574.260256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2574.271340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2574.399120] Failed to initialize the IGMP autojoin socket (err -2)
[ 2574.518071] Bluetooth: hci4: Opcode 0x c03 failed: -110
[ 2574.622172] Failed to initialize the IGMP autojoin socket (err -2)
[ 2575.161291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2575.168641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2575.170830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2575.174235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2575.177350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2575.179083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2575.298928] Failed to initialize the IGMP autojoin socket (err -2)
[ 2575.351855] Bluetooth: hci2: command 0x0419 tx timeout
[ 2575.991190] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 2576.769526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2576.772572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2576.774468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2576.777862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2576.779725] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2576.782656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2576.953824] Failed to initialize the IGMP autojoin socket (err -2)
[ 2577.018262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2577.022717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2577.024610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2577.034200] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2577.036655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2577.043162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2577.147104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2577.150149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2577.152241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2577.157113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2577.159288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2577.161215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2577.497038] Failed to initialize the IGMP autojoin socket (err -2)
[ 2577.544685] Failed to initialize the IGMP autojoin socket (err -2)
[ 2577.654705] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 2577.668786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2577.672178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2577.677116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2577.686045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2577.727582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2577.731043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2577.733810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2577.737170] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2577.737452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2577.741376] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2577.743380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2577.746595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2578.044936] Failed to initialize the IGMP autojoin socket (err -2)
[ 2578.126422] Failed to initialize the IGMP autojoin socket (err -2)
[ 2578.501497] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2578.508156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2578.511411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2578.516432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2578.519680] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2578.523350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2578.661405] Failed to initialize the IGMP autojoin socket (err -2)
[ 2578.805942] Bluetooth: hci1: command 0x0409 tx timeout
[ 2578.997973] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 2580.304771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2580.308127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2580.310145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2580.318081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2580.323160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2580.325125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2580.568376] Failed to initialize the IGMP autojoin socket (err -2)
[ 2580.822925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2580.825980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2580.828367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2580.830023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2580.831741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2580.833361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2580.837990] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2580.839613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2580.842559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2580.844086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2580.845955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2580.847458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2580.855004] Bluetooth: hci1: command 0x041b tx timeout
[ 2581.050501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2581.053550] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2581.055426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2581.060330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2581.062602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2581.064672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2581.217154] Failed to initialize the IGMP autojoin socket (err -2)
[ 2581.270482] Failed to initialize the IGMP autojoin socket (err -2)
[ 2581.441546] Failed to initialize the IGMP autojoin socket (err -2)
[ 2582.517984] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 2582.582954] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 2582.901971] Bluetooth: hci1: command 0x040f tx timeout
[ 2582.915976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2582.922719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2582.925113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2582.931095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2582.933117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2582.935115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2583.165827] Failed to initialize the IGMP autojoin socket (err -2)
[ 2583.350952] Bluetooth: hci6: Opcode 0x c03 failed: -110
[ 2583.875110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2583.877554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2583.879772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2583.883478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2583.885980] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2583.887622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2584.173720] Failed to initialize the IGMP autojoin socket (err -2)
[ 2584.950012] Bluetooth: hci1: command 0x0419 tx timeout
[ 2585.731524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2585.733853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2585.735532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2585.740424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2585.742515] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2585.744145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2585.919294] Failed to initialize the IGMP autojoin socket (err -2)
[ 2586.165983] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 2586.168465] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 2586.998201] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 2587.318028] Bluetooth: hci4: Opcode 0x c03 failed: -110
[ 2587.671327] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 2588.282592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2588.285307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2588.295778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2588.300944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2588.304005] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2588.305565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2588.482117] Failed to initialize the IGMP autojoin socket (err -2)
[ 2588.599963] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 2588.623349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2588.626171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2588.630583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2588.635156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2588.637872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2588.642006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2588.683636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2588.688614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2588.690579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2588.698807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2588.702863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2588.706433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2588.758746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2588.770424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2588.785102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2588.795673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2588.803529] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2588.818173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2589.104826] Failed to initialize the IGMP autojoin socket (err -2)
[ 2589.274165] Failed to initialize the IGMP autojoin socket (err -2)
[ 2589.327322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2589.333492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2589.339219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2589.356600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2589.382391] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2589.384326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2589.390352] Failed to initialize the IGMP autojoin socket (err -2)
[ 2589.636618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2589.642228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2589.644322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2589.647298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2589.649179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2589.650766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2589.739943] Failed to initialize the IGMP autojoin socket (err -2)
[ 2589.922674] Failed to initialize the IGMP autojoin socket (err -2)
[ 2590.325949] Bluetooth: hci0: command 0x0409 tx timeout
[ 2590.467993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2590.475625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2590.477417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2590.480403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2590.482044] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2590.483381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2590.603267] Failed to initialize the IGMP autojoin socket (err -2)
2022/02/10 20:02:31 executor 6 failed 11 times:
executor 6: exit status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 16: Device or resource busy)
loop exited with status 67

VM DIAGNOSIS:
20:02:31  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000fe0 RCX=ffff88803211b320 RDX=ffff888040743580
RSI=ffff888040743580 RDI=0000000000000003 RBP=ffff88803211c2ff RSP=ffff8880395efbe8
R8 =0000000000000010 R9 =ffff88803211c2ff R10=ffffffff8177e9cf R11=0000000000000001
R12=ffff88803211b320 R13=ffff88803211c300 R14=ffff88803211b320 R15=ffffffff858c7800
RIP=ffffffff81433f88 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7032935540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d828f0f4c8 CR3=000000002bdba000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f
YMM01=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f
YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff
YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffea00010a3834 RCX=0000000000000003 RDX=0000000000000000
RSI=ffff88803fee1ac0 RDI=0000000000000003 RBP=0000000000000003 RSP=ffff8880309d78a8
R8 =0000000000000000 R9 =ffffea00010a3837 R10=ffffffff815b0d98 R11=0000000000000001
R12=dffffc0000000000 R13=00000000000001fb R14=ffffea00010a3800 R15=ffff88802f470fe8
RIP=ffffffff8143375c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd99b487fb8 CR3=0000000005026000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 636578650a3a7365 6d69742031312064
YMM02=0000000000000000 0000000000000000 6174732074697865 203a3620726f7475
YMM03=0000000000000000 0000000000000000 203a4c4941465a59 530a373620737574
YMM04=0000000000000000 0000000000000000 45534e5554286c74 636f69203a6e7574
YMM05=0000000000000000 0000000000000000 6528200a64656c69 6166202946464954
YMM06=0000000000000000 0000000000000000 2065636976654420 3a3631206f6e7272
YMM07=0000000000000000 0000000000000000 7973756220656372 756f73657220726f
YMM08=0000000000000000 0000000000000000 2074697865203a36 20726f7475636578
YMM09=0000000000000000 0000000000000000 4941465a59530a37 3620737574617473
YMM10=0000000000000000 0000000000000000 5554286c74636f69 203a6e7574203a4c
YMM11=0000000000000000 0000000000000000 0a64656c69616620 294646495445534e
YMM12=0000000000000000 0000000000000000 69766544203a3631 206f6e7272652820
YMM13=0000000000000000 0000000000000000 6220656372756f73 657220726f206563
YMM14=0000000000000000 0000000000000000 6465746978652070 6f6f6c0a29797375
YMM15=0000000000000000 0000000000000000 0a37362073757461 7473206874697720