0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:38:57 executing program 6: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:38:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003e40), r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000002e40)=""/110) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x40) socket$nl_audit(0x10, 0x3, 0x9) [ 861.693922] loop3: detected capacity change from 0 to 4 [ 861.718125] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:39:13 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:13 executing program 6: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003e40), r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000002e40)=""/110) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x40) socket$nl_audit(0x10, 0x3, 0x9) 18:39:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x141, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x2}, 0x1114, 0x4, 0x7, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9ede, 0x0, 0x80}, r1, 0x7, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 18:39:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:39:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ff", 0x37, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:13 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r2, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r2, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r3}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r1, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r1, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}], 0x0, "3e3b3204ece552"}) r392 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) r393 = epoll_create(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r395 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r392, 0xd000943d, &(0x7f000005d7c0)={0x40, [{r309, r15}, {r290, r26}, {r220, r19}, {r12, r368}, {r23, r160}, {r379, r318}, {r266, r39}, {r305, r223}, {r377, r391}, {r286, r349}, {r83, r52}, {r65, r384}, {r193, r85}, {r272, r218}, {r286, r187}, {r347, r32}, {r279, r358}, {r338, r248}, {r361, r188}, {r71, r126}, {r131, r126}, {r95, r248}, {r97, r57}, {r369, r40}, {r232, r281}, {r171, r139}, {r47, r267}, {r270, r374}, {r255, r145}, {r162, r119}, {r176, r179}, {r294, r348}, {r111, r135}, {r234}, {r263}, {r209, r254}, {r282, r45}, {r191, r25}, {r251, r57}, {r1, r147}, {r189, r45}, {r354, r155}, {r74, r82}, {r295, r170}, {r253, r72}, {r247, r315}, {r152, r319}, {r181, r233}, {r301}, {r253, r311}, {r120, r322}, {r342, r368}, {r257, r96}, {r329}, {r202, r46}, {r181, r190}, {r367, r100}, {r6, r137}, {r154, r206}, {r99, r269}, {r120, r334}, {0x0, r308}, {r210, r378}, {r270, r302}, {r10, r70}, {r174, r35}, {r257, r33}, {r76, r75}, {r122}, {r152, r141}, {r130, r321}, {r28, r216}, {r94, r250}, {r104, r59}, {r390, r21}, {r320, r139}, {r140, r346}, {r224}, {r63, r341}, {0x0, r233}, {0x0, r17}, {r327, r198}, {r86, r231}, {r288, r57}, {r342}, {r316, r213}, {r99, r179}, {r142, r50}, {r331, r61}, {r118, r315}, {r34, r54}, {r390, r52}, {r151, r318}, {r174, r366}, {r102, r48}, {r373, r321}, {r381, r311}, {r71}, {r60, r24}, {0x0, r40}, {r42, r314}, {r237, r85}, {r104, r38}, {r270, r3}, {r1, r46}, {r151, r215}, {r241, r248}, {r217, r343}, {0x0, r22}, {r342, r273}, {r220}, {r199, r240}, {r288, r387}, {r345, r40}, {r340, r353}, {r227, r376}, {r220, r112}, {r388, r333}, {r312, r88}, {r386, r93}, {r268, r298}, {r10, r64}, {0x0, r61}, {r375, r211}, {r169, r119}, {r16}, {r20}, {r299}, {0x0, r56}, {r217, r25}, {r259, r387}, {r367, r298}, {r184, r226}, {r284, r185}, {r251}, {r149, r192}, {0x0, r27}, {r251}, {0x0, r384}, {r156, r287}, {r342}, {r224, r204}, {r189, r330}, {r345, r238}, {r168, r90}, {r323, r100}, {r128, r173}, {r186, r11}, {r375, r324}, {r263, r287}, {r102, r54}, {0x0, r41}, {r286, r370}, {r303, r235}, {r239, r147}, {r363, r161}, {r168, r387}, {r344, r73}, {r159, r218}, {r263, r115}, {r207, r35}, {r307, r353}, {0x0, r300}, {r386, r119}, {r152, r213}, {r16, r339}, {r42, r296}, {r86, r145}, {r383, r252}, {r127, r333}, {r340}, {r255, r36}, {r127, r285}, {r7, r248}, {r292, r391}, {r10, r368}, {r297, r221}, {r101, r231}, {r138, r107}, {r371, r48}, {r202, r153}, {r37, r380}, {r136, r56}, {r168, r278}, {r158, r66}, {0x0, r337}, {r134, r68}, {r342, r167}, {r247, r112}, {r152, r271}, {r186, r283}, {0x0, r380}, {r266, r116}, {r284, r382}, {r209, r372}, {r253, r265}, {r29, r50}, {r62, r235}, {r261, r116}, {r355, r291}, {r127, r296}, {r144, r27}, {r186, r13}, {r162, r230}, {r214, r119}, {0x0, r285}, {r197, r348}, {r325, r280}, {r243, r372}, {r202, r88}, {r146, r267}, {r239, r306}, {r176, r98}, {r234, r160}, {r307, r287}, {r199, r256}, {r1, r208}, {r44, r204}, {r193, r238}, {r69, r72}, {r150, r304}, {r87, r215}, {r184, r61}, {r71, r310}, {r4, r19}, {0x0, r198}, {r89, r293}, {r295}, {r124, r93}, {r60, r163}, {r274}, {r140, r57}, {r113, r85}, {r133, r192}, {r344, r43}, {r94, r356}, {r99, r285}, {r74, r185}, {r111, r364}, {r363, r269}, {r122}, {r101, r121}, {0x0, r374}, {r270, r157}, {r294, r98}, {r295}, {0x0, r119}, {r2, r61}, {r210}, {r201, r291}, {0x0, r206}, {r335, r258}, {r154, r105}, {r106, r293}, {r272, r216}], 0x1, "93970390d0be8e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r393, 0xd000943e, &(0x7f000005e7c0)={r80, r279, "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", "af6d09ee966d7fa429baa0a0857f3d2f230d1290b6a0afc6cd2bd923fc17737d9fc14e3d30753825921a3e9646b1f9ee6096fee67791d67fbcab2cb69f40aa00caed5a1ca098dbad10c9c604214b8d94b176b3f01f202679aa439cbafc293136f5bc63a661f3defd502405edd90a7b9c43067286778113ee9261ebe35a71963bb7ce48032f9c9f4a4b484222b138cf3a44a38225ff75b90af9f7d92854efc45bf97cbed5ddf4f67856f8ee5281af636e2055f331f37668ed994b0f17af4257949cd6e3b572a47885acdaea96f287fcc8e5902885d0c4172800ba859959e957b7706fd737f308629fd4de119507dfaedafbc2d91f1b4c9a9d41904bb79f90d6a9730a4a040ce49ec77ae077140c82b9ca273ec08bb1fc92ac655415e9dbf3386abe83eddfebbf323b28eabcdfe50f935855492463d0c779c8f551a948da64c60e37b714903ff65efe22e63747fa3abddf8b8968fa02a44d1dc901296633c8b2478317f5b0fc2bcba6b857d0c17338f54e0632bdef154d09810f1069d23d212ff8373e8ea2dfc9234a0af15ee414d5eb39429ef7362e90c4edb84cceeef48e189985ef360f309dc1ccb45cd8634b151190e04d232d7c6b2c33180b3cb9d9a135babf17a883e6ee3b467babd4788a938f631c7030302a3aa10489df76538d8570a9095e1ef44943ab56a31023e11a3a98952d985ec9758b0ce2bd796bfc96bb61fc9f0dd4052420947a837a2d7620216d0b2c37f944110b430102054f4d143a987ef4cacfdb4f1a52ed9b88465b96c315c3b8a0dee242da2b59960c5907d53014f96e6cbaec7703553662e37a54249aa8134ea2e91ae7e72cc879b46805e426b96c4c9477ff68824977d769a1afe670f7d65595a7ac50acf299d1917bcdd9e7b5950f5570ed654e729c9c4ea7b084360f908f36250634b549dff636a8fe25bfd5b6269cba98ce0a3ed4b77f51f03a8122c90f38df562f56176c0f5116d58c7c4c064d43f484215a687d571df816c4543d79c0329e2005f9dccea7678f2ee921cf463164745fcdca84ec4dcc02288c5cbfb54d8b831d6a034ea44e7d3978d0df969212ec6d3cbe6b0363daacccedabf92a8151923fc77c8d0e2dc69291dcb978b509e20fed6be88991efdced9c42d410037e0e1d4f9f9f664253a82122a044ee7a86328fd7d2eaa479ff37a7a160e6840a10bb488bd53812a096c7ae9a1ae5fb431c1e98a7f6ff85aea7a8f1c975879ef1e1ab0d2028fcfa2eaecbed537ca31edbb65a4375926c83e71b838e7061dc6d400adf34b941b5df1768ee459681154a454748a3c665fc93b46cc52d7ea238e39e603f8e97bc3d1b2708d6e1e684b8edc9a6e104e8db82fbfdcfc4df128a0e82ca53390a320ad22adc788ec1f03637f44d75b84fd57dea2944e7c0064ca403d45a11e4299ba2f092b83d381cbaf6b6a4f544a4839bb4bb2ccf030027e0858de17076e03619e9a7ea9e1b6e1766a58ee1b4ea99fa1625b5b7d389d99a0a1b7048dcd27a124017a58a8e1ace534129c745ba0cdc2c1299e34abce664cc023ddbdd84a81e91594c5ef7873779a2a3381c4780aa1d8f4db0f5cc8d2310f425bb3b5206705417dcb8014287b1acf83eddaf201ce5ac7ae86f434ee8c9371248ea40b8e193563925b76c97dc7d27dd954691f166af77992031440a167a4b689abb1bbe5d93e931beae4c285b2d212e3263c9f250ebf5b68e003e8692ff717790ccf4afc31f3c88b139887594ce603facec71c317daa9a9f7985944c779c63572746d4784dcabdd550a3234083a1d68057263d88b80ae9fc269ac2f666fbc8a0cf578d96d047d83dacb0ad398de5417fc6d02dae8bdb9d5bb3b441068f639672e2afacc5b751c371a1b1f92857bf168c9f33c3f8f0e37ee720ee22a76dbe7d07bcd8686fb0798604a7d9c31ef0b639e44d21c716f96948bcd17b7625b62e345904f3246c9d23c5c57c93d03fa53b6a1d1de34f15ce8804182c5429331649e483a13edb29e2a03fc1a88d586a191ea59b28dd8ba3f14232e0c105ce6961425c83d7cca9c0121f7036e5944e5a1dd28e6827fb65fdb7b2c9028bd34facf041feaa3ba01bad3fcf816df8afa6c345eecc5f433ebd0661e62b21b1dbd6f90185dd1a08959b2cef60e63eaad7870acb5bf5db788beb28ecc807243529de6a0ce689c0a3e550139ca0f465bff85d3373d50a20ec4e242804f09665f5dc607a25dbe67a20af0cc2d21c7ecdf8d652188f6b8299d651e474113c5f2b40544637946823e0ccdc897517437d29062a09a67aff7a2c732717bcb9f8b341406aa6b34f0324423d2b48de74fcdae757502567dc9794aeb1e31e63162cc52820c81108dd3eec0bd412710c3d7fbc059284fd1ae00b7df720159a8bf7b571595fdd3926c055dec968d6a5c625da67c7a6a08e41e10b7c8015ac34b461fb145b36425d109b1d14da2bed2bccf2f9308492affbcab7cfd5dc753da1ea07f76e08622d8e3366b7135af34eccd64bc57876a88b59aedb7f5f317327bbf61458f2e942fb78eeaf81e5918d3461c4678fe3e208f7bf914c1fd9bffd330a5ec2f819d469a8517d3a9b4e16e0374a661bcd8bba0e7d25bd6039c6b5314ce07a6d6cbbf8538d22c9a4f2c2b9d0aada324ecf11bfce6394d9e96ae87b070a65318ff13fa3b3d92070a23390397400bde80482365ff1fd9424a88072fb225ac9d4aa12488e9b9866a4db731a874e5ea8c5c4d99e76ea29e078c7f3cb8b4fa81b61efac56dcf3c52c6ad95d133acf98754af58dba192322ec29dd0a3a2bfb3ffd9f3f7e9749432cc63460255471833a08c1d827c080ff1682025bf53a22bd6af2fa5507116ce8cbd312049c53770b5067949a37b91695ba8797421c524c287ef2be287ea6397c66f4cae1280336fe1ce7ce15849fd88d914596b13dea1d9ce322198720926fc558a4bfd33aba056018e04a1e54661284106b976bf6ea91459d3dac4c36ff3d95e57637434d53df4adc69cfeb539b56cfda97fe259ace4b35bbd3b6fa45f346e99cdda1c0733b9c60571e01e28456ef9c010c9445ac547c879838b2e8aaf83c2c6277c9f08efaa39a2f2d9be128d04164fdb0e6106e0cf0d932d2ca0223f4eecb205184d0ebd49857d91d22a56cd56d06fd6ba75a53798651d7452f43a8df0a73c9e63b2d015c6747441e729c0a55ee997894a2dc04c4065491ad1efe9d5fe159001f6f4148011e452e77306a111ca3e1e5e6c31d8293839c95dc5f4a0b9118f3cee157fd20e5bb22ce45289880465cd9faa8d5c65db828d322c159b939efc62aeaa1d0a3d60815fab8b02502b7b5350fb1135c8fb9173f4301f2e8418c6cc8300243d25e8f51ede012737971b4bd97c8ef8451b6927ec706f6c27e28de4cee5248b947700b3c5b7f97803b36ee37fc3e992e29b19a2328df6ab5e0fa0c58b087ed8e472f93c344b3c20e44806454f6b9522fd7f3c7443be08aa99b089d2123de87c755e8e317ddaba365219913d3b352600a4affc966eb92bd1aad23e5009936276e0ddafa9cfd970fcf59b17a08c0f817fe8ebbaffc7ec20118b884e488f186f01d7015e68c02650d6761f89d143a0b4988e7530cc340b6609066ecb0ee00691e40b02020bd531c01e0c1ed0424c43beff8ce52274cd0fb106d74972fc98989903f18fb2acf3b52ebf4a97189badedcaced0dc5ee08c570fda3152c24149df0e2d327f8d320228faaa68d100aa2f282c7a995eea0cb7a6ce2c09bf827fe3a0ebdaa7579c9d96ce3eec4e7f2b8b6ca7f97df7a756a18c94ea1b1076bd95dfd44d35901647baf8331bfb4d435501edcd0f384fa3e1a2508d1e17e4a8b7f91faec2f89631557a69f084a4a84ee93f3e0fe7675ecf0a72e4d997f6a6f678c6abd502001cabe2b55c742b0befd217ad49caa42cba3ba3f771495cfc2a804b9b635336fd1ff1db64386adefad09e15525fdef37e63dde12e7654537c76995fd7bdf6a6cce69c337a52b29d39345d3b22df4fdd4b5ab03a9b71f3a6131247abc0ea89e121b25cfae9e84250982f97efd1e63021e330b1dbf2123dcf00ae336c16b13eefc0c3e45d6fc5df3f83e0d2638d80683d7b5f0aa8c66bcb85bf9e098a11396c1641f96c6c46bee48a20b591c3e74c834a79360c331e2ac8fb5388e11e28ed1a5116883408d701381fec6c3bf110e6dbe683fd8ba7baae2953497f66092285eef24d5d3799ff8152b556ae00f39076ada60714005841ead85dab873632b724639b7bdf5f83cf29de519baa14daf78a9567e49c364e1442531f891b9098a3b6c8a2889eb477d742ae69404530c69b06f875347d5c651f23401477ab5a702890475b69dcf10f5f08318aa59508d69b0ce4f64b7be233a1337d83470b72ad44b542c6be2909590974e1ef9baf2ae738d06b08ca0d6c5bc2d60954dc207de07fe95531f9e58f1a9c196214461f3705b0b765d77e36f3b1927b2be845f1ace14394114c497d62167ef72cea91de6f4cd754f76ba2271ce13a556fea626a288d5c80e6863c08e8b927d3588745eba07dcb16b8e822f3e615942f1112513f2e7d3bf0f40818038bbea9e3a8d3bc1b7f10394ab2688cab484350a64f7ebe15307fd73061874d5fb09def1029c5ab2bb3c19e5f1ee092223501106313f9621167a9baccd8caf7fae3f046485e4e6dcd71928570c500f22c7f56c86560c54de9fc2ae549c8f10c66d2d6ce0fa7e5bdc6959aaf3877afb939e763f338a027319c0ece82700ee413f75d988f165f897319221ff70e596e81facc01ca52d1de1a1cfac54a8b076828bbe9d1942db404247a36d0405dddd495d6c6bd90f16cdf8bdf7f0fc3a65e32bd1b696e034418641ca22dcec093715da7f9b7fd87719d40fcd9892f376036181dfe2205ca7da6081afa59f9738ca2cab6ede4dbcb64a358367958b72e0a0678ab065056da746e94f323a3bbfda32e6f6722ac512a75686872c5a69149a561f462f8188e02343170344fd818cc5a7bdabe5a92cec7b70b7d4d8c49dcafb8b03568c72a0c03488300659e03789095b25bc883a29e9f709ba7ced3d794177462135e2ac57fd81b1ab7744edd8da092efd0050cbf13c1a76d536df3f84dbf12d4f28e19bcb78dd28a3bd24577065917d8f380494572dbe236e8a503b1c6d5c0b1e20c3572a34378bb12234ae296cc43013be6852108f4d5412cb07feb5f6188b847b187e526c6c27b127593b61a1ba79ca9ada04e0ba181c7606f8f50728402593087b152c072696139ef27c0c200a26800268a5ae5dbd4d1822898dad9e3c9be9baf460881f42e79ea786e7e086f94e184ae9fb7e2d1065db486a005e64f0ff077edc9392a48565ffa47e1127de64011031b7ed953e4711f93da5ddd3599b2e0b8e3a714b9a2203f5168ed0915"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000607c0)={0x9, [{r290, r78}, {r227, r289}, {0x0, r170}, {0x0, r180}, {}, {r101}, {r30, r155}, {}, {r257, r262}, {r118, r155}, {r18, r77}, {r71}, {}, {}, {r222}, {r108}, {0x0, r216}, {}, {r277, r25}, {r14, r132}, {0x0, r165}, {r220}, {r217, r238}, {}, {r158, r188}, {r131, r306}, {0x0, r145}, {}, {0x0, r175}, {}, {r362}, {0x0, r66}, {r241, r33}, {r97, r182}, {}, {0x0, r35}, {}, {r166, r385}, {r295}, {}, {r316}, {r217, r378}, {}, {r195}, {r162}, {r134, r41}, {r130}, {0x0, r61}, {}, {r69, r287}, {}, {r171}, {}, {}, {0x0, r258}, {r249, r82}, {r201}, {r239, r319}, {r365, r336}, {r189}, {r81}, {r94, r346}, {}, {r49}, {0x0, r275}, {0x0, r326}, {}, {}, {0x0, r109}, {r361, r143}, {}, {r67, r319}, {r81}, {r222, r349}, {r352, r56}, {r79}, {}, {r303, r238}, {r154}, {0x0, r228}, {r162, r324}, {0x0, r196}, {}, {0x0, r246}, {r114}, {r264}, {r210, r280}, {r97, r332}, {r270, r188}, {r55, r177}, {r29}, {0x0, r226}, {}, {}, {}, {0x0, r387}, {0x0, r254}, {r274}, {}, {}, {}, {}, {}, {r149}, {r106, r125}, {r212, r3}, {r338}, {}, {}, {}, {0x0, r27}, {r42, r194}, {}, {r263}, {r276, r3}, {r31}, {r84}, {0x0, r360}, {0x0, r165}, {}, {}, {}, {0x0, r231}, {0x0, r213}, {r114, r219}, {r2, r330}, {r51}, {}, {r301, r310}, {r168, r387}, {r178}, {}, {r279}, {0x0, r103}, {}, {r389, r77}, {}, {}, {}, {}, {}, {r2, r291}, {}, {0x0, r163}, {}, {0x0, r117}, {}, {r86}, {}, {0x0, r285}, {}, {0x0, r9}, {}, {}, {r74}, {0x0, r172}, {}, {r217}, {}, {r245}, {}, {0x0, r164}, {r236}, {r352, r308}, {}, {0x0, r229}, {r361}, {r350}, {r18}, {r286}, {}, {0x0, r228}, {0x0, r348}, {r237}, {0x0, r163}, {}, {r23, r123}, {r369}, {0x0, r200}, {}, {r146, r46}, {}, {r47, r360}, {r301}, {r286, r280}, {}, {r53}, {r10, r211}, {0x0, r115}, {r205, r313}, {0x0, r328}, {0x0, r351}, {}, {r386, r91}, {}, {}, {r359, r218}, {r362, r244}, {r113}, {0x0, r242}, {0x0, r8}, {0x0, r183}, {r110}, {r14, r139}, {0x0, r260}, {}, {0x0, r358}, {}, {0x0, r180}, {r191, r256}, {}, {0x0, r5}, {r290}, {}, {r148}, {0x0, r3}, {r276}, {r270, r17}, {r203, r330}, {0x0, r179}, {0x0, r177}, {r92}, {0x0, r206}, {}, {r282, r244}, {0x0, r360}, {}, {}, {}, {0x0, r145}, {}, {}, {}, {r357, r211}, {}, {r20}, {r344, r271}, {}, {}, {}, {0x0, r225}, {0x0, r213}, {0x0, r75}, {r58, r206}, {}, {0x0, r198}, {0x0, r177}, {0x0, r145}, {0x0, r135}, {0x0, r129}, {r325, r192}, {r30, r317}, {r74}, {r396, r397}], 0x7, "0ac8e01de2d07c"}) io_submit(r394, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r395, &(0x7f0000000600)="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", 0x5c5}]) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x31, 0x1, 0xf9, 0xc0, 0x0, 0x3, 0x100, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x80000001, 0x1ff}, 0x10408, 0x400, 0xb9b9, 0x4, 0x9, 0x400, 0x3, 0x0, 0xffff, 0x0, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r395}}, './file0\x00'}) ioctl$TIOCMBIS(r398, 0x5416, &(0x7f00000001c0)=0x9) [ 877.405278] loop3: detected capacity change from 0 to 4 [ 877.419433] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:39:13 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003e40), r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000002e40)=""/110) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x40) 18:39:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef03000000", 0x3e, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45", 0x52}]) 18:39:13 executing program 6: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x2, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:13 executing program 6: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x240000, 0x102) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x0, 0x20, 0x0, 0x0, 0x100000000, 0x8004, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x2080, 0x6, 0xff, 0x0, 0xeb89, 0x15, 0x0, 0x0, 0x3, 0x0, 0x1f}, r0, 0x9, r1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) [ 877.969299] loop3: detected capacity change from 0 to 4 [ 877.985329] EXT4-fs (loop3): Invalid log block size: 33554433 18:39:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x6, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:14 executing program 6: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000003e40), r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000002e40)=""/110) 18:39:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000001c0)={{r0}, 0x0, 0x16, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x40, 0x3ff, {0x10, 0x4, 0x2, 0x7, 0x2}, [0x1, 0x4, 0x81, 0x7fff, 0x8001, 0x400, 0x6, 0x3ff]}}, @name="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"}) 18:39:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:39:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000003e40), r0) 18:39:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="0fa720883d3bd07fe630108ccc09408c12d747bd04dda1c591804910", 0x1c, 0xfff}], 0x100008, &(0x7f0000000540)=ANY=[@ANYBLOB="6a6f75726e616c5f636865636b73756d2c75737271756f74612c6e6f6c617a7974696d652c6f6c64616c6c6f632c737472616e736d7574653d65787433002c7569643c991507e828e5f14de2a793db4a362981c60ffe6fe213c4ac04b1aa64bd4ab844c398bc30081f735d761c9cda00076619dd01373a753fd10340562f41d08a2de86fd1ad6d9c45d4dd72f414b03e00"/154, @ANYRESDEC=r0, @ANYBLOB=',obj_role=\\*,subj_role=ext3\x00,smackfsdef=ext3\x00,\x00']) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10044a8, &(0x7f0000000140)={[{@dioread_nolock}]}) 18:39:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x14, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:28 executing program 6: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) [ 892.251813] loop3: detected capacity change from 0 to 4 [ 892.273340] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:39:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:39:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x600, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, &(0x7f0000003d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000003dc0)=0x80) 18:39:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:39:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$inet_icmp_raw(0x2, 0x3, 0x1) 18:39:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x1400, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:39:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 905.487641] loop3: detected capacity change from 0 to 4 [ 905.503294] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:39:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 18:39:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:39:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:39:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x2, r0, &(0x7f0000000140)=0x200, 0x81f, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x6, 0x7, 0x6, 0x0, 0xaf385da, 0x4, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x3f, 0x79}, 0x14, 0x0, 0x2, 0x4, 0xffffffff80000000, 0x7, 0x3, 0x0, 0x7fffffff, 0x0, 0x101}, 0xffffffffffffffff, 0xa, r0, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x9e, 0x27, 0x7, 0x8, 0x0, 0x3, 0x10402, 0x75c20c27679b7381, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xe3c, 0x7fffffff}, 0x40, 0x290dfd8d, 0x2, 0x2, 0x5, 0x3, 0x3, 0x0, 0x4cf7, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d5}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) fsmount(r3, 0x9a380d458611a78b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x4, 0x7f, 0x0, 0x0, 0x1000, 0x60000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1881, 0x4, @perf_bp={&(0x7f0000000480), 0x8}, 0x4e840, 0x9, 0x7, 0x2, 0xffffffff80000001, 0x5, 0x1, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd}, r2, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x24004844) syz_io_uring_setup(0x46fa, &(0x7f0000000200)={0x0, 0x7219, 0x2, 0x3, 0x135}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 905.677941] loop3: detected capacity change from 0 to 4 [ 905.700169] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 905.734134] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 905.734134] program syz-executor.2 not setting count and/or reply_len properly 18:39:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1=0xe0000003}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:39:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x4200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x3, 0xa7, 0x3, 0x0, 0x401, 0x40000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x81c, 0x8000, 0x10000, 0x8, 0x8000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x7}, r3, 0xe, r1, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 18:39:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 18:39:54 executing program 6: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) (fail_nth: 1) 18:39:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef03", 0x3b, 0x400}], 0x0, &(0x7f0000012c00)) [ 918.188329] loop3: detected capacity change from 0 to 4 [ 918.191926] FAULT_INJECTION: forcing a failure. [ 918.191926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.192788] CPU: 0 PID: 7034 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230519 #1 [ 918.193305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.193846] Call Trace: [ 918.194025] [ 918.194185] dump_stack_lvl+0xc1/0xf0 [ 918.194460] should_fail_ex+0x4b4/0x5b0 [ 918.194753] _copy_from_user+0x30/0xf0 [ 918.195032] io_submit_one+0x94/0x1b70 [ 918.195315] ? lock_acquire+0x19a/0x4c0 [ 918.195590] ? find_held_lock+0x2c/0x110 [ 918.195886] ? __pfx_io_submit_one+0x10/0x10 [ 918.196200] ? lock_release+0x1e3/0x680 [ 918.196471] ? __pfx_lock_release+0x10/0x10 [ 918.196779] __x64_sys_io_submit+0x191/0x2f0 [ 918.197110] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 918.197472] ? fput+0x2f/0x1a0 [ 918.197727] ? ksys_write+0x1a7/0x260 [ 918.198004] ? __pfx_ksys_write+0x10/0x10 [ 918.198305] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 918.198684] do_syscall_64+0x3f/0x90 [ 918.198961] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 918.199334] RIP: 0033:0x7f39a5e63b19 [ 918.199602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.200871] RSP: 002b:00007f39a33d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 918.201412] RAX: ffffffffffffffda RBX: 00007f39a5f76f60 RCX: 00007f39a5e63b19 [ 918.201901] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 00007f39a5f5a000 [ 918.202399] RBP: 00007f39a33d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.202900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.203393] R13: 00007ffc1da076bf R14: 00007f39a33d9300 R15: 0000000000022000 [ 918.203908] [ 918.222038] EXT4-fs (loop3): Invalid log block size: 33554433 [ 918.223854] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 918.223854] program syz-executor.2 not setting count and/or reply_len properly 18:39:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000091}, 0x40094) 18:39:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) 18:39:54 executing program 6: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}, {{0x2, 0x0, @private}}}, 0x108) 18:39:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='pstore\x00', 0x0) dup3(r2, r3, 0x80000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x2, 0xfff8, 0xfff7}) 18:39:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) (fail_nth: 2) 18:39:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:39:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 918.408040] FAULT_INJECTION: forcing a failure. [ 918.408040] name failslab, interval 1, probability 0, space 0, times 1 [ 918.409634] CPU: 1 PID: 7049 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230519 #1 [ 918.410716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.411828] Call Trace: [ 918.412197] [ 918.412507] dump_stack_lvl+0xc1/0xf0 [ 918.413050] should_fail_ex+0x4b4/0x5b0 [ 918.413628] ? io_submit_one+0x100/0x1b70 [ 918.414212] should_failslab+0x9/0x20 [ 918.414756] kmem_cache_alloc+0x5a/0x390 [ 918.415337] io_submit_one+0x100/0x1b70 [ 918.415910] ? lock_acquire+0x19a/0x4c0 [ 918.416472] ? find_held_lock+0x2c/0x110 [ 918.417034] ? __pfx_io_submit_one+0x10/0x10 [ 918.417664] ? lock_release+0x1e3/0x680 [ 918.418196] ? __pfx_lock_release+0x10/0x10 [ 918.418820] __x64_sys_io_submit+0x191/0x2f0 [ 918.419429] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 918.420128] ? fput+0x2f/0x1a0 [ 918.420596] ? ksys_write+0x1a7/0x260 [ 918.421132] ? __pfx_ksys_write+0x10/0x10 [ 918.421698] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 918.422420] do_syscall_64+0x3f/0x90 [ 918.422930] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 918.423646] RIP: 0033:0x7f39a5e63b19 [ 918.424161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.426546] RSP: 002b:00007f39a33d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 918.427559] RAX: ffffffffffffffda RBX: 00007f39a5f76f60 RCX: 00007f39a5e63b19 [ 918.428512] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 00007f39a5f5a000 [ 918.429459] RBP: 00007f39a33d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.430409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.431344] R13: 00007ffc1da076bf R14: 00007f39a33d9300 R15: 0000000000022000 [ 918.432325] [ 918.452804] loop3: detected capacity change from 0 to 4 [ 918.464284] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:39:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) 18:39:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x3e, 0x0, @private}}}, 0x108) [ 918.487873] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 918.487873] program syz-executor.2 not setting count and/or reply_len properly [ 918.626450] loop3: detected capacity change from 0 to 4 [ 918.635455] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff", 0x38, 0x400}], 0x0, &(0x7f0000012c00)) 18:40:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:40:06 executing program 6: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:40:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) 18:40:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:40:06 executing program 5: pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) (fail_nth: 3) 18:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000057c80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000058c80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000059c80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059e80)={0xfd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r7, r9}, {0x0, r12}, {r14, r17}, {r18}, {}, {r21, r26}], 0x1, "8237c3e0d0d083"}) close_range(r1, 0xffffffffffffffff, 0x0) [ 930.281436] loop3: detected capacity change from 0 to 4 [ 930.291226] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 930.294915] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 930.294915] program syz-executor.2 not setting count and/or reply_len properly 18:40:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) 18:40:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) 18:40:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 18:40:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) (fail_nth: 4) 18:40:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) [ 930.483902] FAULT_INJECTION: forcing a failure. [ 930.483902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.485231] CPU: 0 PID: 7092 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230519 #1 [ 930.485804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.486405] Call Trace: [ 930.486587] [ 930.486750] dump_stack_lvl+0xc1/0xf0 [ 930.487038] should_fail_ex+0x4b4/0x5b0 [ 930.487334] _copy_from_iter+0x1d3/0x1320 [ 930.487642] ? __ldsem_down_read_nested+0xda/0x7c0 [ 930.488009] ? __lock_acquire+0x19d7/0x64f0 [ 930.488324] ? __pfx__copy_from_iter+0x10/0x10 [ 930.488658] ? mutex_trylock+0x2fa/0x370 [ 930.488947] ? file_tty_write.constprop.0+0x251/0x9d0 [ 930.489324] ? __pfx_mutex_trylock+0x10/0x10 [ 930.489634] ? __virt_addr_valid+0x102/0x340 [ 930.489940] ? __check_object_size+0x3d4/0x8c0 [ 930.490268] file_tty_write.constprop.0+0x402/0x9d0 [ 930.490628] ? __pfx_n_tty_write+0x10/0x10 [ 930.490929] aio_write+0x34f/0x7c0 [ 930.491194] ? __pfx_aio_write+0x10/0x10 [ 930.491497] ? __might_fault+0xe2/0x190 [ 930.491787] ? lock_release+0x1e3/0x680 [ 930.492079] ? __pfx_lock_release+0x10/0x10 [ 930.492393] io_submit_one+0xfa0/0x1b70 [ 930.492690] ? lock_acquire+0x19a/0x4c0 [ 930.492973] ? find_held_lock+0x2c/0x110 [ 930.493269] ? __pfx_io_submit_one+0x10/0x10 [ 930.493588] ? lock_release+0x1e3/0x680 [ 930.493870] ? __pfx_lock_release+0x10/0x10 [ 930.494188] __x64_sys_io_submit+0x191/0x2f0 [ 930.494512] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 930.494867] ? fput+0x2f/0x1a0 [ 930.495109] ? ksys_write+0x1a7/0x260 [ 930.495383] ? __pfx_ksys_write+0x10/0x10 [ 930.495680] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 930.496063] do_syscall_64+0x3f/0x90 [ 930.496335] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 930.496703] RIP: 0033:0x7f39a5e63b19 [ 930.496966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.498193] RSP: 002b:00007f39a33d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 930.498715] RAX: ffffffffffffffda RBX: 00007f39a5f76f60 RCX: 00007f39a5e63b19 [ 930.499202] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 00007f39a5f5a000 [ 930.499682] RBP: 00007f39a33d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.500175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.500659] R13: 00007ffc1da076bf R14: 00007f39a33d9300 R15: 0000000000022000 [ 930.501160] [ 930.504032] loop3: detected capacity change from 0 to 4 [ 930.521579] EXT4-fs (loop3): Invalid log block size: 33554433 [ 930.538796] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 930.538796] program syz-executor.2 not setting count and/or reply_len properly 18:40:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:40:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:40:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x9, 0x81, 0x7f, 0x40, 0x0, 0x1f, 0x4004, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x4008, 0x4, 0x0, 0x8, 0xb32, 0xa7, 0xb14, 0x0, 0x3ff, 0x0, 0x401}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000140)) io_setup(0x1f, &(0x7f0000000640)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x1, 0x800, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f00000006c0)={{r7}, 0x0, 0x0, @unused=[0x5, 0x800, 0x9, 0x9], @name="bee8afc0c6d7243cf74cec863f624bbaccfb24ecfcfc8a865861bfb239288d836bb6bea6d6f6755d64a1c64839a20fa4106c4c0cc8ddb48e1c7ba31d09bbc5db9f4e257d50df87d895aec8619eb5cf8b8bc285f26594a6d7dee6faf8c3b0b4d5046fa79711afecd3bd07c5990a98d57c1e5047c46b00b06e1039c382fa2a33264d5ae18a214944201b749f09fa5ff6a0dc1418c488d33754b63cda1327cbbf9d30bac59f4a670d9b0652b360dd1c97037c4de4d12edb3f1f411b69e9215b4947ff4af70d004af74e722d9a797b0caf0f4e76c14d9c7f199b2befff378e87b97022e91680fde1801d717a82aa78f918105bbf3f7f4300435c47dc6d9335110e0336798baa4ac5f9af669f0029df149e8fd73e4587a8786ae0f40301f4e0584caf3cd739fbbbd65f43f5be68573682b24a86a74892a21cfbec675ef80e8829de0b0797393c7f406382a8a0d72b401a9f54c944fc939d66dd2380aae3e44d6bb577d64870a50f542cd4bebfd7c59a306c5464e49f7af3b72cf0485b5d66b691192e677f1908344c91a3297b960bbe7e424d7f9ae5aa781e890c7c53f86925fe29e045f9904a4b56be76fb0cec38fefe4f0987df7df268563457f4ecbce6ba17eb021702b8c079faf6f93ecd394548de099114374b9a98a4cc98b442d9ff1c187db350ed7346e291f46f191c7c15a53cb34bbdcc41460321285044cbfc8cf21243bdb43ecade38d0d9429ed5630a93394bfa8ddeb9553b3519c3fc57ef195faaa301f44abb4230c290743369068670dbe75decadaef9c22680c850f066d6766f17a57761801d06f9f1fc36a809dc54b30ea1d10a481454264b6f2eed46269e4c5e5e3c7905c26ac1a3d5706d30234798258273fb346ca19ada84357e7110ee27b3d80a238a7671691490910fa49708c635299ab38ce1e6e9daae1fcc98a0c7845ae19ca5173589fff61eba45b5961ff58ab5a3caebf6dff22e9d5df604b0e9b2d454782e768fa2542af15fba85c77f8f9309535fc724c12a6906320150336f7b0457ecf5c16de4dcc5e80d534cd45f13b95ac869b1fc1a19e5aaabf330a4e164dae305836c8bad11bc2ea2f82bd9a98916c00a9910f8b978f01b5d08be8565dc804a4484ebb99f32838bf196d16a260fbaf177b59757c2495ebb6433a1940d2a4c0a47022eacda4343f242d29adfcf8f807364b6e1c31e495539d8a43b3fee62b6441a5cb492da4dd5b10f2e17263a3cdc369c8201ad3bd4a198d87161117b93486259acf6f04201ddd0429dd6a893a0723a7f53b62c926d557cee8a1d2cc0e7d13dc1d4f00b22496c834ef6f8d9ba67d824269838b49c662376c99e2a0202d46d61fd146ffb4a0bc6ec5d34bc9ee05507393818a96a46ce45734dbc213c5898befa896d68fb7053cd9282c90d0fb2b2c884f1d1a0398b6de8413c06bd72d288f4fe5359b3fc52d990e1b7982b2ea2306e61c28375d5e2e268b11a5fdfe6f0958c2dc3c35a89f3b0712ee9964d06636f6d9582901f835e6ccb38cecb96ee83a3c30bdfebfc7ae8b7b877d8e04846d1c17609d6884931cd039388bd3e5f8cf1124c35b22f951a93f88cf40e3caecf78395c4322d3b1efc7f311d209fe4876d1de3ed18057c5316fcb49d501def7d2ed63f1340f08a5b917c3ca2ec0a9734c18ab45e99c0071bc2583698c25f86671dfce88a24709e845326db89a70951d972619c5159d2b5ba3763f3b93e4fac1719b2857e05c328111952590fb6acf45aac6942e115dc28e1bd35b5ed682f15429028ec259ae154e4ee54b01ed5f1b69d5930c94642a09062939828ca387f19ddc685d3d98c83f4f92ee8176edd7bb4914e17785e690391217290dd3c76ba0265f76849edf8d8ae71bb45db7a33039cabd8268c75a8a43fd03602354d98c1b9ff5013cfe8b7490e81693ce61646b098429abaca57c8c4314f6428a323681e918091507d256cec2284f928313eafcccc114abf984a1c80e8d51224b7e0268da686e868bd0b68718af877bce87ad08a37305fd396d38373db480fc5bb50c005b8842db981eaaa07dc38f067bbd4230603754d49613a2fffb9cc392081fc8c987bc58d4035062979fd8967818d81404450b3d05e48ab18d5222c41373f6d2994077d84b39cead6513ef208829d74d61a01d1410d3cb832e9f21719851ce4fe358f5243c6c30bafd63bea28f5cf95641b1f39fb1d5be3bac383a9a9eb46dd321935a2a6ae8b1bdff3aa359e56f8020848cdc7ef7347f284cf586586e82ef3a6d3d487c6f4aedb82b2a7d8971486590df498d727ef63a51e5288d3af024b019fd9737275a190d68ff0218f7d8ab3b4c9561cf089ea135961a284c1bff03b2fd814ad32583198e0631e892ebbeee834dceffc8eb124996afa28492983e34455f8e51e944c6734344c1806f828390e3734a60e77a5527cdd1da359757889370cb7fdf30b08e31da3576b0eb64b6a3da28c611fe8e3613d4d1ba5cd04862c2edd9f2fc18f9a0f6189ab9320c3987dda2b77c0d8d8f8391236aadd6d015a4f2b5fd45c711fde39876128d17e454df50ec3fe501ef1b3e0282cee6590734e2cbf0dd5002238fc809b61a6d2d4ad0c02eb0d8a2663e21be98fa0e808d5577b444450212d9b6de0cba8d2d3d9b446ca4706f4f55d712dc8903af17c23154b60bfeeced817c26f5cfbc8e039035bb7cbc661187d446ac199fdf009ea112194204ac73a7edbbc0458d3d81c32001440079b7a7e2374c07558d4a73194a2febf20f12c70f686df5c92810d50b408a9a2667a098b168137b95f06bf0cf88d677b20cb5c6655c6269fd82287e9c9302852adb9b7d6c9840f3dba912d2a34403020eb035a643022f80841a07c95be969e44c16ea6ff57d650115320e2f50d86eb308943de9a31205506828a23cc3e87166d7906134e65e7d1ce693f63b750e2ada765cfe18b5c6a159c31e8e65196dbff07f4cbadff5235c40287352ba436c8ff15d43b6014a191a3f895a8d4660226faedea08c91a7a22feec6b2d73ebbcd5f0ddcbd72c053a74afb4f49babead7b81d4e31304542d9f751cd8cb8df73b3bcbcf5931293a331b2f701602509dffd8456bffb184cdf833c93ab8790c65cdb9a75ab38368f1151f80c976a07a039e44c7b85c3b75a3a659f5e073c06261ba33cec58a4a17b99548a03bd5affed3f0d2a0cd505e47025bc72b6b079fb8be98c5e01e852e8d99ffb76c6576f53719048bd6efc0fc33827442ca1b92cdb1b76bdf7b0223805c4afe4767aac8897552f1d148f0369878b03403f980a68ff67316f980c8ee6a012db3c58e2daa176e2cb125fa8f901a3626dfc7c4308fd6f25f1f763e0852413a94d1f13b55e01f8ced737679c9793be56d7d57a6a9c21b7df8f437f28453d05589d76eb42cd15f28eacbd2b2b3ec2da9b1a55496663951cb88a40682b6b7af03e2a530c205e4e181a76468869b9087e102dd9a5a512faffc5f1d8d2ebc1f44f787dfd2eaa84773073aa369fe13fe23f2b747ec325c527a5092c6d0987dc45b2762242380ebaf2f4e65f2f0ee4a81f15c9f8edcf5badbb5af9d7502ece2d1fdd2eeef178871f945207bdf9a0ae1973cd56fd04bbec1f3c16951633377c8fed2c443eae2379443a3a3bcf7f67aa269c4190eb311c2fc9b347a45dbc749fbfcec5fde0c976cf702ce0e9307197faaa38ae86ec6f4b86ad7bde91171b528083fc5c17a280e47494a97a04e48895b8a1e3db12f1237f35188ee4fddc5e129815eb625888083a80fd2645741e0659dc915b4043ce7558b9ac0c89b9df8f6ac2810eb465f7847ad5a84c8b6e5f664f60103728ef9050170eb78369cc414f45ae3df47882c1bf7d9e4abbcf65d818d3b0c5dacd59e2a0fc0b15a1fb1c3070276dad071e3455f92e881a50d38fd0d47a57c91c9af54019a3f59b63d2789a1bdbf487bab2b8fbabe4d0bbc2b53af76ba6deb9356cacb22b95140eb05aaee3486f4bd64002eeb8f501435626dc508952becd30473766a9de0c3ab54a5055ef0c5bb05ec817eaf56534d98ab9a086a177b95995944efbaa538037496ba8da658e83804d83024e725325a2f5f0fd7ee9d47a4e805734736bdf329da17fb4e0c2ec48c7e0a7b87af7679e2bcdafe4141ae0dd2601ad7665a8c79034e9ec8d86e3b602d8c3416e2b801758236b22ef54dc3f2853d43471125263d773d317727d65b346c49433d0760eb4057510b04240f3a8dbed41fc5b40684c2a19bff29b4ea9474118edcb335ad0cde3c911083097c96b9b662087a238999f6f822d37096dd048ffd5d2b94ab5484c49f233b38e58bf2275850cf5dad0829150f7cbbb98b713ca4778d308addaa9d0c6199b3f3404d573399f3e057b876d7c1ad67afb2008bd82da8b02e2bd69a8d1ecc72daa30bf74edf103cf748200d8b4b0d284e5b377d6c035d66972c32dfd22daafcbab7366c4162c9cf41ae9ff433e3f44df0c8603b211410a2bbc9b73218f4876c7dbab74502a967f54223893ac139757df054431c08f708ce4c79b673f2f970051cad5ce088ba0ad1171c84a8acbadf5af39b406602ebfbc50204c13a346e86c2d4d2c6705fb7be8b87f46d1998de91df3f5be2e9f1630f1c8a444e35892cd17300576b944f323e2743e1ef1d029879fd5aac21027342e2c64e4fd99bd147507dea8a568c41fb9101d0ba8eb056f5af175ad7fcf9804d0b37975889c90002f9bb39b1160cfe78b1d439062907b95dbdbcb865b64750ce0d6a64c49c1708bf435374e8b00dd37ea93979de7fd735cd7783b0022dadb50e278be723d8dbcbd857ca54a10aad38daeff1bd61f85598246e950264a56bf235202ed06f992e45481956bbb5d0f5660de8141631345513db9fdc128318a80bbdae5376c1d2e08e0ed12117f8bf5b989d9162133c345babf56e07c0aa53b4c8c0bee3023c04a9da06e93f69cb8addada6d400384a3a7e2e5e499dbd22def435eb35c9060ea3e4927a9a6cde819c90f7c3c32af3f19edaae8d7a703cd9c5a6f57dbf723e2599f09285ce2b2b4ff9e4f5f87f260d607400d8498482f51161b2c1ad45d43ed71b79f0ad46bb1c7ee737873e212afd4c5e0d8ca19ef9e5ed9caa8110078e876fb336e6f6efce3fc2e14c01063016e5874e360d01e117c40bc5b59dd1dcd5ce2433049cd5f0b3bb958e1fd50d5ef6e8952b02f0db551383df134652af681f7c9a0c9561fabd228842b2fd9e8c29018588e671f0f3afc909bb41a9230fbe1740ecccc273df4e7a7f1e7a67871bfaa69c97ce5e2c9c371f7c4f762c5ff604288e451b068955f228bef7169517918fff92a131378dce54da07ca06abf1be4890c9f07d5373b6cbc7587568e19d9ce178ed9048651d08f78bc1219ea588ff9210a4a96490d31f93971d98b94d61004fd78ec3cd46aa72dfc2c76cb5fcd0f0bd822bcf9aa96e5f0b5954bb82c1698039ccc8abf1b357828d8616fe67d89a965aab6f4b81e8395d149f505082ecddbf384a6f768cb5ce60f3497b60c4548fe4cd7f65bf231f7d5e7fcca21a9707b02ed2ac8f5cd589fa4ced4a8ab78f0e6ce145f64f715e2b04e9968ec59aec11bf0383a225a5a2c6f31fb675873f8a02cbacf78dc622a0ef30344624b1bac91428cd4937f5c0c4028feb62ff7caccc2f75aea7e2c97572993784668bc187fcae074ee8c18a879ab32af8ebf48d636309cb37c0606f2bd07680"}) 18:40:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 18:40:19 executing program 5: pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x2, @private}}}, 0x108) 18:40:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) (fail_nth: 5) 18:40:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f0000012c00)) [ 943.089626] FAULT_INJECTION: forcing a failure. [ 943.089626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.091056] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x20-- guessing data in; [ 943.091056] program syz-executor.2 not setting count and/or reply_len properly [ 943.091235] CPU: 1 PID: 7111 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230519 #1 [ 943.093276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.094327] Call Trace: [ 943.094677] [ 943.094986] dump_stack_lvl+0xc1/0xf0 [ 943.095512] should_fail_ex+0x4b4/0x5b0 [ 943.096080] _copy_to_user+0x30/0xc0 [ 943.096623] simple_read_from_buffer+0xd0/0x170 [ 943.097252] proc_fail_nth_read+0x19c/0x230 [ 943.097839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.098574] ? security_file_permission+0xb5/0xe0 [ 943.099395] vfs_read+0x1e4/0x8b0 [ 943.099881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.100572] ? __pfx_vfs_read+0x10/0x10 [ 943.100803] loop3: detected capacity change from 0 to 4 [ 943.101131] ? __fget_files+0x270/0x480 [ 943.102061] ksys_read+0x12b/0x260 [ 943.102562] ? __pfx_ksys_read+0x10/0x10 [ 943.103128] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 943.103856] do_syscall_64+0x3f/0x90 [ 943.104394] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 943.105138] RIP: 0033:0x7f39a5e1669c [ 943.105646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 943.108297] RSP: 002b:00007f39a33d9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 943.109312] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f39a5e1669c [ 943.110338] RDX: 000000000000000f RSI: 00007f39a33d91e0 RDI: 0000000000000005 [ 943.111364] RBP: 00007f39a33d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 943.112314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.113261] R13: 00007ffc1da076bf R14: 00007f39a33d9300 R15: 0000000000022000 [ 943.114227] [ 943.115962] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x6, @private}}}, 0x108) 18:40:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 18:40:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:40:19 executing program 5: pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:40:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f0000012c00)) 18:40:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x20) syz_open_pts(r0, 0x40000) 18:40:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x14, @private}}}, 0x108) 18:40:19 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 943.411358] loop3: detected capacity change from 0 to 4 [ 943.429975] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x600, @private}}}, 0x108) 18:40:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) 18:40:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f0000012c00)) 18:40:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x93, 0x4, 0x56, 0x0, 0x0, 0x15482, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x9, 0xffffffff}, 0x2158, 0xc7d, 0xffff, 0x2, 0x6a, 0x6, 0x4, 0x0, 0xde3, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) close(r2) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000280)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd1, 0x26, 0x5, 0x8, 0x0, 0xda5, 0x920, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe0, 0x1, @perf_config_ext={0xb, 0x1}, 0x820, 0x40, 0x1, 0x2, 0x7, 0x41, 0x3, 0x0, 0x2, 0x0, 0x98}, r5, 0x0, r2, 0x1a) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0xb4, 0x2, 0x7, 0x0, 0xffffffff, 0x8302, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x3802, 0x0, 0x9e, 0x5, 0x10001, 0xfffff96e, 0x76, 0x0, 0x4, 0x0, 0x7f5}, r5, 0xd, r0, 0x3) 18:40:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:40:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:40:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:32 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 956.853798] loop3: detected capacity change from 0 to 4 18:40:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x32) [ 956.876032] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x1400, @private}}}, 0x108) 18:40:33 executing program 1: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f0000012c00)) 18:40:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:40:33 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:33 executing program 4: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/149) r0 = memfd_secret(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xc}}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:40:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x3, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 957.277926] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x5, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, 0x0, 0x0) 18:40:46 executing program 1: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000000}, 0x2000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x80001a, &(0x7f0000000140)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) 18:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f0000012c00)) 18:40:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:40:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:40:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x504a0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80603, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) 18:40:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, 0x0, 0x0) [ 970.463549] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:40:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:40:46 executing program 1: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f0000012c00)) 18:40:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:40:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x2}}}, 0x108) 18:40:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x7, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:40:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, 0x0, 0x0) 18:40:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 970.775760] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:41:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:41:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, 0x0, 0x0, 0x2) 18:41:01 executing program 4: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2080, 0x103}, 0x18) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/46) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:41:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x6}}}, 0x108) 18:41:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 18:41:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:41:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x8, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 985.655787] loop3: detected capacity change from 0 to 4 18:41:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:41:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}], 0xa, "3948a9"}, 0x28) 18:41:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, 0x0, 0x0, 0x2) 18:41:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x14}}}, 0x108) 18:41:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:41:14 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000e173) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/226, 0xe2}], 0x8, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/135, 0x87}, {&(0x7f0000001ac0)=""/135, 0x87}], 0x4, &(0x7f0000001bc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001e80)=""/162, 0xa2}, {&(0x7f0000001f40)=""/193, 0xc1}, {&(0x7f0000002040)=""/93, 0x5d}, {&(0x7f00000020c0)=""/193, 0xc1}, {&(0x7f00000021c0)=""/189, 0xbd}], 0x5}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002380)=""/195, 0xc3}, {&(0x7f0000002480)=""/114, 0x72}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/64, 0x40}, {&(0x7f0000002600)=""/89, 0x59}, {&(0x7f0000002680)=""/107, 0x6b}, {&(0x7f0000002700)=""/129, 0x81}, {&(0x7f00000027c0)=""/215, 0xd7}, {&(0x7f00000028c0)=""/54, 0x36}], 0x9, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/36, 0x24}, {&(0x7f0000002b00)=""/123, 0x7b}], 0x2}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002c40)=""/245, 0xf5}, {&(0x7f0000002d40)=""/72, 0x48}, {&(0x7f0000002dc0)=""/131, 0x83}, {&(0x7f0000002e80)=""/29, 0x1d}, {&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/82, 0x52}], 0x6, &(0x7f0000003000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000eff9e26b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}}], 0x7, 0x2000, &(0x7f0000003240)={0x77359400}) fchown(r1, r2, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:41:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 18:41:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 998.431153] loop3: detected capacity change from 0 to 4 18:41:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x600}}}, 0x108) 18:41:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, 0x0, 0x0, 0x2) 18:41:14 executing program 4: r0 = timerfd_create(0x0, 0x80000) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/166, 0xa6}, {}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/9, 0x9}], 0x6, 0x0, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:41:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) 18:41:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:41:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 18:41:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x5c5, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x1400}}}, 0x108) [ 998.688583] loop3: detected capacity change from 0 to 4 18:41:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) 18:41:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) 18:41:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x1000000}}}, 0x108) 18:41:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x641) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:41:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:41:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='pstore\x00', 0x0) dup3(r2, r3, 0x80000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x2, 0xfff8, 0xfff7}) 18:41:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) 18:41:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x2000000}}}, 0x108) 18:41:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x22) 18:41:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) 18:41:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 1) 18:41:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:29 executing program 4: clock_gettime(0x6, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x22e6129338338b9a, &(0x7f0000000040)={r0, r1/1000+60000}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 18:41:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) [ 1013.046157] FAULT_INJECTION: forcing a failure. [ 1013.046157] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.047721] CPU: 1 PID: 7337 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1013.048924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.050205] Call Trace: [ 1013.050553] [ 1013.050881] dump_stack_lvl+0xc1/0xf0 [ 1013.051409] should_fail_ex+0x4b4/0x5b0 [ 1013.051991] should_failslab+0x9/0x20 [ 1013.052521] __kmem_cache_alloc_node+0x5b/0x310 [ 1013.053197] ? __do_sys_memfd_create+0x12d/0x910 [ 1013.053867] ? __do_sys_memfd_create+0x12d/0x910 [ 1013.054533] __kmalloc+0x4a/0x160 [ 1013.055062] __do_sys_memfd_create+0x12d/0x910 [ 1013.055677] ? ksys_write+0x1a7/0x260 [ 1013.056239] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1013.057120] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1013.057862] do_syscall_64+0x3f/0x90 [ 1013.058410] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1013.059138] RIP: 0033:0x7fcb02883b19 [ 1013.059646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.062197] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1013.063356] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1013.064408] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1013.065521] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1013.066497] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1013.067626] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1013.068754] 18:41:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) 18:41:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 2) 18:41:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) (fail_nth: 1) 18:41:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:41:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x6000000}}}, 0x108) 18:41:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x507002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = syz_open_dev$hiddev(&(0x7f0000001740), 0x6, 0x21c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0x7fff}}, './file0\x00'}) r7 = dup2(r1, r0) io_setup(0x1f, &(0x7f0000000640)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r9, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1fffffffffffff58, &(0x7f0000001a00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000001580)="353590113a2a344c4165ed44d900d4eac6c4529ed0dca65d05eacb1b1a4f05168d37347326a4637bfa5babe8cb4b2ce6707307ff2eadd4d0d3b83dbcdeed8a2557bce560b1109d192280864f042f2cb9f7e53adcdb0840379854", 0x5a, 0x10001, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x8, 0x80, r2, &(0x7f0000001640)="15492a8b98e46b12c9b6900f001e38041d04bb4535b7b1af448f7bdf2e46e84e23cead392e165cf27288f30206be93c94f99dad2614e9d64c8b7cd5363a19abf5f604abfd1a4d6cb9621f0060a7ed883aea6a726f6d289655627f822a0162333b919707ee9aefeb987dfe240013ce930a5f8b94c5b2e97b89caccc8c54263484dd71e23a765dfe5122b00b69d8d82e0e65881a39a5eb7eca29ffc4ddcabfa6c4131493f3025235244e232aeb72b4c51127d70a9e1f38fbd1657097e01298", 0xbe, 0x100000001, 0x0, 0x1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x62c, r4, &(0x7f0000001780)="6ef4f63c394e08e9dae252ecdf63d8f43bba582925ecccabb02f7d8c8bd56ac54e9e5a8f3032c921379e7e70ac96c4d80afbf04c1700cffd85d204b9b52e", 0x3e, 0x7f, 0x0, 0x1, r5}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0xff, r0, &(0x7f0000001800)="1f7abcc5604106a591e730f86ba5ede146ce7fadfadb9213623dd680c6cda1099e1ac4", 0x23, 0xf80c, 0x0, 0x2, r6}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f00000018c0)="ba659afe4e53bb2fc92e9bb571e1a1eb39aebb316fc48a2763148623578e41992c9756fa9e0e50f1d2db4081fb6318638de4961ceba713a42efc90d083321a51d5b8161d146c71", 0x47, 0xf6a, 0x0, 0x1, r7}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x6, 0x8df9, r9, &(0x7f0000001980)="fab211c8cda2ee2c05cde48c679767", 0xf, 0x6, 0x0, 0x2}]) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000001500)={&(0x7f0000001540)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000100)="9295cd7bfa8724bbe3223201688da67ff7be7c288a930bc17eb0b8531994db6ed5916e8c9b756dbc39d720ab2f74f355e446522f56b1682fc4da8b49409d9c4a6f7bdcdb53ec9396a43186de1f1f03be68abfd", 0x53}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="8816d5bc7e38f636241e2fa29b30a7adac87e3490a6dcca4c21521a02d9fae4fb078884acb61ccbc968656036c09fa80061358481fa7d6b0756ff407ebda4649bee035acf1c10c1053970dc98fd68c11bffb740b4ee55073c0c64bd99267e6c0f5fee069fb3484dc815921eff32f909faec5b2a52dc1b6c4dd2462892fd5e318bb921283cf4d05d928f1e47989323c79b96341271ee18f167ec67a52bc1c50d319c24a2476cd1317bb0a1b", 0xab}, {&(0x7f0000000040)="7ee6e3316ec029f92008d48d4e50e767246c", 0x12}, {&(0x7f0000001240)="780bcfd67a902f51448c5132c2e82a7528181e543c352f274ff7dd527d2bdfc308f96f56e8346681b6d9ba6d7ed35682c017d53135ad38b1f085599c06151b520e1624ea26e6754aa7bb1c7fd11333f7f6dfb99d35765f74426d261a3f44037c61ce06e0e38ced63fc9321c3232e68b983", 0x71}, {&(0x7f00000012c0)="44e77b4634532e36976bfb11e1a572154c769050774b79a7134e1b02a9edd60638d8986d823d13aab2c8d23e2500666b46b92ea43d595e0ec3", 0x39}, {&(0x7f0000001300)="3149ada42b85d6c50477792e01a203c0b205f4ecb2d31250680b857c49173274f08c1487ddd94f4c136f5bcc3ee1bf2aec2b92ed5efebe7bace66690245700f6c9ab8434775eb591c15664b0cfa92b29893b683726784e0f", 0x58}, {&(0x7f0000001380)='ti', 0x2}], 0x8, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}, 0x800) getpgrp(0x0) [ 1025.677001] FAULT_INJECTION: forcing a failure. [ 1025.677001] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.679160] CPU: 1 PID: 7352 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1025.680298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1025.681419] Call Trace: [ 1025.681803] [ 1025.682137] dump_stack_lvl+0xc1/0xf0 [ 1025.682707] should_fail_ex+0x4b4/0x5b0 [ 1025.683310] should_failslab+0x9/0x20 [ 1025.683882] __kmem_cache_alloc_node+0x5b/0x310 [ 1025.684567] ? kvmalloc_node+0xaa/0x200 [ 1025.685158] ? kvmalloc_node+0xaa/0x200 [ 1025.685782] __kmalloc_node+0x4d/0x160 [ 1025.686370] kvmalloc_node+0xaa/0x200 [ 1025.686943] seq_read_iter+0x9da/0x1300 [ 1025.687549] seq_read+0x171/0x210 [ 1025.688066] ? __pfx_seq_read+0x10/0x10 [ 1025.688664] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1025.689479] ? fsnotify_perm.part.0+0x221/0x610 [ 1025.690217] ? __pfx_seq_read+0x10/0x10 [ 1025.690805] proc_reg_read+0x22e/0x310 [ 1025.691398] vfs_read+0x1e4/0x8b0 [ 1025.691912] ? __pfx_proc_reg_read+0x10/0x10 [ 1025.692564] ? __pfx_vfs_read+0x10/0x10 [ 1025.693141] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1025.693909] ? __fget_files+0x270/0x480 [ 1025.694522] __x64_sys_pread64+0x1ff/0x260 [ 1025.695139] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1025.695835] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1025.696742] do_syscall_64+0x3f/0x90 [ 1025.697306] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1025.698053] RIP: 0033:0x7f991d66eb19 [ 1025.698593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.701074] RSP: 002b:00007f991abe4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1025.702398] RAX: ffffffffffffffda RBX: 00007f991d781f60 RCX: 00007f991d66eb19 [ 1025.703492] RDX: 00000000000000aa RSI: 0000000020000040 RDI: 0000000000000003 [ 1025.704694] RBP: 00007f991abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.705696] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1025.706683] R13: 00007ffc739f73bf R14: 00007f991abe4300 R15: 0000000000022000 [ 1025.707700] 18:41:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) [ 1025.728037] loop3: detected capacity change from 0 to 4 [ 1025.731437] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1025.731437] program syz-executor.6 not setting count and/or reply_len properly 18:41:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0x14000000}}}, 0x108) 18:41:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) (fail_nth: 2) [ 1025.767922] EXT4-fs (loop3): Invalid log block size: 33554433 18:41:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 3) 18:41:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1025.919020] FAULT_INJECTION: forcing a failure. [ 1025.919020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.920602] CPU: 1 PID: 7369 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1025.921537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1025.922527] Call Trace: [ 1025.922838] [ 1025.923117] dump_stack_lvl+0xc1/0xf0 [ 1025.923583] should_fail_ex+0x4b4/0x5b0 [ 1025.924077] _copy_from_user+0x30/0xf0 [ 1025.924570] __do_sys_memfd_create+0x1b0/0x910 [ 1025.925114] ? ksys_write+0x1a7/0x260 [ 1025.925597] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1025.926247] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1025.926869] do_syscall_64+0x3f/0x90 [ 1025.927355] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1025.927996] RIP: 0033:0x7fcb02883b19 [ 1025.928520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.930947] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1025.931976] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1025.933017] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1025.934069] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1025.935093] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1025.936125] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1025.937235] 18:41:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7cf198de, 0x141000) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 18:41:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) (fail_nth: 3) 18:41:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) (fail_nth: 1) 18:41:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "3948a9"}, 0x28) 18:41:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 4) [ 1026.150375] FAULT_INJECTION: forcing a failure. [ 1026.150375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.151289] CPU: 0 PID: 7381 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1026.151831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1026.152357] Call Trace: [ 1026.152533] [ 1026.152691] dump_stack_lvl+0xc1/0xf0 [ 1026.152964] should_fail_ex+0x4b4/0x5b0 [ 1026.152997] _copy_from_user+0x30/0xf0 [ 1026.153026] sg_write.part.0+0x1c9/0xac0 [ 1026.153051] ? __pfx___lock_acquire+0x10/0x10 [ 1026.153071] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1026.153092] ? __pfx_sg_write.part.0+0x10/0x10 [ 1026.153121] ? __lock_acquire+0xc29/0x64f0 [ 1026.153146] ? __pfx_lock_release+0x10/0x10 [ 1026.153186] ? find_held_lock+0x2c/0x110 [ 1026.153212] ? inode_security+0x105/0x140 [ 1026.153236] ? avc_policy_seqno+0x9/0x20 [ 1026.153252] ? selinux_file_permission+0x96/0x510 [ 1026.153282] sg_write+0x8d/0xe0 [ 1026.153307] vfs_write+0x2b8/0xd40 [ 1026.153326] ? __pfx_sg_write+0x10/0x10 [ 1026.153351] ? __pfx_vfs_write+0x10/0x10 [ 1026.153373] ? __fget_files+0x270/0x480 [ 1026.153403] ? __fget_light+0xe5/0x280 [ 1026.153430] ksys_write+0x12b/0x260 [ 1026.153448] ? __pfx_ksys_write+0x10/0x10 [ 1026.153470] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1026.159816] do_syscall_64+0x3f/0x90 [ 1026.159839] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1026.159864] RIP: 0033:0x7fa020ab0b19 [ 1026.161060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1026.161081] RSP: 002b:00007fa01e026188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.161105] RAX: ffffffffffffffda RBX: 00007fa020bc3f60 RCX: 00007fa020ab0b19 [ 1026.161121] RDX: 000000000000002f RSI: 0000000020000000 RDI: 0000000000000003 [ 1026.161132] RBP: 00007fa01e0261d0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.166032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.166537] R13: 00007ffd44a7078f R14: 00007fa01e026300 R15: 0000000000022000 [ 1026.167042] [ 1026.171167] FAULT_INJECTION: forcing a failure. [ 1026.171167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.172958] CPU: 1 PID: 7380 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1026.174295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1026.175635] Call Trace: [ 1026.176032] [ 1026.176377] dump_stack_lvl+0xc1/0xf0 [ 1026.176982] should_fail_ex+0x4b4/0x5b0 [ 1026.177628] _copy_to_iter+0x6b1/0x14a0 [ 1026.178258] ? mark_held_locks+0x9e/0xe0 [ 1026.178981] ? __pfx__copy_to_iter+0x10/0x10 [ 1026.179808] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1026.180634] ? __local_bh_enable_ip+0xa1/0x110 [ 1026.181357] ? __virt_addr_valid+0x102/0x340 [ 1026.182031] ? __check_object_size+0x3d4/0x8c0 [ 1026.182735] seq_read_iter+0x71e/0x1300 [ 1026.183362] seq_read+0x171/0x210 [ 1026.183953] ? __pfx_seq_read+0x10/0x10 [ 1026.184515] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1026.185223] ? fsnotify_perm.part.0+0x221/0x610 [ 1026.185863] ? __pfx_seq_read+0x10/0x10 [ 1026.186596] proc_reg_read+0x22e/0x310 [ 1026.187137] vfs_read+0x1e4/0x8b0 [ 1026.187614] ? __pfx_proc_reg_read+0x10/0x10 [ 1026.188214] ? __pfx_vfs_read+0x10/0x10 [ 1026.188746] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1026.189426] ? __fget_files+0x270/0x480 [ 1026.190047] __x64_sys_pread64+0x1ff/0x260 [ 1026.190776] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1026.191637] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1026.192414] do_syscall_64+0x3f/0x90 [ 1026.192967] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1026.193712] RIP: 0033:0x7f991d66eb19 [ 1026.194242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1026.196765] RSP: 002b:00007f991abe4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1026.197818] RAX: ffffffffffffffda RBX: 00007f991d781f60 RCX: 00007f991d66eb19 [ 1026.198783] RDX: 00000000000000aa RSI: 0000000020000040 RDI: 0000000000000003 [ 1026.199973] RBP: 00007f991abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.200943] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1026.201926] R13: 00007ffc739f73bf R14: 00007f991abe4300 R15: 0000000000022000 [ 1026.202928] [ 1026.297581] FAULT_INJECTION: forcing a failure. [ 1026.297581] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.299196] CPU: 1 PID: 7388 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1026.300300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1026.301405] Call Trace: [ 1026.301768] [ 1026.302092] dump_stack_lvl+0xc1/0xf0 [ 1026.302651] should_fail_ex+0x4b4/0x5b0 [ 1026.303240] should_failslab+0x9/0x20 [ 1026.303793] kmem_cache_alloc_lru+0x6b/0x600 [ 1026.304430] ? shmem_alloc_inode+0x27/0x50 [ 1026.305055] ? lock_release+0x1e3/0x680 [ 1026.305654] shmem_alloc_inode+0x27/0x50 [ 1026.306247] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1026.306924] alloc_inode+0x63/0x240 [ 1026.307464] new_inode+0x25/0x1f0 [ 1026.307993] shmem_get_inode+0x183/0xeb0 [ 1026.308591] ? do_raw_spin_unlock+0x53/0x220 [ 1026.309246] __shmem_file_setup+0x171/0x300 [ 1026.309880] __do_sys_memfd_create+0x32b/0x910 [ 1026.310516] ? ksys_write+0x1a7/0x260 [ 1026.311074] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1026.311785] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1026.312535] do_syscall_64+0x3f/0x90 [ 1026.313091] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1026.313836] RIP: 0033:0x7fcb02883b19 [ 1026.314356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1026.316764] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1026.317816] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1026.318790] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1026.319773] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1026.320749] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1026.321739] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1026.322717] 18:41:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 5) 18:41:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xa4ffffff}}}, 0x108) 18:41:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x6e) recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/72, 0x48}], 0x8, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2000) 18:41:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) (fail_nth: 2) 18:41:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) (fail_nth: 4) 18:41:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1040.458996] FAULT_INJECTION: forcing a failure. [ 1040.458996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.460209] CPU: 0 PID: 7398 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1040.460998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.461784] Call Trace: [ 1040.462038] [ 1040.462266] dump_stack_lvl+0xc1/0xf0 [ 1040.462669] should_fail_ex+0x4b4/0x5b0 [ 1040.463079] _copy_from_user+0x30/0xf0 [ 1040.463474] sg_write.part.0+0x5f1/0xac0 [ 1040.463896] ? __pfx_sg_write.part.0+0x10/0x10 [ 1040.464380] ? __lock_acquire+0xc29/0x64f0 [ 1040.464817] ? __pfx_lock_release+0x10/0x10 [ 1040.465247] ? find_held_lock+0x2c/0x110 [ 1040.465716] ? inode_security+0x105/0x140 [ 1040.466137] ? avc_policy_seqno+0x9/0x20 [ 1040.466534] ? selinux_file_permission+0x96/0x510 [ 1040.466954] sg_write+0x8d/0xe0 [ 1040.467250] vfs_write+0x2b8/0xd40 [ 1040.467568] ? __pfx_sg_write+0x10/0x10 [ 1040.467912] ? __pfx_vfs_write+0x10/0x10 [ 1040.468271] ? __fget_files+0x270/0x480 [ 1040.468642] ? __fget_light+0xe5/0x280 [ 1040.468984] ksys_write+0x12b/0x260 [ 1040.469313] ? __pfx_ksys_write+0x10/0x10 [ 1040.469675] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1040.470107] do_syscall_64+0x3f/0x90 [ 1040.470436] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1040.470868] RIP: 0033:0x7fa020ab0b19 [ 1040.471183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.472663] RSP: 002b:00007fa01e026188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1040.473289] RAX: ffffffffffffffda RBX: 00007fa020bc3f60 RCX: 00007fa020ab0b19 [ 1040.473899] RDX: 000000000000002f RSI: 0000000020000000 RDI: 0000000000000003 [ 1040.474480] RBP: 00007fa01e0261d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.475068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.475651] R13: 00007ffd44a7078f R14: 00007fa01e026300 R15: 0000000000022000 [ 1040.476247] [ 1040.483116] loop3: detected capacity change from 0 to 4 [ 1040.485616] FAULT_INJECTION: forcing a failure. [ 1040.485616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.486540] CPU: 1 PID: 7403 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1040.487107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.487669] Call Trace: [ 1040.487852] [ 1040.488021] dump_stack_lvl+0xc1/0xf0 [ 1040.488309] should_fail_ex+0x4b4/0x5b0 [ 1040.488611] _copy_to_iter+0x6b1/0x14a0 [ 1040.488916] ? find_held_lock+0x2c/0x110 [ 1040.489209] ? __pfx__copy_to_iter+0x10/0x10 [ 1040.489550] ? lock_release+0x1e3/0x680 [ 1040.489841] ? __pfx_lock_release+0x10/0x10 [ 1040.490149] ? mark_held_locks+0x9e/0xe0 [ 1040.490444] ? __virt_addr_valid+0x102/0x340 [ 1040.490769] ? __check_object_size+0x3d4/0x8c0 [ 1040.491086] seq_read_iter+0xdb2/0x1300 [ 1040.491390] seq_read+0x171/0x210 [ 1040.491643] ? __pfx_seq_read+0x10/0x10 [ 1040.491934] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1040.492309] ? fsnotify_perm.part.0+0x221/0x610 [ 1040.492638] ? __pfx_seq_read+0x10/0x10 [ 1040.492929] proc_reg_read+0x22e/0x310 [ 1040.493207] vfs_read+0x1e4/0x8b0 [ 1040.493484] ? __pfx_proc_reg_read+0x10/0x10 [ 1040.493791] ? __pfx_vfs_read+0x10/0x10 [ 1040.494065] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1040.494427] ? __fget_files+0x270/0x480 [ 1040.494736] __x64_sys_pread64+0x1ff/0x260 [ 1040.495027] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1040.495370] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1040.495730] do_syscall_64+0x3f/0x90 [ 1040.495992] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1040.496366] RIP: 0033:0x7f991d66eb19 [ 1040.496618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.497859] RSP: 002b:00007f991abe4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1040.498388] RAX: ffffffffffffffda RBX: 00007f991d781f60 RCX: 00007f991d66eb19 [ 1040.498882] RDX: 00000000000000aa RSI: 0000000020000040 RDI: 0000000000000003 [ 1040.499371] RBP: 00007f991abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.499871] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1040.500363] R13: 00007ffc739f73bf R14: 00007f991abe4300 R15: 0000000000022000 [ 1040.500880] [ 1040.509949] EXT4-fs (loop3): Invalid log block size: 33554433 18:41:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 6) 18:41:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) (fail_nth: 3) 18:41:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xffffffa4}}}, 0x108) 18:41:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:41:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) (fail_nth: 1) 18:41:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffe5e, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIONCLEX(r0, 0x5450) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x13c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0xfffffffffffffe7f, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x6, 0x5, 0x20, 0x72f, 0x77164619, 0x6]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x0, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x7f, 0x61}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x6, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x4, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x3, 0x80}}, @CTA_PROTOINFO_TCP_STATE={0x0, 0x1, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x40, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x1, 0xf7}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x0, 0x3, 0x6}]}}, @CTA_ZONE={0x6}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x11c6c98d}, @CTA_ID={0x8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) [ 1040.619173] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1040.619173] program syz-executor.6 not setting count and/or reply_len properly [ 1040.632342] FAULT_INJECTION: forcing a failure. [ 1040.632342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.633373] CPU: 1 PID: 7411 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1040.634111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.634690] Call Trace: [ 1040.634879] [ 1040.635047] dump_stack_lvl+0xc1/0xf0 [ 1040.635331] should_fail_ex+0x4b4/0x5b0 [ 1040.635636] _copy_to_user+0x30/0xc0 [ 1040.635923] simple_read_from_buffer+0xd0/0x170 [ 1040.636249] proc_fail_nth_read+0x19c/0x230 [ 1040.636560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1040.636904] ? security_file_permission+0xb5/0xe0 [ 1040.637254] vfs_read+0x1e4/0x8b0 [ 1040.637516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1040.637865] ? __pfx_vfs_read+0x10/0x10 [ 1040.638159] ? __fget_files+0x270/0x480 [ 1040.638467] ksys_read+0x12b/0x260 [ 1040.638736] ? __pfx_ksys_read+0x10/0x10 [ 1040.639040] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1040.639419] do_syscall_64+0x3f/0x90 [ 1040.639700] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1040.640069] RIP: 0033:0x7fa020a6369c [ 1040.640329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1040.641574] RSP: 002b:00007fa01e026170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1040.642099] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa020a6369c [ 1040.642590] RDX: 000000000000000f RSI: 00007fa01e0261e0 RDI: 0000000000000004 [ 1040.643083] RBP: 00007fa01e0261d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.643573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.644058] R13: 00007ffd44a7078f R14: 00007fa01e026300 R15: 0000000000022000 [ 1040.644560] [ 1040.682209] FAULT_INJECTION: forcing a failure. [ 1040.682209] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.683089] CPU: 1 PID: 7416 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1040.683661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.684213] Call Trace: [ 1040.684396] [ 1040.684563] dump_stack_lvl+0xc1/0xf0 [ 1040.684843] should_fail_ex+0x4b4/0x5b0 [ 1040.685147] ? security_inode_alloc+0x38/0x160 [ 1040.685495] should_failslab+0x9/0x20 [ 1040.685780] kmem_cache_alloc+0x5a/0x390 [ 1040.686076] security_inode_alloc+0x38/0x160 [ 1040.686400] inode_init_always+0xbb2/0xea0 [ 1040.686710] alloc_inode+0x84/0x240 [ 1040.686981] new_inode+0x25/0x1f0 [ 1040.687232] shmem_get_inode+0x183/0xeb0 [ 1040.687525] ? do_raw_spin_unlock+0x53/0x220 [ 1040.687868] __shmem_file_setup+0x171/0x300 [ 1040.688191] __do_sys_memfd_create+0x32b/0x910 [ 1040.688521] ? ksys_write+0x1a7/0x260 [ 1040.688793] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1040.689145] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1040.689533] do_syscall_64+0x3f/0x90 [ 1040.689796] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1040.690161] RIP: 0033:0x7fcb02883b19 [ 1040.690418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.691627] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1040.692145] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1040.692625] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1040.693116] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1040.693591] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1040.694076] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1040.694577] [ 1040.697433] FAULT_INJECTION: forcing a failure. [ 1040.697433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.698412] CPU: 1 PID: 7417 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1040.699027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.699750] Call Trace: [ 1040.699940] [ 1040.700104] dump_stack_lvl+0xc1/0xf0 [ 1040.700373] should_fail_ex+0x4b4/0x5b0 [ 1040.700720] _copy_from_user+0x30/0xf0 [ 1040.701064] sg_write.part.0+0x1c9/0xac0 [ 1040.701455] ? __pfx___lock_acquire+0x10/0x10 [ 1040.701910] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1040.702270] ? __pfx_sg_write.part.0+0x10/0x10 [ 1040.702605] ? __lock_acquire+0xc29/0x64f0 [ 1040.702917] ? __pfx_lock_release+0x10/0x10 [ 1040.703330] ? find_held_lock+0x2c/0x110 [ 1040.703683] ? inode_security+0x105/0x140 [ 1040.704061] ? avc_policy_seqno+0x9/0x20 [ 1040.704408] ? selinux_file_permission+0x96/0x510 [ 1040.704760] sg_write+0x8d/0xe0 [ 1040.705008] vfs_write+0x2b8/0xd40 [ 1040.705257] ? __pfx_sg_write+0x10/0x10 [ 1040.705575] ? __pfx_vfs_write+0x10/0x10 [ 1040.705862] ? __fget_files+0x270/0x480 [ 1040.706154] ? __fget_light+0xe5/0x280 [ 1040.706437] ksys_write+0x12b/0x260 [ 1040.706698] ? __pfx_ksys_write+0x10/0x10 [ 1040.706995] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1040.707358] do_syscall_64+0x3f/0x90 [ 1040.707630] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1040.707987] RIP: 0033:0x7fd78f9a7b19 [ 1040.708249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.709467] RSP: 002b:00007fd78cf1d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1040.709966] RAX: ffffffffffffffda RBX: 00007fd78fabaf60 RCX: 00007fd78f9a7b19 [ 1040.710426] RDX: 000000000000002f RSI: 0000000020000000 RDI: 0000000000000003 [ 1040.710893] RBP: 00007fd78cf1d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.711382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.711869] R13: 00007ffd3068923f R14: 00007fd78cf1d300 R15: 0000000000022000 [ 1040.712362] 18:42:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) (fail_nth: 5) 18:42:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) (fail_nth: 2) 18:42:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:09 executing program 7: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x464, 0x100, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x24000084) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="fa178ec3b857722280a3eb358703c8b37f916986e4360ffbc0ed359882f60994fbc7ee18006a47e8aca2f02110fddd14d1ebd6f0f14f3feea21bbae173b11f1c525c639ebe9233e63d67211adf70a77844dd65d6952390f7b22718", 0x5b}], 0x1, &(0x7f0000000340)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x53, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}]}, @noop, @timestamp={0x44, 0x8, 0x1a, 0x0, 0xe, [0x1d4]}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x1, [0x7fffffff, 0x0, 0x2]}, @generic={0xce, 0xf, "ff76d96f267ba9d1def89709af"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x2, [{@local, 0x27}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @rr={0x7, 0xf, 0x15, [@broadcast, @empty, @multicast2]}]}}}], 0xa8}}], 0x1, 0x800) 18:42:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:09 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x145) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x0, 0x80, 0x8, 0x0, 0x3, 0x31122, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp, 0x2488, 0x6, 0x3, 0xc, 0x8, 0x1, 0x1ee, 0x0, 0x9, 0x0, 0xfffffffffffff001}, r0, 0x2, r1, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 18:42:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 7) [ 1053.684482] FAULT_INJECTION: forcing a failure. [ 1053.684482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.684914] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1053.684914] program syz-executor.6 not setting count and/or reply_len properly [ 1053.686070] CPU: 1 PID: 7436 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1053.688884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.689897] Call Trace: [ 1053.690236] [ 1053.690524] dump_stack_lvl+0xc1/0xf0 [ 1053.691030] should_fail_ex+0x4b4/0x5b0 [ 1053.691572] _copy_to_user+0x30/0xc0 [ 1053.692072] simple_read_from_buffer+0xd0/0x170 [ 1053.692676] proc_fail_nth_read+0x19c/0x230 [ 1053.693230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.693863] ? security_file_permission+0xb5/0xe0 [ 1053.694484] vfs_read+0x1e4/0x8b0 [ 1053.694931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.695529] ? __pfx_vfs_read+0x10/0x10 [ 1053.696047] ? __fget_files+0x270/0x480 [ 1053.696579] ksys_read+0x12b/0x260 [ 1053.697039] ? __pfx_ksys_read+0x10/0x10 [ 1053.697559] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1053.698233] do_syscall_64+0x3f/0x90 [ 1053.698711] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1053.699361] RIP: 0033:0x7f991d62169c [ 1053.699821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1053.701986] RSP: 002b:00007f991abe4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1053.702903] RAX: ffffffffffffffda RBX: 00000000000000aa RCX: 00007f991d62169c [ 1053.703762] RDX: 000000000000000f RSI: 00007f991abe41e0 RDI: 0000000000000004 [ 1053.704618] RBP: 00007f991abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.705468] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1053.706333] R13: 00007ffc739f73bf R14: 00007f991abe4300 R15: 0000000000022000 [ 1053.707217] [ 1053.733723] FAULT_INJECTION: forcing a failure. [ 1053.733723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.735344] CPU: 0 PID: 7438 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1053.736381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.737483] Call Trace: [ 1053.737856] [ 1053.738182] dump_stack_lvl+0xc1/0xf0 [ 1053.738725] should_fail_ex+0x4b4/0x5b0 [ 1053.739318] _copy_to_user+0x30/0xc0 [ 1053.739872] simple_read_from_buffer+0xd0/0x170 [ 1053.740534] proc_fail_nth_read+0x19c/0x230 [ 1053.741135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.741846] ? security_file_permission+0xb5/0xe0 [ 1053.742530] vfs_read+0x1e4/0x8b0 [ 1053.743031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.743673] ? __pfx_vfs_read+0x10/0x10 [ 1053.744195] ? __fget_files+0x270/0x480 [ 1053.744789] ksys_read+0x12b/0x260 [ 1053.745306] ? __pfx_ksys_read+0x10/0x10 [ 1053.745894] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1053.746638] do_syscall_64+0x3f/0x90 [ 1053.747192] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1053.747946] RIP: 0033:0x7fd78f95a69c [ 1053.748468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1053.750891] RSP: 002b:00007fd78cf1d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1053.751874] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd78f95a69c [ 1053.752825] RDX: 000000000000000f RSI: 00007fd78cf1d1e0 RDI: 0000000000000004 [ 1053.753823] RBP: 00007fd78cf1d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.754810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.755793] R13: 00007ffd3068923f R14: 00007fd78cf1d300 R15: 0000000000022000 [ 1053.756969] [ 1053.787965] loop3: detected capacity change from 0 to 4 18:42:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1053.823073] EXT4-fs (loop3): Invalid log block size: 33554433 18:42:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) socket$inet_udp(0x2, 0x2, 0x0) 18:42:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0xa, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 8) [ 1054.221396] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1054.221396] program syz-executor.6 not setting count and/or reply_len properly [ 1054.250197] FAULT_INJECTION: forcing a failure. [ 1054.250197] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.251771] CPU: 1 PID: 7459 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1054.252738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.253722] Call Trace: [ 1054.254045] [ 1054.254334] dump_stack_lvl+0xc1/0xf0 [ 1054.254832] should_fail_ex+0x4b4/0x5b0 [ 1054.255357] should_failslab+0x9/0x20 [ 1054.255847] kmem_cache_alloc_lru+0x6b/0x600 [ 1054.256439] ? __d_alloc+0x31/0x9c0 [ 1054.256911] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1054.257566] __d_alloc+0x31/0x9c0 [ 1054.258014] ? get_random_u32+0x3b2/0x670 [ 1054.258559] d_alloc_pseudo+0x1d/0x70 [ 1054.259053] alloc_file_pseudo+0xd2/0x260 [ 1054.259585] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1054.260191] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 1054.260884] ? shmem_get_inode+0x6be/0xeb0 [ 1054.261432] ? do_raw_spin_unlock+0x53/0x220 [ 1054.262032] __shmem_file_setup+0x202/0x300 [ 1054.262591] __do_sys_memfd_create+0x32b/0x910 [ 1054.263496] ? ksys_write+0x1a7/0x260 [ 1054.264019] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1054.264662] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1054.265314] do_syscall_64+0x3f/0x90 [ 1054.265922] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1054.266572] RIP: 0033:0x7fcb02883b19 [ 1054.267033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.269167] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1054.270097] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1054.270952] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1054.271794] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1054.272637] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1054.273479] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1054.274354] 18:42:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '#dev/sg#\x00'}]}, 0x2f) 18:42:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 18:42:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x10, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0x4d, 0x2) 18:42:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 9) 18:42:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, ')dev/sg#\x00'}]}, 0x2f) 18:42:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffffffffffdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:22 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000140)={0xfffffff7, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) 18:42:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x25, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000140)=""/213, 0xd5}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/63, 0x3f}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/239, 0xef}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000a80)=""/75, 0x4b}, {&(0x7f0000000b00)=""/105, 0x69}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/168, 0xa8}, {&(0x7f0000001c40)=""/247, 0xf7}], 0x5, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000003280)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/245, 0xf5}, {&(0x7f0000003040)=""/99, 0x63}, {&(0x7f00000030c0)=""/25, 0x19}, {&(0x7f0000003100)=""/160, 0xa0}, {&(0x7f00000031c0)=""/171, 0xab}], 0x6, &(0x7f0000003300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/238, 0xee}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/143, 0x8f}, {&(0x7f0000005640)=""/166, 0xa6}], 0x5, &(0x7f0000005780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000005800), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/241, 0xf1}, {&(0x7f0000005980)=""/194, 0xc2}], 0x2, &(0x7f0000005ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x6, 0x0, &(0x7f0000005c80)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x5, 0x7f, 0x20, 0x0, 0x5, 0xee93b38ec9ef096b, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x100000000, 0xffffffffffff0000}, 0x1080, 0x4, 0x8001, 0x5, 0x1, 0x72d, 0x8000, 0x0, 0x7, 0x0, 0x92ab}, r2, 0x7, r0, 0x2) [ 1066.810948] loop3: detected capacity change from 0 to 4 18:42:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1066.839180] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1066.842029] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1066.842029] program syz-executor.6 not setting count and/or reply_len properly 18:42:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0x63, 0x2) 18:42:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 10) 18:42:23 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x2f, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1067.079649] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1067.079649] program syz-executor.6 not setting count and/or reply_len properly [ 1067.112042] FAULT_INJECTION: forcing a failure. [ 1067.112042] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.113013] CPU: 1 PID: 7508 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1067.113536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.114092] Call Trace: [ 1067.114271] [ 1067.114428] dump_stack_lvl+0xc1/0xf0 [ 1067.114702] should_fail_ex+0x4b4/0x5b0 [ 1067.114986] ? __alloc_file+0x21/0x240 [ 1067.115265] should_failslab+0x9/0x20 [ 1067.115530] kmem_cache_alloc+0x5a/0x390 [ 1067.115814] __alloc_file+0x21/0x240 [ 1067.116075] alloc_empty_file+0x71/0x190 [ 1067.116360] alloc_file+0x5e/0x810 [ 1067.116613] alloc_file_pseudo+0x16e/0x260 [ 1067.116907] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1067.117215] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 1067.117589] ? do_raw_spin_unlock+0x53/0x220 [ 1067.117910] __shmem_file_setup+0x202/0x300 [ 1067.118216] __do_sys_memfd_create+0x32b/0x910 [ 1067.118525] ? ksys_write+0x1a7/0x260 [ 1067.118792] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1067.119132] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1067.119489] do_syscall_64+0x3f/0x90 [ 1067.119749] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1067.120105] RIP: 0033:0x7fcb02883b19 [ 1067.120340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.121504] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1067.122015] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1067.122477] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1067.122945] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1067.123408] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1067.123896] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1067.124395] 18:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 11) 18:42:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x53f, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x1f, 0x4) 18:42:34 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x5c, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0xec3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:42:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev#sg#\x00'}]}, 0x2f) 18:42:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffffffffffdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:42:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x3) [ 1078.523025] loop3: detected capacity change from 0 to 4 [ 1078.531898] EXT4-fs (loop3): Invalid log block size: 33554433 18:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 12) [ 1078.570474] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1078.570474] program syz-executor.6 not setting count and/or reply_len properly 18:42:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x7, {{0x2, 0x4e24, @remote}}, 0x0, 0x1, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x110) 18:42:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:42:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x4) 18:42:34 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@\n{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffffffffffdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev)sg#\x00'}]}, 0x2f) 18:42:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x9c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x13}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "7817daabb9c51afa70caa935640d4fec"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_PMKID={0x14, 0x55, "6a62a4f26eb5c55e7f3db3a8171c7ca8"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "3e48533e308dae55bb84be97aefc91a6"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pread64(r3, &(0x7f0000000000)=""/116, 0x74, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x5c0, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x11, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0xb, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_FTM_RESPONDER={0xf8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf4, 0x3, "40f5f55865c64aa9772479fce1fe6758ed98196b8ad796d5d03bdad892c7a01f17fbea3d8bd6b6efad95ebffa036507e18d5d86c36ca84b60f392b1c265ef58ad8a4cdc3f1fbc766f0d4db346481d90b35d51a693d28f0cb83ad5d184055062f0e1941b126fa9fa7a00be400c913ac72a3afea381c3093afc62e8d6889722635b0560a17f962e1e9fbde366048bf78778ea615fd1b219d92b7058a3e6a3ba5aabc00be4254d413df10eed017eb742f6d7ccdecdc326cdb4a19c043a487517aca2644d24c1e038e8bf7494968c785dc35290a7d8af63185a549daa02b4df6329778b1d7d6ceac5b52061fe7bacd197c37"}]}, @NL80211_ATTR_BEACON_HEAD={0x491, 0xe, {@wo_ht={{}, {0x7f7f}, @device_a, @broadcast, @random="03bdc7e3b02c", {0x5, 0x6}}, 0xfffffffeffffffff, @random=0x1000, 0x80, @void, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x5, 0x1, 0x1, 0xffff}}, @val={0x6, 0x2, 0x200}, @val={0x5, 0x6e, {0xff, 0x43, 0xf6, "ca95f0861eb770e4ee29db36e561a39d1d50661a7e759550daf3e1c1cb599ed795486f525bbd435684e7499cad979ad39a64598be23bf419c81e04828f1ff4390f592a543ae88742be602f8854b6acbd966c5dcc0d7bc94e2ff767cc3c3e191a57540db94f4dbbb46c9ede"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x0, 0x0, {0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x937cec916e71f345, 0x8000, 0xa}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x20}}, @val={0x76, 0x6, {0x0, 0x3, 0x13, 0xfff7}}, [{0xdd, 0xb0, "d84f49aec65e8aee3a68a539156102880193a7280ae74166911740e4b69dffbe1fb1a07e446dc5fb6c47506af6fac5d8f0daca7273cc9361eeb96fbf10678fe808e682fcd93f7205b7d66d265d15bd3f1fe4cc1db4d724742c2f18f246039c86d992cfe3b4cf4d69dc52ff55e38a48dfa49af6077bb184031d6f4473fc91e29c0a4d76b54e94a6d83b512eb6bb6549ff808f5d6505f73071c5b705ea1f6f4b947ade3d3fc1c4a782453266e6dabd0231"}, {0xdd, 0xcc, "97c3092a7cb4edcb01b0644a9a63202a39c21e3ff7d947bebc5f29ffb9c93f9f3c6085fd6e1c7ede44484bbd2dc95910a299eda8eb9343a077d67c23c17946e8b464321c0d0be73796460f9027ea94cc18fd9be23e24f87a3f00129a342483460ed2f548d8b408b97674c8300a60860484a901003f3033a707f722c2950a75d27171f4f7703c7f6dab814b393c0e4679bfc539ce21efffd4dce465088fb39ed7081a91af57f3e1b2a40cbfb95a5c6f4ae69b296d744f2011dabea0a1731c2202223e7212a3eec49b9c037a24"}, {0xdd, 0x16, "f482eab6a59ecb3c73c7021c851bac6378caef371be9"}, {0xdd, 0x3f, "b60b72110795edec297281c17fa0bd1fd1265d8865ecceecf78f0f7f5ceee31166f15026f77d9cd0e5d9725286e118fa8ccc61fa68a39ca2d20468eeb5db76"}, {0xdd, 0xf1, "d757144c0701c321b34725e70f5404261540bf35df1156bf240056ac3144bd4ebad7461c98571b07113bae850679b4261358341a052553c98ddbb910c95021e92f086f5367d9fb01a4fc023524cb57a241112b502a4b6a57825dde86a44c5c47086fe593aeb88b5cd02e59b15363cee16f323f5265b4139e548ca6656cbe84340a5be1dffc4c9d67a580eac0991bc7060f47bbee049855cedd90fe8c9004c877be5fc124bda0468f046d7feb3e2f9296c95215f6447b674f7e1894573bfb832f91048e012e605209623dd3c004c2deccc8b131eb610aa00196f6edafb9af65d5c3e461f8bbb2a0c6dc795caeee39f4f039"}, {0xdd, 0x74, "74a34b975d7670f6268bf71daefd05b61951f166ab412907092dff45abd6d8a3aa6d06bb52240ddcecf9747371aaba9d731fd31b67a6468912181f7a51ec299b0f301b24328df09b51082a1971aebc55453fe8720884b401cf86b04ae8e9d2aff2a43980ff121881146814a25f6fda8560cce458"}, {0xdd, 0x6e, "22261b22d96bc9e92c7c621cbe79dd3941e9eaa9dd72971dd41f7db1af8092b19fe0abbf96ce3e8064250b1e92af7d34f27a0f8f903719a841f2894156cf1cc0313497fcea3a546936f72e123a8674aaff58eab0ddd005615b6f0340a11da007932c17e0e93821b82cd8377be3b9"}]}}]]}, 0x5c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000001) [ 1078.751361] FAULT_INJECTION: forcing a failure. [ 1078.751361] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.752852] CPU: 0 PID: 7538 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1078.753973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.754941] Call Trace: [ 1078.755265] [ 1078.755552] dump_stack_lvl+0xc1/0xf0 [ 1078.756040] should_fail_ex+0x4b4/0x5b0 [ 1078.756556] ? security_file_alloc+0x38/0x170 [ 1078.757111] should_failslab+0x9/0x20 [ 1078.757597] kmem_cache_alloc+0x5a/0x390 [ 1078.758135] security_file_alloc+0x38/0x170 [ 1078.758671] __alloc_file+0xb6/0x240 [ 1078.759154] alloc_empty_file+0x71/0x190 [ 1078.759674] alloc_file+0x5e/0x810 [ 1078.760146] alloc_file_pseudo+0x16e/0x260 [ 1078.760679] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1078.761274] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 1078.761977] ? do_raw_spin_unlock+0x53/0x220 [ 1078.762541] __shmem_file_setup+0x202/0x300 [ 1078.763094] __do_sys_memfd_create+0x32b/0x910 [ 1078.763661] ? ksys_write+0x1a7/0x260 [ 1078.764141] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 1078.764772] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1078.765420] do_syscall_64+0x3f/0x90 [ 1078.765901] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1078.766541] RIP: 0033:0x7fcb02883b19 [ 1078.766998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.769096] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1078.770008] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02883b19 [ 1078.770841] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcb028dd0fb [ 1078.771691] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1078.772524] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1078.773356] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020012c00 [ 1078.774237] [ 1078.834715] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1078.834715] program syz-executor.6 not setting count and/or reply_len properly [ 1078.888933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1078.915097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:42:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@%{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:47 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac1e00010a019860df65b8ba4b0d00006401fbffab1414bb640101001c0296d626d970be7c1ec5e8736ddcf5506cf8042596733ea8f5298dccea71d32726521e3bedd03040ee20"], 0x1c) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:42:47 executing program 4: r0 = semget$private(0x0, 0x1, 0x620) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000100)=""/215) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = getpgid(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x87f278487e516ee, 0x80, 0x1, 0x5, 0x7, 0xa4, 0x0, 0x53, 0x102, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1a14, 0x9}, 0x10000, 0x40, 0x9104, 0x8, 0x3, 0x1, 0x1f, 0x0, 0x4, 0x0, 0x4c17}, r3, 0x7, r5, 0x9) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000004c0)) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000200)={0x5385, 0x1f, 0x1, 0x36c, 0x9, [{0x4, 0x8ac, 0x2, '\x00', 0x100}, {0x2, 0x5, 0x1, '\x00', 0x400}, {0x1, 0x4, 0x9, '\x00', 0x100}, {0x7, 0x8000000000000000, 0xff, '\x00', 0x1100}, {0x373c00000000000, 0x100, 0x40, '\x00', 0x2500}, {0x81, 0xffffffffffff0001, 0x0, '\x00', 0x1605}, {0xc233000000000000, 0x8, 0x4, '\x00', 0x10}, {0x20, 0x9, 0x180000, '\x00', 0x500}, {0x5, 0x20, 0x1, '\x00', 0x2001}]}) close_range(r1, 0xffffffffffffffff, 0x0) 18:42:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x23) 18:42:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0xfffffffffffffe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:42:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x6) 18:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 13) 18:42:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x29) [ 1091.835149] loop3: detected capacity change from 0 to 4 [ 1091.836702] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1091.836702] program syz-executor.6 not setting count and/or reply_len properly [ 1091.844009] EXT4-fs (loop3): Invalid log block size: 33554433 18:42:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x10) 18:42:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:42:48 executing program 7: munlockall() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 14) 18:42:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@\n+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:42:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/183) io_setup(0x4, &(0x7f0000000000)=0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4002, 0x104, 0x3}, 0x18) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f00000001c0)="4c50369ed129791ce19f26b80575ab923d7b931207e786a7c745ab2743514001a0b2ab7950079726df48689e0f4d0a0a000bda7a716606c3191b1d8b06bc328259c97aa3ec61daadda6e24954c4d8d4bc23300d86f34c40523a945b4002a028d3136745ed06cdc89e42bf100c63ad0df7b6bfd3f3479cebbc5121f64d061f3070368a74e64bb9dd8efc8844316da211d1623203250d440b093336d966061cd76c5dd94db52b179d22e61fba377912c149a27f854073151c05299c72dadce991a0223bdd5b008e00bb6ce29d2050f74a602eed2364c372c5c7c5138337a5c", 0xde, 0x7, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)="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", 0xfd, 0x9, 0x0, 0x0, r2}]) close_range(r0, 0xffffffffffffffff, 0x0) 18:42:48 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r2, r3, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1092.172568] FAULT_INJECTION: forcing a failure. [ 1092.172568] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1092.174652] CPU: 1 PID: 7595 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1092.175731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.176810] Call Trace: [ 1092.177167] [ 1092.177484] dump_stack_lvl+0xc1/0xf0 [ 1092.178054] should_fail_ex+0x4b4/0x5b0 [ 1092.178636] __should_fail_alloc_page+0xe0/0x110 [ 1092.179306] prepare_alloc_pages+0x178/0x500 [ 1092.179940] __alloc_pages+0x149/0x480 [ 1092.180495] ? __pfx___alloc_pages+0x10/0x10 [ 1092.181114] ? __pfx___lock_acquire+0x10/0x10 [ 1092.181737] ? mark_lock.part.0+0xef/0x2f30 [ 1092.182350] ? lock_acquire+0x19a/0x4c0 [ 1092.182907] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1092.183562] ? avc_has_perm_noaudit+0x10b/0x3a0 [ 1092.184217] vma_alloc_folio+0xe2/0x450 [ 1092.184765] shmem_alloc_folio+0x11c/0x1f0 [ 1092.185365] ? __pfx_shmem_alloc_folio+0x10/0x10 [ 1092.186057] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1092.186894] ? percpu_counter_add_batch+0xc8/0x180 [ 1092.187590] ? __vm_enough_memory+0x188/0x3f0 [ 1092.188222] shmem_get_folio_gfp.constprop.0+0x794/0x17d0 [ 1092.188986] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1092.189792] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 1092.190617] ? mark_held_locks+0x9e/0xe0 [ 1092.191177] ? __pfx_shmem_xattr_handler_get+0x10/0x10 [ 1092.191904] shmem_write_begin+0x148/0x360 [ 1092.192490] ? __pfx_shmem_write_begin+0x10/0x10 [ 1092.193138] generic_perform_write+0x25a/0x580 [ 1092.193791] ? __pfx_generic_perform_write+0x10/0x10 [ 1092.194497] ? __pfx_file_update_time+0x10/0x10 [ 1092.195152] ? generic_write_checks+0x2c0/0x400 [ 1092.195817] __generic_file_write_iter+0x308/0x4b0 [ 1092.196513] generic_file_write_iter+0xe7/0x350 [ 1092.197174] vfs_write+0x941/0xd40 [ 1092.197684] ? __pfx_vfs_write+0x10/0x10 [ 1092.198306] __x64_sys_pwrite64+0x1ff/0x260 [ 1092.198909] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1092.199585] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1092.200279] do_syscall_64+0x3f/0x90 [ 1092.200808] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1092.201523] RIP: 0033:0x7fcb02836ab7 [ 1092.202041] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1092.204408] RSP: 002b:00007fcaffdf8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1092.205516] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836ab7 [ 1092.206625] RDX: 000000000000003a RSI: 0000000020000300 RDI: 0000000000000004 [ 1092.207701] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1092.208645] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1092.209587] R13: 0000000000000004 R14: 0000000020000380 R15: 0000000000000000 [ 1092.210575] [ 1092.216418] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1092.216418] program syz-executor.6 not setting count and/or reply_len properly [ 1092.292209] loop3: detected capacity change from 0 to 4 [ 1092.308380] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:43:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x4f) 18:43:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@%+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:43:02 executing program 7: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40842, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2f0c, &(0x7f0000000200)={0x0, 0x3, 0x1, 0x2, 0xe4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000001680)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x6, &(0x7f0000001600)=[{&(0x7f0000000300)="25e9ae23dbde03f457abe74997de9c9781b17bf42183251e4339b625e0fc382dcea809dfee2c2e175d7cb2da496c49e647215e1b41dc384e5b38355090c7d21f0c9dedf4ab029513d867be445a6807722449a7bd8bc862329a008c0b09fb43fea5e33e9788d471760fe0e8103b314e8bc5f6cdd5734a07f9308699caf8a3c2f9030c2059f4c528011a5bba6303150f68c13d03", 0x93}, {&(0x7f00000003c0)="a8649b", 0x3}, {&(0x7f0000000400)="1c75201ec309eb0e49e9dd2c563ff16fd59e588b87d0097f2597e02f431eaf3b2f564b88e5e9ecf53b2151dd8ade25d94f884eca48027bf4903dc71df1d27d3608df60d663244c27aecc944a4f5b9984b04862e67ec7a5fbec26b3011605f3123932818f8be59bfc9349387af233115bef15e60760c0a9df2a5f8de4", 0x7c}, {&(0x7f0000000480)="c42f81b22e4dc91c0f712ad268144a5521fb706bda2e6f28873832efc1ec4e10b82871e1b23b396b73f3391ea09f431f944347c18b4a3019b34566aa815833a2024af0328eb864894ea1e468d4fcabbf69a910852b6f58cb695c69da393ac57b2013fefd204cbf076f2ec33b8cb265bd0327df9450874ab4dba2db96534d1f69de172529a26b663c05703169d81752d856087ce6db9bd02b61e191366439099774f14fdeb62c7df85d70d9dd84ea37afd38be60de189dd465ad7a306489bca445d02ecbe56479a01e61edf8c80782c0510a368df4becac71dcec54de978b12f28c08139578180bb80915b0d7a158ff2c79229b17f8db02b5f7eeec19316020a61ee4d7dabf6598865d37af4d9e469fc4582f163813dd3b8e133b48765b75d6549d8b7c7a927df5e3aafe8508105bbb0792defe25a5cad820655423b7ffcd08184088f5dbe774f953f491495b012d407c39e1e787b43f3359abd1c703ac0eb3d0a065e13d54d37838b9968a8038b6ec9fc58d5ce54542abda494b661297c4e7b64dcafaffa1ee753f5fdd37ee6fba0b63c4471f974eec1323c7ced36403d8a45ee2524c7b8bbfda68b335520846452119d3a63fdaa3adf9536ca778d30d0a8401a8764de011edaa363a1f00a521a4552e4772115580934a974be9c64428f10aa92286c487a254d7babac5ca8034d67d82c72b619f1d48218adda1f6e01bbf083b5cd06d24fde2c7f8f01940caa31085f9f6a632a122c1e18d169affcc3f70c3d6cd378fed9b3729623ce0d092c6b60f5a05e5ed63f95922f1d0d0b1861e164ece41c55f8db08b65d4b4af8c9da933df6308556efd3ba71ed97e541f2d32153304acbb9315d57d5c43cbd6a32f18f664d4cc10d1bc6cc4fb0070eb854c6c86c6a5c8376f0e217eae1ecd836a06b2dbe37bfa948b854ad1072984c688b847a25d0eaeb479ad50b27661c5ac36a860ae980d08f3d878ebe48b44c41c108b420bc1422cd1a45f2662b568812fe3048572c88729870b9e675ca285d816b653f3410d33466d9cb4c0e6cf4f077c539e5c7bca61b29e6da0237280389c4bfc2eba3e6ef273160a18cb9a417efbb67e7acb536fdbc743de4faeda2822d0942088656e54e2fce26588e8bdc2c7abf6277f456b75d47a3516dbd948a8064f90bf681ed8a99c63187b657b04122b0780a853df1e43c8f0dddc5868b2405dc3a0c8befecad9fd48df2f2d62d42d7c112da2be74d2da8b34c3f4a6f2100b707f134cffa5ee4a015f498b633961a7a5fef5f395a7288e5883c65c14d9f99f1372f13a6ad4baf32303ef7072fa4325fcbbcd2189e6871e97ef953c2ded830c21338cb0e2b7147f3873e9302c4b641c44da4f9d49412fab86cf88b7e9a1d13dfeb4e7427ac86d2815522487ac8cdd9b01631004250efea5d27b6504eaa0d40a971ddbe1567700d9acb3fe1af95ffddb336eee544274db574198b3f0adc5c5edad26738a8b854f5417521423ef3d58116342d039422dba9d9c550d38e61b33540db1723b4f704f14975b3ebcb930b00363cb1911f33f9b5b70c8c5b898ae9d8fefccfd61c312e8599f995e02d93a30ab3176036b6cce83c4d0a47a8152ef4461441710fae12e38a8a7c3c4b08fde1b7347504fa512b6b4494fe64cac85bd5c537776b07c12abf6f7cf1de2530da03fce53c3ff8fe39db31efb7972ecab1a191da351dbfb539f198bca5282aa11aa4ac6d7f7d6bcc8d81be84c4945a69cf147648d305f9b0acf08d573be3e97d8684fef0b811eeef456ace822aadeaad17e94061fc8ebc84bc76b0d5386f413549d1636cf4454834105100ee1a08b7606ddea429f507e7a974e361e83133d1217107a2d6fdd09770ffe4ed67e9f5eb38b4cdfdee979f8232c833beee409f2c2f9ccea835c8a041197ca3bb1c636c8dee02cb0e89faec848cb32ad8dcf87d2dd8433ef1c8aa64b782c1682c420e277aeb0b363537bc5968cd0da2265c0b30a026a10b10b0d3a3e8f3f4da40d22ddd99f89d88721c3d80fb8c4eb5f50ad6862b22889cf885af71e035c31efbfe8adfa3bbcc0e19c91f48bbd8dad77b066dba9a04f7f47952ed0f3996f2679a5c08d46299c22b6ba45ea43d661b7231c4795d5a8e0fe98ed638224f542325e60583a1a5371d1076362fcbb88c2af49d0ec121a51a415a490c1edea75afd2e603fce9c22101d8aa37695cf4373a56854982cbd0b8c26afa2f1deeeec7bcc6f9bdee0cca27b4e94d79e2562084407c276329a2260b4068e7e142fa7d1e322b290d69490edd62cdd782a1376b5b8897a4e764c551c23edd07e4578e020abda789ef2682787fa349219d43fd30d6fe7b6b9a16350567eb09c4c6954bffd8ba8b78bfbbcdebf01d9d64bfbc7f758e008f613c68609a92cf39dbeaeddce903f75f46d0197220fa60c519bf555759e116448b8e5846afd476ed6b1213955ff78b11714755e05cfb8f93e18bad3ecbd5c8a8ce2168843ed608b896fe0b9590568c1600720394425a663c510f6314ff37a1392a2e7e3b8e28f3b19f5b26618c9f2676ce45495fffc66bbe3247e19de93d14c85eb1557f93d4cc4b9e812f4018bd0f553ed193c7726da909ce87607c89f897c49c6d7b2da4a28f04d958fa014514daed654a0e074cf889d46e07aa2ec3c9e59d387c935e5d637b7903a6c6f5bbad6199a68687ef3b57a02820a635d5099958f3c60d026495908f1e77907b4c7540d54c52e93975e990b3cbe7ae3f8d6e2c5cf5795cc8ad8fe4bc0820c149c0900c593b402872313f7abf80227b99b624b535a4ed1658eb50a42d50e2a365a0cf85f79808ac70cff45f88d940e6d7aa2230d2ae7731fb5fe3c60c409fefc6eccd0b226cb5f1fe4223c7ae90da59d61b4d5441ec67aedb65476ae435c5ab0781175b6990f812db79764be8d44d3150b21f1a4d9e273420f3ff4e46b2546018d53658648e6d1e3f9ba930f78306e46c72167974337186676870526b41f6320a8472cc2bf625f4a89681167497683b55b68a08c424bd525c2958f10d2d6530f594a3729ccca1356656805f3b25b16d02ba2cf503e6e2285258a7fec19a583d95239dc56052b0b41acd8b4979dd9759e79bd1b6bdfcb07b8c608029f89bac2aa9bdaba0578502e3a6d68af2b2938ac1f8b51c19a4fe23a5edc4f37d58c664790a9cc0e25cbf931498d06af3ee4eee25a19677ce0063321fe17636e0684d9fd531d783dcbb4a6d32ffe64f016370005b6f3b7ace9a84a81d5298d4f3018a7bc836bf1f45b488bc8020fc5fa830fdf41a0360632da0f41e51598a4ded3853e761c7b0aaab2bbee67c157cef8ee2283e019ee3abfe0032b0d6a37d72b1e98d81117afcc8a29075a6751ba9c3d68fbd505a460abc13065524a42f36be75c713f38e9de255b07e926907b15befc3af3f7547cdded2b83afb7df6b5f92b4caadaa6e0ad1b773c4b42b875f0c5c550089022b8ba1f1b358afcbf2ce1be6f1a4d5336925b2cb0aba32246be82d95809fd67a356586c86913e90029641033a056cb63a50b7b3627db24b84ab94291b93a6786d9a4f133519d522cc96782d61fa1165df697217d64c1a534c6c94ca06eaab50fcde63a003dfd135a636df8fcb0c098432491c0048d409dbac1b4f911294732406147e5b7554e9a29e146b70a08df913a15abad3e55bc6a9a08f204eead5c6783abf0beae07c5aa2f0e1dcf943fbcf811704ed6ceecd6ab523ae18c7442141c3e7572dc8510a8ef72381da6214a80c546858dc5e6625a4ff68001da681a74a15454341bdfca24fa5c78afab0aa3675049f8d1c04373647a81abc925e2a22d0b1bf1253c395ec6fbdc81fde60173192fec32d3d2cec462bb0f067c263d4e4b2b58f8b48e53574cf6075a3e8daca6537639898eafcde235edfc668ecc162752a1d233d0be3a966639574d7033c27dd2efeb502bdedd8966b86d7e6630377dbd8a9bfc60543cd9348cacfd9cc15f4ff85587aa59b0f415a65d3184c0d6a827ea094462bfe3819edd22d809adf420e6a5ad89e10b03f3dd1147db736e5d6648fdce73842f031a1e6bef9c98105572e5322654e6c968ec69cc7c8d4f0c72bfaa76ccfdd8640683a895213d37647edba46abbc8c1d174c0d05924a77447d3a0a44a6016f6cb83f8c0619c250c18a6a93b9fb31760cf4eb6827613522dd06ea3f8d5eb3053e71c7023868f77ebd39041013af51c2390f1c6525621532e3c9a237a7eee3590937f940f29c5054209e81d89cf7a5442c6e9d96b307396826fed89e7aa4acaa6677bcb4191edbd67b62170e0d50d1fed1588320f4a81b0b649cc98d2f6d51b67022d92263932bb3b9a5d31ec42e0e3b1af3b5ee70b68f8951b2241ef26728aed31122a180eb67695a504770ee34dbe5fddf61b6cc3857d815c4fad6b5e3c772ed23e65913f4e1132f6446d176f4bc51aa59c77ebc3a0a655d4c0c42daa31e44b10d996e98d16dfeb4809338032b9e19f986893c4465ff2e22075a812e6ab2d10b788ca1f7a8305fe3b51ec80357475c293f9e9a52b0ba52710f753f593235f081f6d468c2ca5216fed64ae50f0e75b8f3aa60956dee8ca697847e2552d796a9f0026026f41c86970c46dd4a44fc573b35689d1fe4f1045072c6202822b13ce986ea6a40e559cfc363d7a90e137e443ac66aaef2fbc1389868d98c3adfbe0fe45194ed6f8fb1713be9c5b4fa1f2e307ef49c0e1f4e138493761c7ab7d17abd9a83ff282abed12b32712c7c8a5655ffc199cfef45ff60b1d0561cb3bc9b0c5818f0e188c81961ad2fdc51ecd704b399ca30dbfc7cc599cbc77633db21a91fb38256ee275bc68609e33272400bc7321ec3e0c04ff4d36ce9ba0b1f0311d99871c91832a0760f71e5990e6516c5dc0608c2814bb55eb5745f6745ba1aada4eb908a4d5be184584b793b57c83ec862bf80a28610bd712f8b9f43de29d0f151deecfcf85be5eae881c102ee843ec4d10f63b4c13c0f66b93f94cb14475122f1456bc3f474f4a438a742c6dbdc5ada24532749dd725292a11b7bacca4d16366dc78482ac8e6ce65bf340f6d26dea9fe9308149f36efa12d1a5e355058cfd5be802883ab6eddd00bc9f68a432f7f416ae76bfea082196dc32f73952314acaf72f03ff653856830863db372d326e2ac00d6c0a2a7173017d70356c11cba5de1b45566a09ec09fe5f0ff04d856d4952a050b85bce750cdd971156105b9657913372f0e1f2d40262d0df3bd6440a538ff146b47d6fa879e86caf6649fa5d093bcba8a379f6e668a4c95396878ecb8c8c90a2603d3be414d99dbf63b1d788630b186c800432b01f7e55429d8954c37262d41cf0f8e5828198294fe7afe40a48056d2f83e06f2c4edd070ee99f7880330f557938a19403920f4654f2f9b3d5501cb30c5a43a93fb2db155df331798314332545e280772c0c24dad4e89ad77a50933c7680da714b5394ef2f583cf09be2d74157403ebda2530dc1f2c1efda6b522017c7eb6045d472617b3501ba9d29db58de76733dc6d0e6497fca9c739f07bfa8097f1c505cbe5ee3902ee27156d780a0fe4a76d45ea5fa294d729484c3a1e700231a0d52dece9e369b683d88818713e1e88871b17bc1c4476130910b2d60bd0f2afe9fcd6d50314202ce5c95254c49e0407f416eaad2e3e469621f5efdc2a6ad36af56e394290b6fa023c847e34ac96fd24a8b44e4f2ff1351c22c589573c6833b6c8eb9101822f8a79a3481be49210de173374662bae2ad927b6d51e4339ae1b4400ac2eef0e4176892ce2e517c13", 0x1000}, {&(0x7f0000001480)="8dfccabafd230aa1fc3610a35305850431de78d312f60c5b96eb885bb915644bda359cad5bb94d2ec4235137ec04c886c203323296f846683487cbb7c52d446aef353db827050296b0ae85eb4011c5a6faf5e9553dcda5730a92450df15e923a006643cab971b536123776e3d4dc8900d2b18a", 0x73}, {&(0x7f0000001500)="e6ecda38b6ba96fdaf9adaf85a00647a6893a28fbacb520a10eb87d7e9d145cdab3c67be3e9c8b7e1d9708c93ee152aeb3373b6e61cb2a652696ea4a5bb3d042f45aafa4cb471546feee0a2459a006a281f63423dd3bdcfce1c32c7d19e654cff38d997063e803b8caefeafe628a018fa80de42fdfc785ecb585ed2e2dca5fab002902fc1c70bf2b83157e45a603ca81d6cb44a5b7b5872b86ff77bfacea385265a82a51fa8205282175fc1761fa6b3b46f40b7bf5d0612644e82b4a61ea8a63c737cd3ca38447427e00285707c541dd4c3862e85c1cd379399fae9974f0933d62f6c82931991e6657a8267122f67917a28d0de10d96a02dd51315", 0xfb}], 0x6, 0x8, 0x0, {0x1}}, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r3, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000001780)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f00000016c0)=0x80, &(0x7f0000001700)=@tipc=@id, 0x0, 0x180000, 0x1}, 0x3d5) getsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@loopback, @local}, 0xc) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800780c", @ANYRES32=r0, @ANYBLOB="0a907e72000000002e2f66696c653000"]) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @remote}, {0x306, @remote}, 0x18, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg1\x00'}) r7 = dup(r1) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000017c0)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e21, 0x5, 0x4e24, 0x40, 0x0, 0x20, 0x0, 0x89}, {0x0, 0x3, 0x7, 0xffffffffffffc8e9, 0x1, 0x1, 0x6, 0x8}, {0x101, 0xea1c, 0x7fff, 0x1}, 0x200, 0x6e6bb4, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0x2, @in=@private=0xa010101, 0x0, 0x1, 0x2, 0x55, 0x4, 0xff}}, 0xe8) 18:43:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1', "68673ed26f72c29cdea187cf7347adb684e6ab9d353d1cd62fdc782db533e7621f36a34047d5ea00529a82a5b83d22c68a725ec50ac5b4ba504a6c4086323c6a1bac465fb55e205707deee671ccb5cbcda75d9c1a220daa5a3e591f9abbf56a533f4304cf5bbc0675c449d104253a9e818bcbd903ec2934a04e11371840896395c70a3625a34adcab3709fc61cf8738a945b7f29ff1924924ce1d443718256a36b09e0cd6d64f0bd8d51a84d2275df0bd754"}, 0xb6) recvmmsg$unix(r0, &(0x7f0000002b00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/190, 0xbe}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000001800)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/154, 0x9a}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/191, 0xbf}], 0x7, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001980)=""/104, 0x68}, {&(0x7f0000001a00)=""/65, 0x41}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x3, &(0x7f0000002ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x12102, &(0x7f0000002bc0)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 15) 18:43:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x121441, 0x16) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f0000000540)=[{&(0x7f00000000c0)="8016eedf362c803c1c565a3aad12f6745c4c93a3a39bd8b02a", 0x19, 0x3}, {&(0x7f0000000180)}, {&(0x7f0000000380)="be34a369b48b8a55d536c30958240d4c524db67820331990efc607070c1f2003e2d6e5a3c641b7744eebd1bf7906b8f026834574d252b0007d315b366925eb67089a80760f9a4157d8f849d8ff1baaf3ba00cd2ff6944279ce2e3d39e62ed25d642c3d4ecb56febca97f4da69c58e3a979886f9b04c382e3fc3791b1108c8acc74", 0x81, 0x48}, {&(0x7f0000000440)}], 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="2c7573726a71756f74613d2e2f66696c65302c6772706964ac736d61636b66737472616e736d7574653d2d2c70e36dd661b70d1e5b3120f077b9e465720569745f646972656374696f2c61707072616973655f747970653d696d617369672c00"]) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5, @perf_config_ext={0x9, 0x2}, 0x980b, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x5a96) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r3) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="23632080d987cec9a81c2dc0b3faf7d0b8eb92a07d2024272d05002c202f6465762f7363238c30b49e9b832b0000e8ffffffffffe59b7c7f0000000000"], 0x2f) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x1}) [ 1106.290844] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1106.290844] program syz-executor.6 not setting count and/or reply_len properly [ 1106.292598] FAULT_INJECTION: forcing a failure. [ 1106.292598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.294367] CPU: 1 PID: 7617 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1106.295324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.296451] Call Trace: [ 1106.296489] [ 1106.296499] dump_stack_lvl+0xc1/0xf0 [ 1106.296542] should_fail_ex+0x4b4/0x5b0 [ 1106.296589] ? page_copy_sane+0xcc/0x2b0 [ 1106.296640] copy_page_from_iter_atomic+0x26d/0x14e0 [ 1106.296681] ? mark_held_locks+0x9e/0xe0 [ 1106.296711] ? __pfx_shmem_xattr_handler_get+0x10/0x10 [ 1106.296763] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1106.301172] ? shmem_write_begin+0x15f/0x360 [ 1106.301736] ? __pfx_shmem_write_begin+0x10/0x10 [ 1106.302365] generic_perform_write+0x2cf/0x580 [ 1106.302961] ? __pfx_generic_perform_write+0x10/0x10 [ 1106.303597] ? __pfx_file_update_time+0x10/0x10 [ 1106.304190] ? generic_write_checks+0x2c0/0x400 [ 1106.304794] __generic_file_write_iter+0x308/0x4b0 [ 1106.305415] generic_file_write_iter+0xe7/0x350 [ 1106.306012] vfs_write+0x941/0xd40 [ 1106.306484] ? __pfx_vfs_write+0x10/0x10 [ 1106.307032] __x64_sys_pwrite64+0x1ff/0x260 [ 1106.307572] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1106.308180] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1106.308833] do_syscall_64+0x3f/0x90 [ 1106.309311] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1106.309948] RIP: 0033:0x7fcb02836ab7 [ 1106.310426] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1106.312543] RSP: 002b:00007fcaffdf8f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1106.313485] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836ab7 [ 1106.314376] RDX: 000000000000003a RSI: 0000000020000300 RDI: 0000000000000004 [ 1106.315253] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1106.316132] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1106.317012] R13: 0000000000000004 R14: 0000000020000380 R15: 0000000000000000 [ 1106.317916] [ 1106.323019] loop3: detected capacity change from 0 to 4 18:43:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0xa, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1106.360268] EXT4-fs (loop3): Invalid log block size: 33554433 18:43:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:43:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x5, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:02 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x9, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) 18:43:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0xf95) 18:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 16) [ 1106.509991] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1106.509991] program syz-executor.6 not setting count and/or reply_len properly [ 1106.603612] FAULT_INJECTION: forcing a failure. [ 1106.603612] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.604543] CPU: 0 PID: 7634 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1106.605179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.605728] Call Trace: [ 1106.605905] [ 1106.606068] dump_stack_lvl+0xc1/0xf0 [ 1106.606348] should_fail_ex+0x4b4/0x5b0 [ 1106.606636] ? getname_flags.part.0+0x50/0x4f0 [ 1106.606955] should_failslab+0x9/0x20 [ 1106.607233] kmem_cache_alloc+0x5a/0x390 [ 1106.607520] getname_flags.part.0+0x50/0x4f0 [ 1106.607824] ? vfs_write+0x160/0xd40 [ 1106.608088] getname+0x92/0xe0 [ 1106.608316] do_sys_openat2+0xf9/0x4c0 [ 1106.608593] ? __pfx_do_sys_openat2+0x10/0x10 [ 1106.608918] __x64_sys_openat+0x143/0x200 [ 1106.609208] ? __pfx___x64_sys_openat+0x10/0x10 [ 1106.609538] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1106.609895] do_syscall_64+0x3f/0x90 [ 1106.610157] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1106.610521] RIP: 0033:0x7fcb02836a04 [ 1106.610778] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1106.611936] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1106.612430] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1106.612896] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1106.613365] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1106.613859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1106.614364] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1106.614853] 18:43:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x6, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x10, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000600)="81", 0x1}]) 18:43:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0xfe3) 18:43:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200000, 0xe0}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x10000, 0x4) 18:43:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 17) 18:43:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:15 executing program 4: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffd}, 0x40080}, r0, 0x0, r1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x81, 0x2, 0x1, 0x9, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x5d110, 0x1, 0x0, 0x2, 0x82e7, 0x80000000, 0x9, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r3, 0x9) close_range(r4, 0xffffffffffffffff, 0x0) [ 1119.633596] loop3: detected capacity change from 0 to 4 [ 1119.646327] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1119.646327] program syz-executor.6 not setting count and/or reply_len properly 18:43:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="0e6f700c606ca011d55df7cf418b531048b88b3df71dcb13f07e3fe71f85ac6b8cade2146f840661245adccfc0e328ce65d89a1eed6c809c472d3dc850f687c3f93204d173d1643e566cde9e550f7d67b64d9f4a25563ee8e9683d184c3351c21ff11b620c59198bced669c44061", 0x6e, 0x8001}], 0xa0, &(0x7f0000000240)={[{@rodir}], [{@appraise}, {@obj_type={'obj_type', 0x3d, 'pagemap\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x35, 0x31, 0x35, 0x65, 0x38, 0x61, 0x34], 0x2d, [0x61, 0x65, 0x65, 0x36], 0x2d, [0x38, 0x66, 0x36, 0x30], 0x2d, [0x33, 0x65, 0x34, 0x39], 0x2d, [0x35, 0x38, 0x63, 0x63, 0x30, 0x66, 0x31, 0x35]}}}]}) [ 1119.670483] EXT4-fs (loop3): Invalid log block size: 33554433 18:43:15 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x20044081) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, 0x0) 18:43:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 18) 18:43:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x25, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = signalfd(r0, &(0x7f0000000140)={[0xc9]}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0), 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)={@remote, @local, 0x0, 0xa, [@initdev={0xac, 0x1e, 0xee, 0x0}, @empty, @remote, @empty, @loopback, @local, @empty, @broadcast, @local, @multicast2]}, 0x38) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0xfffffc00, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) [ 1119.792936] loop5: detected capacity change from 0 to 128 [ 1119.808275] loop5: detected capacity change from 0 to 128 18:43:15 executing program 5: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r1, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f0000000100)=""/142) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:43:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1119.899277] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1119.899277] program syz-executor.6 not setting count and/or reply_len properly 18:43:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x2f, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1120.042458] FAULT_INJECTION: forcing a failure. [ 1120.042458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.044296] CPU: 1 PID: 7688 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1120.045517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.046690] Call Trace: [ 1120.047081] [ 1120.047474] dump_stack_lvl+0xc1/0xf0 [ 1120.048041] should_fail_ex+0x4b4/0x5b0 [ 1120.048674] strncpy_from_user+0x38/0x340 [ 1120.049356] getname_flags.part.0+0x95/0x4f0 [ 1120.049919] ? vfs_write+0x160/0xd40 [ 1120.050544] getname+0x92/0xe0 [ 1120.051112] do_sys_openat2+0xf9/0x4c0 [ 1120.051676] ? __pfx_do_sys_openat2+0x10/0x10 [ 1120.052395] __x64_sys_openat+0x143/0x200 [ 1120.053077] ? __pfx___x64_sys_openat+0x10/0x10 [ 1120.053735] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1120.054527] do_syscall_64+0x3f/0x90 [ 1120.055126] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1120.055775] RIP: 0033:0x7fcb02836a04 [ 1120.056346] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1120.058815] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1120.060066] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1120.061129] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1120.062184] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1120.063251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1120.064296] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1120.065374] [ 1120.108490] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1120.108490] program syz-executor.6 not setting count and/or reply_len properly 18:43:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:43:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x8, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, 0x0) 18:43:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x1, 0x5, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/74, 0x4a}]}, &(0x7f0000000280)='Y', &(0x7f00000002c0)=""/137, 0x2, 0x10002, 0x2, &(0x7f0000000380)}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x5c, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) r4 = syz_open_dev$loop(&(0x7f0000000140), 0xdf, 0x201000) io_setup(0x1f, &(0x7f0000000640)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r2, 0x3ff, 0x7, 0x8}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000180)="635430e3899a7e98abff9ece68917b2e163f59cb8989062175afed67008cce2e0602552fd9e8189569c310fa1d5e824f014df7766fee31117e2095fc0fe5e5c67002c5dca559a2c50bbdc3ff74163aeb1885f56d060b1b92c18d260bc066dff7bc23fabba0f0307c8577522dacbb1d464d11ab880474282f09d187ac574bccaaa0f42140dc7dd447e0e6aa4995a0ad3ad568455e22af58fc41c5963dc9825606be1a0b99e4892fb3266864d51a5c8f49772714be54d032b85a32e592c97ab753235bf73d16317158e080328595c538650e25a17b51146e837c277332", 0xdc, 0x8, 0x0, 0x4, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f00000002c0)="8b560cfda386c15955dda74e8b18d5afa60c53f6138ca462dc7ecd8c2145aaa29a32cbc109b3de84b237389f4e46ee848fd390aaadfc7898813d06df", 0x3c, 0x2, 0x0, 0x4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffe, r6, &(0x7f0000000340)="55d55720428b5ac6146b11c2aa974559b0ed15a56bad16fab166bcb0547f7fb1d98950e3031cbd7511adf2892f78f1f7f170fdfc8eb40da675e7eff36690f13374cc0bf567b122ebd0d07d218d229302c9f5426ef0d88890ff7d4958a41bddf464965f11a7a2844709", 0x69, 0x9, 0x0, 0x3, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xf9, r0, &(0x7f0000000440)="c528fff990bb5376fae30d55d3bfaea56bb53b949a9ac865662b5fa3ea5517c5be268b6abc39528f9b664f8c12b42f55fdffefa0bf5dba9ed42c198d2c88f54cf49220305d88ef1e248935fb9577fd40e84aa632a9709bea981210c6c7dbbf46752b5d", 0x63, 0xd9d, 0x0, 0x0, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000500)="40de72358139f9d24d88a6a04e8bbb8d4406f86fa36abffc2f9cdb182f42cbae59c55f9038228dc6858c7722c89e586b688e05062fbd71a2998c5a1a13537c5761d761be8a96c645aed3dab4a3641d9164", 0x51, 0x1, 0x0, 0x1, r9}]) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) signalfd(r2, &(0x7f0000000100)={[0x1]}, 0x8) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 19) 18:43:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x1008, 0x9, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = fork() getpgrp(r6) r7 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs$userns(r7, &(0x7f0000002600)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002440), 0x201, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r10, &(0x7f0000001180)=ANY=[], 0x220) io_submit(0x0, 0x7, &(0x7f00000025c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000100)="44ab69da6376be8be69def75b37e2241d916f3ae11f974967152db65431faaa130dc172641f18cdd8d8304c0f4d8347af525a2257c07c503acdcc71eac62e645064c25cefc7585a944d72fc4ecd3faa54f4352cec2d64dc6a822c1ec8ee427820d89868e7edf56760f23862123e91c7bafecfea5a85f5212d50f0976d21862cb58b7532cec32a62013fe41809f9992bd7954aa8d41043a036a486e4a0f7bf37b0c6a799773d7a0e60ef0ba557c1b26f1eab3eedc15446805e89f4cc7e952f01e23332075c0f1252d6eb6600e31accc02d8084879cc34f6d2cabf8d0cba1e29c4e6a26d27c822d0e5fe8493de6fe8a0f527a3737ab141313a66cb1461d17437300baa1cc118b1a27f020fb300fb83d0917a97b03af531a7e7b3edf1beb2481f802a6e1fe38c30c194133be12bac354119647b8e962645695aebd36e8d09c32dcfe8a7bfb63027083b95466abe29e573e60563d9756703f49e3f7d9a991dcd08887f5db203dd8c9c67e0e5cfc66da9ed10b7fa592b50a050ab3398ce352d0ead79655ec9857e8d4a6d045c6d791f41d17b010c786e30c305f577f96c14492ca44cd244e5dfd0c22b9af763d5768d67043513d1569459c5f9358d8a8ea724ccf07e73d6a9c21000e9cf3f39a053de9f430271d4bdbf2de53a22b7eaede523d666baac2c1cb98dd011849558b977bdd1ad5d64fb4714762e852019aad2c6d1d0b7fd507cb0a2935168245c8719bfbe57c1e6d7a0623e13e104b07bd4136ed688fe6e6bf839e4bd136e7b18cd781f6a5599906caa6eeaa245205bb158bb353da4e21b8a7760bcb1156b769460da964012105e9c711a6c2de72f70c2018a7fda6ec8b7926f3e3dec258fda3b2ff24e173f0fe19f730cc3fd52220eb9bc4b13e5174b1eedcf209b1cdc7edd2e3759c20d6288a39f0784468c4391f749cb7a19dc0587d8c727db75e4b66c49cda7bd58e844d2f38f2513a7b51e88d4bdb84f635bb4e912bf9960d573af3c085914acb19140479f6a717b51226212bede48af726b416a9cbac401aaf2d4064d21f96b8d7fb593e00f56ba5ebdc8d37ccc03a2c9f3b14db9c7dd93bbeb16159311d4ff4fe1f7c2a2b13e58c5e7fb5650c3a84f0312ae76e51af8152330390e7366dbe2451ba28ad777b3720519b4e6393ba6d9333e941a8033d9d2370d732b1fe045372a1ddd9a09befef212fee350d141a8c1ac0b77431b08b832321ecf67318075018502abff434f43a9336f930d42c82deea59737bf3950be5699f4bee636499be7f7492630af997b6547e0863769b19cc563863a32714a5fbeb46d957e273db38aa4ff4fec8c3ca19d4278d854acc66840da25f0cd51514228f134528669b98d7fbc0d48c5a00c19c5b076c35a6fa12749d9bf3fbaadfe34f6fadf6cd0171b4bc2ceb43dbc6ca93233326df7c97d478d0eb5ba23016625f4358a20e963cadfa27a2f30f8e6608b1e71ec80e44ca31e9f7b241cd17635795a0069c6d0cb968a63fb2da356b0e7b9d8b842086b5cc55e54c1051b815d3603936c00d52b387b91f51d9705ecf17e7b7aee4866929344cab30b09fad5dbea866ea186646607ac595b687f04cc5e1abc6af746132380e20593e4d70d011a6a3b88276747dd0f2510414c58fb30c82ce4bea9f9de151a988f05d1249c2b42bb27fa38175d4cfccbca8c3205759799cee265cceb9c9c064128c7336412c8077efb7ade896707b390dbb9b6581a35d26cc45d0626435761402505a064d35866b2702db4e28cf4a189a7faea563c48e259b4837a833d71641ae395659ed43c16839485a817e8d940972505e5f6f98c17918b389ceba9a9bd20832e05d5e41a0aa6faebf4e49cbdeda5b7cb500d646371e1a7f5ac22ccd98faadf39d6676e0ef26bacbb82ab160fb87dbfc9e241bbaf626d8dbef22ac8a9a7057f33bf114852a6b85c0f35d95f7b26a418ca03ed00bd788c29de348881bab7cb54a85e7b2e7ab17913d18e287f2296e7bee8d9ff7a97d8911eae8e401c2e174bcbea758aed16b0fb06b6f6b66c0934fadec62fef02363501b9190d36faad1d3e748b383d7db8b3a1871598eabb03ce86b6294d360f110b56c1a5ae4e1d74497bbdc95f4e8fda6e222b1af7fae42a8daadb0cfce98b0408002ed5749569c35e52256c5d71916eba2cb97237e719bc98a1cd6d3965eec0c8522531c720f03d8507ff66df0be7c7dd69d3b42ad13d2f1277ad02eb131ea9bb17bfc09b6aa8f72d8fcd01a4104c1f106f159def8c8f9cf0aaf6a2088ba42a7a9c9de0edefa3e08d000acd7f9c64bc158762c34812132b7487a7fa62f0092eb231d7cefcb6beab1f454494ee1fbe77f2f1e72a47fa594d50412e50d502d1df626b51cc149793dbe8f53c80eef481d7cedc258aae646b54aaa841e9817a76de952c76f4fe5c49ff4efeaee9cf2ac4dd21bb705b9f719c01597799dd0b3d0adbd36f0c7f5bac0e3ce5d41a9a015a382a7c46dfe90df62c2d9a59bd09225b7f580753e1d414d50fffc31cafad319915cebf30fb67ecd1e1668f28de5872d3082a3d9c92855ed4841ffdc06901d24c2df53fc4cd04bb2f28a3cd61c1b6bffa40ba33a2c7dada6e289e6f377c4e66be6c855c2b4574a2285e4980d489b758e0592e79c5f28f212cfdf3b6d4405b40ddc7baae0f2146f8d6c8e477b205f0c479297c4ea0c0ffaef1bbd14cf7b5add0470a14d5ad1ccbb29873ac51d71095a253832f5899e7934d14d4e8f8307a05b74410c44a0f26d3772aa64c59a7be1ec1a9a3e3455b9a17b4770e135a29db00fac9cc1c97f13cabce5ed86fa466c8b1d6d0e73d6a4a99a5e3212c53ccad1ff85839b7bc54e7409aa7dbcea523a4bdf3997bf210bb9af46e2a29244378664332930f712f530e09d78b80df44f9a1e3df9c33d04ad0794a089de77effa404b31696ef8bbbccc4b22a701ad752a5b4eab637e25d384b016a7b52d8a4721f8b2b21044fd5afdc5fbdbed4bf98b5494b447938f2c374868b01ba0a0becbd9ba641e728e94f135b32382a763ae99595844279c12e9d900dd340e967e8134eec7718e5fcab4006e52254ead0ec21ce48faf9a0c0eef1c52b956db8365b90a03b1fd8b5a5ee72949f6d37d61fdcb0c593eed283905b6f8b60e8ef14c21a0b334c64743ebb2666b86aa71ee32ac8a3829a01233ef004f77f4d6ebf38628d0af7b5e8fbb6d09547d92e5275e1a03c6f7c94fbfdf5fa29191a27a5b354313ab7b69a5f24abe71a53c1ede124a3d3967eceebb950c4ad0aee075cc9030834d5802d43a78bb20a6111f20540d4ea7a3ae9d8763ee1be53a0cb5f2ad9440dd67e56bd27c04eeb116f0cda7e2bea77717e063eccdc944e7c83a7dd02be33d193e4be5bd2f9f876124dc183a482f2ee8beb727ce579feb3bb31148cb0eeb797fefb59e655ff8615c5ee24dc54dad7fb188f8be1afad2dd8df3c6574a9acfc2f59f88b9006c448605f2c744df1710910e195a41175c5d63096ff1deb5992fd58031dd06799d34a136057161d9a822ee7ea8bfe83e5515438b7e5a3b4592ba6cdd5e599ef7950aef385fa18cd2d6a3a72d1d6395ccec57e9d0954c5a07316e5c2f5742567ad0f01b5390aed63294e792a7fd787105d597ee5558bfe981c88f8d91ae1a9d8f8c7ba4a8d792685f89875d2660c4525930c596183f19e7c3d9fe5b80ba68eb685963639f80b5c20466b74ebe9a5237961e4b3e8670480c874739a15a196c27fa5100f285deeb3faeb0c95bf517329b8fdb5d994aae39791fcee8b90d50aeb1680999095a246ece151621827b1d64dff9a40b6bef723266fddbf562ad4bc01ab6cdacf3127b5ec42d3666bd0eff1aed5db4a3d815322a0fbd9f22b141cce523fb7b6adff1ae513791d92bd7493ecb266ecdb4d0b41fee723f1da6b95cffed9eafafe3651e4f7eb88d7ae1676baf6b3e1ea73f16ee276c044629a2371cd6177757ba77a248c7ce8640eaaec059ea639b9567f939110a8954d4c18623b458a0bd374d2973a0cbc4469403b6b22a1bd6344da1b05aa4f85f974f3b8d1d75f7104fa0e8fc32af7cbcbcdceb28186f57b2323b1838b3162112684c6f9bfa526a05bbed985909b03bbc56ea999176dab1f64ae39f5d4bc324cf510c3ee14c994d1a06c608868e3f5bbd59cd2d1d805cabee262556158e4356ea617ba9570efa6089375bfe92bc72e04fea59bc836c8a9dafbcd8701284cb5ce92ef000737feb5ad4d80cfd3c150ce14a5457dcce1b7008e4a38b9b66968312e71c467d429bb6fedd3086573f013f965db3cfdc9d683255be0899827d6168e4a6b9435d3de6f6f4587b9a633d3509b57c4b2b56caa05067273ec3a52d71023aa6742f60b03f0236f0ed38da192f4e927c630d07a004dc7440df025c90b4e1faf719d94e60941083aaddd94890f8ba5675226df2e2ba2ae99cdd3bf8c2ccd7ebc6b3ee3b37477fa1ae3d032b338c53b4f754fd33f243f7daeb0b917586be5260254e2f6a172314e55f85d75f340623659d1eea839c07bd6d9f63478b9eaebd59337123cb889e4ab587468f88c9a51f0928eec822e815994c982f45972d293ccaecd721935ddd75e6b59a0dd972a863a68c87dfb96c68971df664a36a8686b3365a5a234085cb7c2eba5cbd24a4b0cae1d0fc32780fcdb91bdec6d481c31e83720d5b8fb54f4ab3f26064d636859fdcc7a8d3efba0a4cd611e1b6204e3b426733b529da5e180c7d359b12ba2e752f1f6372384d4b38096dcd5d5fbaedbadd4f2d14ab80a3b10d04ba12f08ef5c1bf0450b37484caa5dc337bc1c975085f8f20166acb5c1029ff804250e487a3ab0b94967207ae9cfb9131d34d43a4fc644496ed19dc168357b6aca8981258cae9277a16b6b941e61c414efb299d3787b9d8fe830cdc5a77a1120ecdad404c33be4e1b7a06105c4bd3e7f60cf7b26ec83bdfd63161654e641d4a8f9f0875b79e90ed54e911c760c30a289f7c31a9395b2545cd230788c6c10605b5a124bc6d39e8c5d27090277740d0d2675a54dfa2c2b2f817a5535ca589770a2e32532ac5674e35fed35c57181321c9d863bf48e4e8cb40ecb5e698d45329f597aae9fea36c634823a1981cf69869880551e926be20c4f832068fb8b59fd6fef83afde3b6e9feea73acd0d4881e1be352c2c2ac82fc673a93ab1a06d1b2a1acc09be76c2cb24d69349c61861216c08a66a7712499a524bd463b0a91786edbfdc822c0761dbe2ba2e7035016d3c688342afd879a7ef97fdb2261209ff7a27a2cd4f9d8f2e5c880643f63b56adf3d21cbfbab9ad9390f008629e23df44b93934389a449faed92449f94dd966e9940b815256aaa99fb4e5cf35d7a37313187f62f1dff0209086d5158ab5a31f21c52d8b36355146c480bd8a61f15f1b3f2ffef2b97fea0d4686c77c20130841b7f9d9f1056c65198c1f2808af0ebaa8dfa65f0a7b09e0dbd2267812ef7794dc65240cbb1139e0f9d5939e3167e8e0bcb6d7c63d5a6cfae964b62d18fea1302b220b56d801ac701d27579f8826c71086099c768dfe5c32798d3088c33f23c8f09b0dbff77bea24217ba67f4b4acf9b63bd43a133dbff1ca2b531ed44410b87357dcb06849cb25827b63d88b6adffbaed0ca94d38cfe4dee069030a8743bd5e5a55aad7ebda896b35e0b3557a08a9a3f018af93cb21e5c90227cd41aa52c9be9dc914734c526d6e7eef741e6db7caeb9bce1f0f754bdbd7d0364d475c71a043379274dd9352a378c3990b2464feba8368c69bd74e771009560a00649f41025265e0fc6e", 0x1000, 0x10000, 0x0, 0x1, r4}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0xf2de, r1, &(0x7f0000001100)='N', 0x1, 0x8, 0x0, 0x1, r5}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x6, 0x100, r8, &(0x7f00000011c0)="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", 0x1000, 0x2, 0x0, 0x2}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000002200)="824d6f7ab2b6ed4d27ee4d71874943c016e4c3e46a2a59178d847a000bd8bd6ed96bccc0dfe55dd96113afc3c73cc2fc7f480fa4a7eccc7d14c8bc8d6d03", 0x3e, 0x93}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000002280)="f53ccc007cb19a62d97f056999a734d5bd8c99a6a9ca6d388690a2971e22e89d57c2b39bcee8f4309633bb659e5fe9dec5a865914f08b6f1e35696350c074d2832b194aa5a0baa6692439370c45d96755bbdbdb49f31ba92e1db9a2b553593ad565f5ea7032979029b707f66423746430c34f7216b28572a6444562f00e07211c2a68147aa557333fb859fef9ff9072659ccb5d5ea00150873c7258b9d541177fba2ac9b8a03acf8ff19526539c93270d36fc2ef783f210ff8d97825857bc8fbd84ed142450a21ee6e2431dc2c39e4bd0167e68c8db29326743f52", 0xdb, 0xba, 0x0, 0x1}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f00000023c0)="d9be3f52cd9b0eb8e4d47a3ffee6142cf65c784224a6e1a17cf6c68d", 0x1c, 0x5, 0x0, 0x2}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x7, 0x968, r9, &(0x7f0000002480)="d4e91ab53ff29a1e428aa03b9f69ec7d89d5de33c73a75a673c50aea594f11cf327cd2543f8493305fdde822f6d5d8c6fdfa076e399c6a0b013c89e852fbadf03073833d39b2da1323a9f0ea2064e025e4637a54e26263eef862f8d0e2305edbc7242789806875754961552ff6a431c62fc3ffa9519880a29aaae8ef18566ba61483c143b08715cde4c812b9526d50d7d38ea53a46266df264e02e68c8ae5871685f944c1e053fccf7e7f5db5ade1aad770a7df524c7f33012de20e68790c5b6094332048bb30926e52da03e2258fca5ea5f03e3", 0xd4, 0xffffffff, 0x0, 0x1, r10}]) [ 1133.130634] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1133.130634] program syz-executor.6 not setting count and/or reply_len properly [ 1133.138940] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1133.138940] program syz-executor.2 not setting count and/or reply_len properly [ 1133.148350] FAULT_INJECTION: forcing a failure. [ 1133.148350] name failslab, interval 1, probability 0, space 0, times 0 18:43:29 executing program 7: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x10001}, @sack_perm, @window={0x3, 0x9, 0xbd00}, @window={0x3, 0x101, 0x1}], 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1133.148387] CPU: 0 PID: 7715 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 18:43:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'\n%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1133.148420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.148436] Call Trace: [ 1133.148444] [ 1133.148454] dump_stack_lvl+0xc1/0xf0 18:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 20) [ 1133.148495] should_fail_ex+0x4b4/0x5b0 [ 1133.148547] ? __alloc_file+0x21/0x240 [ 1133.148592] should_failslab+0x9/0x20 [ 1133.148631] kmem_cache_alloc+0x5a/0x390 [ 1133.148683] __alloc_file+0x21/0x240 [ 1133.148727] alloc_empty_file+0x71/0x190 [ 1133.148773] path_openat+0xd8/0x2750 [ 1133.148812] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 18:43:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000840), 0x1ff, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x100, 0x2}, 0x18) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x410200, 0x190) r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x7fffffff, 0x8, &(0x7f0000000680)=[{&(0x7f0000000200)="edf62f8f4b15e82f46d6f8403b1172c7f62e2c9cffa48a256e475a9f59c85914324d1a68d07ac9d713a56eb93bbfc3f8367628166bf072917d151eb980c5521cc7facd4355728d74f546350475659f8911f59f2aed", 0x55, 0x2}, {&(0x7f0000001040)="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", 0x1000, 0x8}, {&(0x7f0000000280)="6b72038331946bf575e7cb9e43652807c6f47c1ac71f8e6bdfbc23c7524945ec01da1b7f83f5c6fb9692b8a5527ff4ef9ea8bbc9c41dfb4bfbffc2c335465adc53843a3255523dd0dff365562b097f16d8ab39db7d9f38943fd346a49a4302a83a2309acdefc38539134a5244c5caed887e615a8c2150d41d191041d5ce0cd8e65508eac2bb92daf93f3a817d7dfc37151d55fc0b3de26c840c0d44110e8d4ccb059907351686fa71ac7bf4d92df4dbbaaa81a70ee57f7bee7ff36e54041ac76a5d71084688ad0dd9063225a8454dc0b4e", 0xd1, 0xe43}, {&(0x7f0000000380)="cd2bae569cac649812196782aa3410048f973c20a6b7d94755c82fcd6840c6ed6d6f5ef78c84d1fae9d934cb98a5bc40620b7a94ea24886efdba27206c94d247a1454fdb612b5175725f30fbe4edf6b55f4b257636ae4f2380afe1e2156c7e559480d04d035793c712f8b3f4d10b58c0f5ab75d32d01a0259943974cb97d99395e1b23f77d36be6c4d50223a27b0b904fadd8408a2e4b2ebaa2f591915542bbecf509f3d2cc39b561278e16ae59e158657a60cf96a41a3f24d9fa7bf164966b7dfe4fcb544fa4ca41d36", 0xca, 0x7}, {&(0x7f0000000480)="6e119c3546ba37249d9cd133c00005e9ec0f258caa7c819dfc58e25aeb12efc1816b028f17f04c6901c0f94e446f2a70f3cf07b242ddc5fd4aa04b1aff64a40036ff547a801aa759df0ce84c6dec2b23ca01e476b2caa53309ba547d87ede10794252b5423450a5aae29232103b28975adcc92f0277a", 0x76, 0x1}, {&(0x7f0000000500)="8a95cd9129a2d1698d0466e40828eaafd3deb64e6d1e4319fb29feaca1d032f4962f7871b046539fb8d0a3419b9779e0e3b7e235cb463f9f0424572eaf8dc2a149387cc3442bbd72b3d9336cde8d19e3d48057442270097d00316ea0f654b0a70cd1114e448edcd47e641a30742d66e560d8bc9e01e94cee", 0x78, 0x6}, {&(0x7f0000000580)="0aaebde3e864128df0342722bd6f1889de6c5d08ba71b9d65950661521d6f06267652452459be8ad73c02444b20a99b3ecef2f4ba24efa67dfa59d77232f6f8c42ed87014fb6405887a19e78dc71688bdbd4a5b4e90acc05d4118df9c24eb303142c39bd0317bd8e1ecd3b938a01793b7dbdd22148419bd12c33ca73e47e06b385250d0ec98ad8e18c05631d9c07eca6844357c17be7c54e3502a01ece66", 0x9e, 0x800}, {&(0x7f0000000640)="d51d6150f22e7a0a11f8e2049fd7683ccb2499a2", 0x14, 0x8}], 0x10000, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x100}}, {@fat=@errors_remount}, {@fat=@nocase}, {@nodots}, {@fat=@showexec}], [{@uid_lt}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@appraise_type}, {@smackfstransmute}]}) mknodat$loop(r2, &(0x7f0000000800)='./file0\x00', 0x8000, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2395202e2fbe080000405b2b21287d2024272d254328af5b2726272d5b282c202f6465762f736723000a32fb526ee3d929f2f358d6d27afeb494fc291d1d26e6d7aa54b0a1d200098dd9c93b07616b525e9896deb98fce8dd62867661ae7dfb9143948727f3a60c8b99cb2938da09079f7b625651fadb8136692d13d33bc76d66982"], 0x2f) 18:43:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, 0x0) [ 1133.148863] ? __pfx_path_openat+0x10/0x10 [ 1133.148891] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1133.148942] do_filp_open+0x1ba/0x410 [ 1133.148973] ? __pfx_do_filp_open+0x10/0x10 [ 1133.149002] ? expand_files+0x446/0x8e0 [ 1133.149045] ? find_held_lock+0x2c/0x110 [ 1133.149087] ? alloc_fd+0x2eb/0x760 [ 1133.149129] ? lock_release+0x1e3/0x680 [ 1133.149166] ? do_raw_spin_lock+0x125/0x270 [ 1133.149204] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1133.149253] ? _raw_spin_unlock+0x1e/0x40 [ 1133.149297] ? alloc_fd+0x2eb/0x760 [ 1133.149351] do_sys_openat2+0x171/0x4c0 [ 1133.149400] ? __pfx_do_sys_openat2+0x10/0x10 [ 1133.149464] __x64_sys_openat+0x143/0x200 [ 1133.149510] ? __pfx___x64_sys_openat+0x10/0x10 [ 1133.149565] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1133.149606] do_syscall_64+0x3f/0x90 18:43:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1133.149642] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1133.149683] RIP: 0033:0x7fcb02836a04 [ 1133.149704] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1133.149732] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1133.149762] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1133.149782] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1133.149802] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1133.149821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1133.149839] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1133.149881] 18:43:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') close(r0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:43:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x12140) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xe, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) tee(r2, r3, 0x5, 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) faccessat2(r4, &(0x7f0000000100)='./file0\x00', 0x10, 0x100) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r5, r5, 0x0) [ 1133.358584] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1133.358584] program syz-executor.6 not setting count and/or reply_len properly [ 1133.406996] FAULT_INJECTION: forcing a failure. [ 1133.406996] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.408573] CPU: 0 PID: 7727 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1133.409601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.410622] Call Trace: [ 1133.410953] [ 1133.411249] dump_stack_lvl+0xc1/0xf0 [ 1133.411751] should_fail_ex+0x4b4/0x5b0 [ 1133.412275] ? __alloc_file+0x21/0x240 [ 1133.412775] should_failslab+0x9/0x20 [ 1133.413273] kmem_cache_alloc+0x5a/0x390 [ 1133.413804] __alloc_file+0x21/0x240 [ 1133.414293] alloc_empty_file+0x71/0x190 [ 1133.414829] path_openat+0xd8/0x2750 [ 1133.415314] ? __pfx_path_openat+0x10/0x10 [ 1133.415841] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1133.416506] do_filp_open+0x1ba/0x410 [ 1133.416990] ? __pfx_do_filp_open+0x10/0x10 [ 1133.417542] ? expand_files+0x446/0x8e0 [ 1133.418069] ? find_held_lock+0x2c/0x110 [ 1133.418595] ? alloc_fd+0x2eb/0x760 [ 1133.419085] ? lock_release+0x1e3/0x680 [ 1133.419601] ? do_raw_spin_lock+0x125/0x270 [ 1133.420161] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1133.420767] ? _raw_spin_unlock+0x1e/0x40 [ 1133.421319] ? alloc_fd+0x2eb/0x760 [ 1133.421818] do_sys_openat2+0x171/0x4c0 [ 1133.422350] ? __pfx_do_sys_openat2+0x10/0x10 [ 1133.422975] __x64_sys_openat+0x143/0x200 [ 1133.423521] ? __pfx___x64_sys_openat+0x10/0x10 [ 1133.424132] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1133.424786] do_syscall_64+0x3f/0x90 [ 1133.425278] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1133.425942] RIP: 0033:0x7fcb02836a04 [ 1133.426416] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1133.428606] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1133.429545] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1133.430414] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1133.431292] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1133.432168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1133.433054] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1133.433943] 18:43:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x3e, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:43:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000180000005cfacf6851340d100b7a02e431c9cd4cc8b5e49c1642c91bf0b6c7638bb2d061fe", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = fork() perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x3f, 0x5, 0x8, 0x3, 0x0, 0x3ff, 0x2200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x10016, 0x401, 0x1, 0x3, 0x7, 0x760a, 0xad2, 0x0, 0x80000000, 0x0, 0x100}, r2, 0xd, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x3, 0x4) 18:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 21) 18:43:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'%%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x2002) lseek(r1, 0x2, 0x2) 18:43:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, &(0x7f0000000100)) 18:43:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 18:43:45 executing program 5: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x10010, r1, 0xf07e9000) write$eventfd(r1, &(0x7f0000000180)=0xffffffff, 0x8) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x2, 0x802, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext, 0x400, 0xc200, 0x0, 0x4, 0xffffffffffff0001, 0xfffffe01, 0xbec1, 0x0, 0x1ff, 0x0, 0xe4}, 0xffffffffffffffff, 0x10, r3, 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) [ 1149.215990] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1149.215990] program syz-executor.6 not setting count and/or reply_len properly [ 1149.223621] FAULT_INJECTION: forcing a failure. [ 1149.223621] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.225081] CPU: 1 PID: 7759 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1149.226105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.227134] Call Trace: [ 1149.227473] [ 1149.227782] dump_stack_lvl+0xc1/0xf0 [ 1149.227805] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1149.227827] should_fail_ex+0x4b4/0x5b0 [ 1149.229841] ? security_file_alloc+0x38/0x170 [ 1149.230428] should_failslab+0x9/0x20 [ 1149.230961] kmem_cache_alloc+0x5a/0x390 [ 1149.231508] security_file_alloc+0x38/0x170 [ 1149.232059] __alloc_file+0xb6/0x240 [ 1149.232554] alloc_empty_file+0x71/0x190 [ 1149.233079] path_openat+0xd8/0x2750 [ 1149.233578] ? __pfx_path_openat+0x10/0x10 [ 1149.234121] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1149.234823] do_filp_open+0x1ba/0x410 [ 1149.235323] ? __pfx_do_filp_open+0x10/0x10 [ 1149.235871] ? expand_files+0x446/0x8e0 [ 1149.236407] ? find_held_lock+0x2c/0x110 [ 1149.236951] ? alloc_fd+0x2eb/0x760 [ 1149.237437] ? lock_release+0x1e3/0x680 [ 1149.237956] ? do_raw_spin_lock+0x125/0x270 [ 1149.238505] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1149.239126] ? _raw_spin_unlock+0x1e/0x40 [ 1149.239684] ? alloc_fd+0x2eb/0x760 [ 1149.240187] do_sys_openat2+0x171/0x4c0 [ 1149.240721] ? __pfx_do_sys_openat2+0x10/0x10 [ 1149.241348] __x64_sys_openat+0x143/0x200 [ 1149.241901] ? __pfx___x64_sys_openat+0x10/0x10 [ 1149.242522] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1149.243235] do_syscall_64+0x3f/0x90 [ 1149.243742] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1149.244417] RIP: 0033:0x7fcb02836a04 [ 1149.244898] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1149.247083] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1149.247998] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1149.248904] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1149.249805] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1149.250705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1149.251604] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1149.252479] [ 1149.265155] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:43:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/56, 0x38, 0x1, &(0x7f00000000c0)=""/41, 0x29}, &(0x7f0000000140)=0x40) 18:43:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, &(0x7f0000000100)) 18:43:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0xc, 0x707b40) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x100000001, 0x20, 0x1}, 0x2f) 18:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 22) 18:43:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x8, 0xff, 0x76, 0x0, 0xfffffffffffffffa, 0x0, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x42c94, 0x8, 0x7, 0x8, 0x3f146bbf, 0x7, 0x7ff, 0x0, 0x80, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r1, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 18:43:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/158, 0x9e, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x80010, r0, 0x0) 18:43:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'.%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:43:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x180, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1149.534240] FAULT_INJECTION: forcing a failure. [ 1149.534240] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.535788] CPU: 0 PID: 7779 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1149.536822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.537865] Call Trace: [ 1149.538207] [ 1149.538518] dump_stack_lvl+0xc1/0xf0 [ 1149.539053] should_fail_ex+0x4b4/0x5b0 [ 1149.539611] ? security_file_alloc+0x38/0x170 [ 1149.540205] should_failslab+0x9/0x20 [ 1149.540726] kmem_cache_alloc+0x5a/0x390 [ 1149.541288] security_file_alloc+0x38/0x170 [ 1149.541859] __alloc_file+0xb6/0x240 [ 1149.542384] alloc_empty_file+0x71/0x190 [ 1149.542970] path_openat+0xd8/0x2750 [ 1149.543493] ? __pfx_path_openat+0x10/0x10 [ 1149.544056] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1149.544787] do_filp_open+0x1ba/0x410 [ 1149.545328] ? __pfx_do_filp_open+0x10/0x10 [ 1149.545924] ? expand_files+0x446/0x8e0 [ 1149.546492] ? find_held_lock+0x2c/0x110 [ 1149.547076] ? alloc_fd+0x2eb/0x760 [ 1149.547566] ? lock_release+0x1e3/0x680 [ 1149.548088] ? do_raw_spin_lock+0x125/0x270 [ 1149.548703] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1149.549373] ? _raw_spin_unlock+0x1e/0x40 [ 1149.549954] ? alloc_fd+0x2eb/0x760 [ 1149.550460] do_sys_openat2+0x171/0x4c0 [ 1149.551009] ? __pfx_do_sys_openat2+0x10/0x10 [ 1149.551680] __x64_sys_openat+0x143/0x200 [ 1149.552285] ? __pfx___x64_sys_openat+0x10/0x10 [ 1149.552958] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1149.553703] do_syscall_64+0x3f/0x90 [ 1149.554236] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1149.554963] RIP: 0033:0x7fcb02836a04 [ 1149.555464] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1149.557761] RSP: 002b:00007fcaffdf8ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1149.558762] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb02836a04 [ 1149.559721] RDX: 0000000000000002 RSI: 00007fcaffdf9000 RDI: 00000000ffffff9c [ 1149.560707] RBP: 00007fcaffdf9000 R08: 0000000000000000 R09: ffffffffffffffff [ 1149.561608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1149.562497] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1149.563472] [ 1149.643725] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1149.643725] program syz-executor.6 not setting count and/or reply_len properly 18:44:00 executing program 5: rt_sigsuspend(&(0x7f0000004000)={[0x1]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) clock_gettime(0x0, &(0x7f0000003f40)) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000180)="30050c7db67bfe06d15680900774c849f9d4c5269d30f61c86e46f1cebd39b1754129223836d7629a70711857c843cbebd88cd24cd80ab03db233ac05d3f1c751d41c594e61f1f5d6f92caf20a808e2ed6cbab8518590638ac33fbb6d165233add7931e35dc84198da8cd78f64440822d597bd4cf9484a646901c560ddbdde49e4c942b18556bc44a425c02a00da2c122cad676b2509393f24036d6ad011ec1562d4f9c8491ac4b0221ed9e572c62c27c42e9aa37006d866c6d8a3d8663b40bef368e9f721030c6f51602130fb699c54cb04ae39362bd6e64cf5866d5a1e9e9e591be4ead26dc4a6a54c36fc32855d7a86baf26acf15e4be901038372d501b6844cdd74f9ea0018ed8f3470b0095ad48248691bdf0a0e08a36af126619f7a46a08cf8da264e3e2ea7daf3df52f368d8ac694c8f73b2087af1a9072bb906450ad74817955455092ee8778fcc99213afecb2e696c963f09270ced58d2dba0896241385001dd5db821041075908e249aa9cd51b02eea020fedb0dd8f99bec4967486e8210b334ab412f15b2d99bd811c923214f2a9e0db8a1f5322827a8df7e9d82373318b2f9e95152e4ebf126b00b8c7c615de9e6508246812ed1675954f68e8d4f010ce62cc2af001669644c5212aa91fae10295444ac6c48bef392f6466f76f17ebcdf14ee31e73c12d0e20e2aab936b629bce38ce16a0e2066d8a157986df46827714d90dc58d6257377960aeb67dc695d2a58282a049c5f350b1e3bbc7ed70a80ef87b72d5614e850fefb0054a452dbdcce334dddb4c0722de5bc15bf24efa937cf816f0de2f788aaab1beba57e17d745745fa18cc1686e6645adc7391fe0f2be644d4562f763c74e6694a1825190f8d8ac9e4dcbf808f4b12444db7e60ffaf673f865c1749a6e21e5e7620280825d13ba7dd34dfae1d534f7236daf486e665e6e410be2c151088fc1a32286ead744ee2b8300b0021fe86e0a1c28bd4466af6924047ae911a210d0661cb9e5d1863240c4d052e77261801dbca4109315c8f5a3d9387eb018e6ae94c1a390a9078231d7f57f2fb882243762e98de32cfbf1b0baff206fd51928d2dfa4b4b6884bf312202cbe25368431eaec94bddd24aa95a4453554b5c359a56fd81650688d81149dbb8ba26b28d13a2096fbe581a9ff2fe6ebfc7a0a011835a0ca8291742723aabaa9ba29e9754cb7207c0e2d86b070ec2e5ae9413ffa21b9a5cb671454375824466837c55ed25ec2d13d9b4808b46ec5960857b118130b575b832a6537b69092693785e7aa6e4c7643654d9eeda70d67ca64a91ed2ec6ce35965018044a8ae139cdfbb04801509de3e6152ad43abf92c0fa4f008d0c8d106306dfe8840b36711b85f980e167ac6c28fa07a14d1506a586e634c082b070a73bcbda76a353d3547dde84dba0408df7c19311f5f9b8a813b057363151db4dda062e675549eabf4b2178f596428844d2c15f9454a041f6110f322ee9f7a40269598813159ef07cdba43c46e8999622f9264536b0c96d80482835a8aa0909d101d4d01890a003d3d6a9282aa254820b20a4c1e54a81b0af66a2d21ce8337aef2af0e67f57ecc3d2e378200f07bc3d043f7bcf67d4ad01c14c8dc4550a33824339d57e11d5b5d43098c8362eb8c8ee36f027a29defbb139f59b25e63f9ce8889dc4f0ee16fc5945888aec21ba9327aef2e3d9bdbfddf3e696ad3f73249f5aaf8b464324daacb578b508b99a7ed4e59059505142a23c4026c352083c47fddf8b1524f46587dc2761d2b76c28e12f4625e8efa8b3d115198dab9b964c2959acd559e7fbdad441e68651c61920f673c52fd4b60e6d02ae11d312942b3b93c44d4a365e0c7c060f3fe5a5a361b8034186fca1b6b3452551fcf4c0b36e1d0ced49a258de3735f6fbb5ae6a466a88c9ba6912b14780369f7c26fc3efe1581a30a0a514994d9f0d30b20570e089a59efe3c9bbe0ed9ba315d29366d2d27cb755b63f2d75a3cfc356e5d86120a27467f7cbdc195e543443c6aef55c72e0787fece59da7290fdd0ccb5312e4d4a034e0101912353fce30ff1badbcca21b6d5d562fa9d5958a8af30d214055c1add0577487361b9725c83ee6cd361244e5b01014b86e7e0f7a4e37ba7d9f2d0b92c998e23e26c1bf1689a4204658334d9ad2c1537b40ba3194244aa4425bdb791387b5140b96eb6b398494e7827eddfb2616b0939d73ca6260513fce5436178f4daf3c349aa4f141cb5fe8690e75f9a3e1406adb03e5891606e645aaf5a8f224c9eabbbd710f6291e620f5685928636d96fb9cdade76f36b3243e058b2e181bbe468d7ef5cb9e578d5f8e2f3ae72a9177f13b88f95a23f041796eccfd04da612126a6eb40ef185ecfea072adfedbddce3b3fd0f088858ec269b65bd4dd6ec32b7057312a525165fb1652e21b4d65e095f01d1f37347c804d44e26366dd7eaeaf1a3b7c64126cad15105af2c8bb2202a14e722661a7097a546ca4da139ca166aa0c1bdec9dda7a46e371ceb2675903f86bdf02c92b1c6b09d0e256b14e5dbb1bbfc5cee6b86f630e96e3000478481c4454d0bb9fe09b58ea0d06bd13eb3da0a2d86bfbe9de1f6786067747b639356a24dafd073bc119356449012b8662b8592251aa3cf7dd066441711912457fc8d83acde2dad51583f650010a4ce3986c18d7fce290a031730743fcc18130a39d012abfe97211334305c4a599db943e6accc034d9b94eda7056d5a6f4be941eea099b248f43a3d89a91612cf7100e26858c28234e4cc6b971ab1a23a6c1f53964d31b20dc97162cbf865fe49b65f13cd53d6c11e95bc1d73cf3a8f26fe14c09013ebdbd7e6b0d8c7054408510d8f602641350cc994f1a31e689e5f98b0e14403f16895b2931aad23b71a356c07e8a158a3de8a8a0bf22d24d41aac811e1625efb27dcc2859b21d145b8bbb73623e2188d9427216a4804035244cb4680e529e75c61eefde97d3760c6005f3ae9f2ff902c061351648b3b2e2d3536cce3432ffbe5fd32cf7dbf64bbe8a97d93b5b3667b2d70796339441b8e743aa9e84a58c50b864bcb3967ebda877e193d4900ce76741515f5f5a3acbbcb8257128aa4107c7b8e050ae44b87798d2301b7341b5f6dfe9e1c5629c04b1ac4ceb3bfd33c5d95a0acbc6597dd0bfabe28a86e3e51bc5d2341809161ae4b8ce1bb0713bf72caa0d85776a55d5d72451c0b2d4512512cee40e3626fe46459bbfc94df143a9c4ba8e3c030f714c99857a29ac2b0815f484beb3c61dd8ece3be6dfe88b331874e2236073838cea7a94226aaa4225f8ee585f3a49d629807a5bec58ac2719c15652af9438a7a91e53d052749af79b8594222ee40dc702a0bbc61b01eb1ce3d0f9ac6a58a41471f2542db657992716291394818da6f1acf88e6477d41ef7406093ba3bae8771d54a2ec934b6d76e37a0956e4402ac3924373541c9e9ef042fb490c6f7abee39e0f30cdf6dd500e6a023a62a7334c4b056a51133647fe16482d05660df26c6d8da390495509ebb1eb4ca101ff601b984b948388d4d7db56ca52fcf926ffa247c307ad3cf8ecfe77facad9b06f91b9527ab8f16ac4cc572d0d449d0e54bd85a7e86ef281822469e060c1b4a9a723e7fe86445619051d94da4f667535471b0ce4782ba25d4589656487fce7e661f08addfa576363c7b6f5e433495ea3a515078f79397fb87d86cacfcac2a9a4c6513b79974325d7e12490e80f11693a8725e0a87123be2569846838e63b44f83b1e4968cbd12b1770ff39943ff380a75f38ca583c43293b035bd8ccaae868485c2b932aea34f9222cc86fba2b4b885bf5590649b370da46cb28fea4e3f09a7805723b1f18b558e480d9b0a37a38376c6165922077fc46485ef4d296ef83883bcdbfca7404c038d1013d4d954f70f22e51b8c4d84ce11340304bb86f2b5a5ee460675102a71e4279f9b012709fa40be07727710901bf70680297fd73a14ef993ed3e9e4a0a8573a32dcf0fa5dd93868e03b1efad58031515c4e8a81bbe34813a077b3316fa93105a2b6039d79f7e2891f4e767f533cf2f88b58868ca36595c2d87b34c2d8ebf7e1a7847d4bb127387643202554bebe3ddab520ad1bcf02506edf93aebfe815e067c92680d1b696d89672f42568236737b6e3e1aa45cf3cdd8069b03d52cf143e9e7008e1e4968bf4e9342a0b60dbbcf72ff4a7678e972848dab4935357773be2c3bf7e9d9cde1f38a601e8fb3823f3ef7334af96b22060c7180853bd5acef00e38dc59fe3469cf9bf2bf5b537e8c9a6accb1c6fb4301058c6d66e7c7b571cbf352fdecf3bfa6a7566ce5f1f4bf012d8ec385649be7c73da07b213c472767452d3a6af01ad45a0a7b407865aab2bee9acec9ad1880faf17f9586ee1f4a3a41db8ce9eca03e726dbb2ea73aa9c3f71ea8d009462ad833a1782e9722ad3ae2ad2439f3550db6750ed368b0ea0d5b349c8040013fe227347cc61d2e881a01db8f41fce3c8e6e52022655a4d09051e632a23bc4c05f8cc95185154eb57b91f51d99ad7422434ffd8a552707d1ca3934f6570fc666eca5de90c126414e47d194d51e1a65323db5e87fbdcbf14d02adea79a32e496c05f22bf0826ebc57f67f77f536a566832848eab1586b4d1b84f9411f0193ce7e99e6c8e2e04421b5789e0221cc2c9d9948c29df7c99b4bc3075c52ec7f6050057dd741feb05ee6c409a3e64a56abd6c1107ed39b4aa476818a5e4ea73bb9b319b81979dc928e382c750ceafec266bd006faaed06ae3aee63eb3f8961b541bbd35a50f6acccca08e0e8bac6b166022c9b9599b78d8ad59a6bf93b73ba21d8c3b8a528057c4086755ee885765b910236ed04e8705c8035521e077c759dfa556c1cb7002a455a3a061c93d1c19f73a7ee8ad3ecf6c1441e248d3bfae532009238dcb8cfe3531017ff83168d0210ee48b75ae42856f5d9477971739c904312e8df85df4974fac01cab84fbb295f05a1ae77ffce7a8c2d928d1b08d5e92ef2cfd89582d6e08278ed8d4fd48e7c8555d9003c7507e8d54d7c9784bc0d969cf18fc114500c759c640a44fef166ec39edf432fcea30aa551275660cfbf41d7ea29d9d07667d2af345262acca4ed52d4eb564860d17fc733978854d937fe38985699f18840bb2abe2931ba1c63ba0a14555083fa8c71a07ae0339affad597bbf430299791378d50e52e05f6c6a32092b8e75c43b3d389820ff790fedb099b445ff88d9d186504878855d8943402ab109346b8f43610ae26f5f834ada0b8c353ac2c743c512867271e442d905f60ea25c7759fd789a81010d0999b169068c9d6da14fe5ca57d57601367ac3ffb1181458462e1255df4315b9b5074ed3be6d1f5383c1edb46fcb6493dd827de5d52826c3c8ca11fcc982ae85d4e96ba9f367dde1f552406f06d3f1f5e7b2917c02d65be77e98e2e5efaf937078231f1428d00d866bd18bf35c0df0b37cfe3be573f37370e8f905d08bf4283f7af9f7e31b39ff42ed273d32ff3d0df638d9a4ac621820555a1f728515699aa657ddedea9129e9d20b5b51dbd700908b80cea0db9aecbd2029016fab8101b28ab89a4978114f1c7de629a660bdd4d56249e2fbd63e7f49a06c6b59e0cb3520b35c3344c8f739c1cd5e5028c4e97175af3cff125966b8f84b9ae491fd1eaefe4b1e3de89898ad4a447a049587cb1bd9c61570efa0f25df2577dc5bdb518dfdb3f048b9ba3777871f3fe9defddc6e1e76a5d56681710da87178e01a99bf33f3778d4c0cb51a5837b47cceb58dd", 0x1000, 0x1}, {&(0x7f0000001180)="9d11c389ecc681c7eeb18c434e895f49a8b5cbdb8c160b9140d986fe407142db6ed0513013271a498ac2d7991e45091944bb5c22663fc18e88a76b76a12d0749cc7198be541bee63b23ae7125b72d05d61baf8b512e51b34c3928a06ffb19bdbde507e62d6c63d583c0b8256a301e6db9ccfb76b60bdc708d529abf4f8b0e366ee66632308d32f8a77df85086dea9ebb33d577179f395df4999bf6f34ae4164fa882024d171ee24ab53689ec55e3d7ffc0b3e1773b4e335ea476f3bd512c7eaa53caa2d9d8b93e40d2c0633cd83f255e9f3aa6a3f1df569644066157609d8ecfdcce", 0xe2, 0x401}, {&(0x7f0000001280)="5147eda83074a445144aded2c6bc2166b11cbbadc5c15f47dff2a1c964f25e8bd4c17938bee82aae312b3cab4b1fc4288e79c84c5ffac0ca2421ba29617183ef40b447bf169adcefa5b3d515cfb855266a77a0c3efee6ce220eb3051be570a56f14b8b99b13c344f79b3a65c5d6a862bdcfa0d044c603716e033aac800237225fb7f23d0af04af5e04cea85131b549fc35d2a23dcc4f8f4328545ac39893ca52eb6ff1a8c6822765a6", 0xa9, 0x72}, {&(0x7f0000001340)="468f4b1d4bf6cd71bface30903369d4a27d100e1d16bd459736fbd21b5c6156c2483b299ad7102a13dbddedfa5297d75eb75f7bba2e720bf02609efda796c585ba", 0x41}], 0x8080, &(0x7f0000001440)=ANY=[@ANYBLOB='flush,audit,audit,euid=', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB="2c65750564ef", @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000013,mask=MAY_READ,\x00']) sendfile(r1, r0, &(0x7f0000001500)=0x2, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003fc0)={0x2, 'wlan1\x00', {0x8001}, 0x738}) 18:44:00 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x3, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1]}, 0x1c) 18:44:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%\t(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x500, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x8, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xa9, 0x52, 0x2, 0xb6, 0x0, 0x8, 0x80010, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x4810, 0x4, 0xfffff95f, 0x9, 0x80, 0x1, 0x7, 0x0, 0x7, 0x0, 0xb8c4}, 0xffffffffffffffff, 0xc, r1, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 23) 18:44:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffe, 0x9b, 0x6, @scatter={0x6, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/66, 0x42}, {&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f00000003c0)=""/167, 0xa7}]}, &(0x7f0000000500)="24d263f3fdab30ba828f99e7f8aebc9425887f1b91ac03c6b426826c045cd524133075fee0dc19d51410de68c4204fa01f3087ccf5c250399e04437491be140c639193de55c9d30ee4c94b145b3ec2627b396fd9a796fae0d26ec08c2c9f81aa8c9d116453c851652b38a5d04c1d25d499de780706b3400de90510798c0318c67fa7b9037976d808d41be82711c46631e9cc2c5445a71731085503", &(0x7f00000005c0)=""/153, 0xffffff7f, 0x20, 0x0, &(0x7f0000000680)}) 18:44:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x0, &(0x7f0000000100)) [ 1163.975870] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1163.975870] program syz-executor.6 not setting count and/or reply_len properly [ 1163.988907] FAULT_INJECTION: forcing a failure. [ 1163.988907] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.990346] CPU: 1 PID: 7809 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1163.991401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1163.992432] Call Trace: [ 1163.992777] [ 1163.993082] dump_stack_lvl+0xc1/0xf0 [ 1163.993608] should_fail_ex+0x4b4/0x5b0 [ 1163.994166] ? __kernfs_new_node+0xd4/0x870 [ 1163.994738] should_failslab+0x9/0x20 [ 1163.995269] kmem_cache_alloc+0x5a/0x390 [ 1163.995835] __kernfs_new_node+0xd4/0x870 [ 1163.996395] ? __pfx___kernfs_new_node+0x10/0x10 [ 1163.997018] ? selinux_sb_statfs+0x1b5/0x240 [ 1163.997622] ? __pfx_selinux_sb_statfs+0x10/0x10 [ 1163.998265] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 1163.998986] ? bd_prepare_to_claim+0x2ae/0x310 [ 1163.999686] ? shmem_statfs+0x1b7/0x3e0 [ 1164.000239] kernfs_create_dir_ns+0xa0/0x230 [ 1164.000890] internal_create_group+0x786/0xb90 [ 1164.001540] ? __pfx_internal_create_group+0x10/0x10 [ 1164.002370] loop_configure+0xce1/0x1900 [ 1164.002987] lo_ioctl+0x934/0x1990 [ 1164.003039] ? do_sys_openat2+0x157/0x4c0 18:44:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4040840) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:44:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%\n(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1164.003841] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1164.003890] ? __pfx_lo_ioctl+0x10/0x10 [ 1164.003936] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1164.003968] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1164.004017] ? __pfx___lock_acquire+0x10/0x10 [ 1164.004060] ? __lock_acquire+0xc29/0x64f0 [ 1164.004165] ? __pfx_do_sys_openat2+0x10/0x10 [ 1164.004225] ? __pfx_lo_ioctl+0x10/0x10 18:44:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[0x0]) [ 1164.004277] blkdev_ioctl+0x35e/0x7e0 [ 1164.004318] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1164.004359] ? selinux_file_ioctl+0xba/0x270 [ 1164.004413] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1164.004458] __x64_sys_ioctl+0x19e/0x210 [ 1164.004511] do_syscall_64+0x3f/0x90 [ 1164.004549] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1164.004591] RIP: 0033:0x7fcb028838d7 [ 1164.004614] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:44:00 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/66, 0x42, 0x1, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40) [ 1164.004645] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.004677] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1164.004698] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1164.004718] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 18:44:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="ea812b51a6037a9e9ce1b5a52592c50fe6b9e7bf7e9fca9a3ff978ddb4f6b05c99114a240e7301bb63e524f1a8392ce84ebf6966db01c69e881b56c8aa01de8999f2c80e2f5b6cf451f0a27a22aa5d7c14dab5c95a7f3eed64c618d53092e6395e482a39d9fc0c1d588ad23a90eb60b259d926127ed9a8ec358720460d156f0282fece23252332dfe64e6098", 0x8c) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1164.004739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.004758] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1164.004805] [ 1164.005591] loop3: detected capacity change from 0 to 4 [ 1164.032122] loop5: detected capacity change from 0 to 8 [ 1164.111988] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1164.124561] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1164.124561] program syz-executor.6 not setting count and/or reply_len properly 18:44:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 24) 18:44:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%%(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x600, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1164.292836] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1164.292836] program syz-executor.6 not setting count and/or reply_len properly [ 1164.307117] loop3: detected capacity change from 0 to 4 [ 1164.321945] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1164.861039] loop5: detected capacity change from 0 to 8 18:44:13 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x82, 0xf8, 0x5, 0x8, 0x0, 0x9, 0x84080, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x500000000000000, 0x8}, 0x40020, 0x1, 0xfffff001, 0x3, 0x2, 0x50fcde17, 0xfe00, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r2, 0x19) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup2(r1, r2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0xfff, 0x3f}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 18:44:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf\n\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[0x0]) 18:44:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) io_uring_setup(0x4f3b, &(0x7f0000000040)={0x0, 0x2c34, 0x24, 0x2, 0x198}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10) 18:44:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000040)="75293344b918e44e6b3e14c9f50f3fd375c757f74e55ae4cc47b38fe3b5bb98cc33f6eac57fc5f081d62faf8df3bd6c1cafe5fabca48edef4e815546703e0abf7b753dcb951eaa082ebfeb48f3a92b5038c58fc21faeeb92046e3606d611a8556821614863fc126536378ab478f7b2f551b862d23a0a49ba04591d7abc196abdc3019f168d3c9f2728dd366820d180f1993b8c3c839da9bab68c3a485832b93195fc445f9775884e3f3eea6fc8b9fb6ca368d1fbe903edaed86e171cdd0996c43a0e64c7c87f0cbac5a36d872a0774dabbd4d820c8db1326599dd9ed8dd1186e51190782", 0xe4, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) 18:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 25) 18:44:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x700, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x57d1fe970d731946}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x48, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x45}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xbb57}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000020}, 0x2001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_pgetevents(r1, 0x100, 0x2, &(0x7f0000001640)=[{}, {}], &(0x7f0000001680)={0x77359400}, &(0x7f0000001700)={&(0x7f00000016c0)={[0xbd]}, 0x8}) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, 0xfffffffd, 0x1f) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r5 = syz_open_dev$vcsn(&(0x7f0000001740), 0x5, 0x602) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0054}, 0x80) [ 1177.010375] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1177.010375] program syz-executor.6 not setting count and/or reply_len properly [ 1177.041214] loop3: detected capacity change from 0 to 4 18:44:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf%\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1177.054243] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[0x0]) 18:44:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/233, 0xe9, 0x1, &(0x7f0000000100)=""/113, 0x71}, &(0x7f00000001c0)=0x40) 18:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 26) 18:44:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xffe, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000100)="a7443016a44fed4b735276c4c1deed63a0ab60b2856422e48b1ef664c496536976df10edf9b6cbe7bc16ac012b1335f75d1854011dfa7fa4efcde84c05fa673b967cd5132b32b187d4bc229c7bf8254e79b4ba72d1b47bc036f6ee518650fa1183f3d71d207da8c0c66bac24c136241baf08e90dc003e4e8c72faa35", 0x7c}, {&(0x7f0000000180)="3f89cd62c970f7d0cc0faf3359741f4e4b516a4ce4c575062cadef54a813cf6f8edd020bb2be5dae0321028a0f7bf087bc0f245b1d6fbfb8051a0362c1027c3330fad6ce10bdef2510c63b8fff89903cec25a9e64c5375ec07696f8fab876c64c335aae085f65fd33227133fda585eb878912cd9f433095ff8ea5de41aa20ef948548101ea3dee51d447421c9bb3f0e0266e", 0x92}, {&(0x7f0000000240)="ca", 0x1}, {&(0x7f0000000280)="76b595cf229ba88c851bd66d254381648b68d919672514647ee90b765aa38ccb3b975dcce97d2dd4e87f027b4df08af4be902f0b2160bc4229c1506f148f3f127d630ba51275f515156411066aa829979aa7df29d56143cb1dcb40d93fb9dc3261165f297fded438b20cb90e030e15026a7e6ab2db1fd48216de8699a5f78520215bb9b68ff289925aaea6a42d5f1b6c933e4abcff4b622a34d38cacd07b29b8d4b427c7f947", 0xa6}, {&(0x7f0000000340)="48afee", 0x3}, {&(0x7f0000000380)="267d3d50c9431060a4a61123ae691e0e9d7bf042ce531ca1932a8cb990ffe0f35d00c6f3fceb0e6535f613d19f0150544a9838fd58b0679884770a80d0227fa2d4538e3b45d154c677718234f5b2bd5b83a1969183e3032a537e5ef8403ec49eb82375c8a022dd269b71c83097a13c21743e3d70c1", 0x75}, {&(0x7f0000000400)="a0a794d9555fa66eaa65bef408f64f9ec71585c9c74d6c23770d45a0453a05dd638759d7f5bf02dbb364f328cd8300d995c17617976a8c8cb4b5900ba3c029cbbaab2eb93a8f0aa098480e178a3db5d53251060dd70882b304d052ca6fac435a6affebf1b1cc567e5adc43f834aeb541024615207858a91f5162828fd00cf95ce51e0cf1ac2a783cef2480d8e8fe1e624e5fed5670f2669b3c55287341ead54fea7208da93a53aeb1e", 0xa9}, {&(0x7f00000004c0)="b6eea167f3fe77707e05060da04d556e07cc5b9d433701c58ffdaf53764d224779493823a8a8d227ef8fda84bcd8b5503ec20484c04e4093f1e5d8cd22bf31951a141fef50fc65aa4cb5", 0x4a}], 0x8, 0x1, 0x7) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0x41, 0xad8c, 0x6) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000005c0)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 1177.290070] loop3: detected capacity change from 0 to 4 [ 1177.307177] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 27) [ 1177.595827] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1177.595827] program syz-executor.2 not setting count and/or reply_len properly [ 1177.607316] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1177.607316] program syz-executor.2 not setting count and/or reply_len properly [ 1177.652935] loop3: detected capacity change from 0 to 4 [ 1177.660138] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'\n[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:44:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x42, 0x80, 0xa0, 0x8, 0x0, 0x1, 0x40a0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x10001}, 0x43a80, 0x7, 0x0, 0x1, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x8001}, 0x0, 0x6, r0, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x7) 18:44:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x3e00, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:27 executing program 7: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @multicast1}}}, 0x108) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x20000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 18:44:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 28) 18:44:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) fcntl$setstatus(r0, 0x4, 0x40600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x90000006}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d250f5e46d9782737e900824328af5b2726272d5b282c202f6465762f736723000ad037b3b4a96b4e432e74317e7dbf489a96636532e0253b99cb4d9a185ce8bbded36e54bda533123a78d8e342f2525e78f47711bc2d493b86ac9ef2c8fbe2c26b9255898694bd79dda9b024d1eddeb9906094e4d880b36192c3c668232970ba202ccbb489e9da"], 0x2f) [ 1191.425254] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1191.425254] program syz-executor.6 not setting count and/or reply_len properly 18:44:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'%[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1191.474226] loop3: detected capacity change from 0 to 4 [ 1191.483480] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) splice(r0, &(0x7f0000000100)=0x6, r0, &(0x7f0000000140)=0xffffffff, 0x4, 0x0) 18:44:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/227, 0xe3}], 0x1) 18:44:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xfe0f, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d20242729254328af5b2726272d5b282c202f6465762f736723000a9a6eb13053c0192ad25f686739ec94ca8809483038a5bb903765ded8b9a677924c2da55fbcbbdd6084cbc46717d406262ee6e59eb2db953d0f9dd1a40151e14051bad0a20b7fd91f325b2b2757bceb7bb90d1915489fbd43481fd7d3dd90edb691b985be2922e0059966e7595efc954fff0c7a8041e27ea26e60c39c7839f5"], 0x2f) 18:44:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 29) [ 1191.651183] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1191.651183] program syz-executor.6 not setting count and/or reply_len properly [ 1191.725096] FAULT_INJECTION: forcing a failure. [ 1191.725096] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.726549] CPU: 0 PID: 7925 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1191.727486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.728405] Call Trace: [ 1191.728715] [ 1191.728989] dump_stack_lvl+0xc1/0xf0 [ 1191.729454] should_fail_ex+0x4b4/0x5b0 [ 1191.729956] ? __kernfs_new_node+0xd4/0x870 [ 1191.730468] should_failslab+0x9/0x20 [ 1191.730938] kmem_cache_alloc+0x5a/0x390 [ 1191.731459] __kernfs_new_node+0xd4/0x870 [ 1191.731958] ? __pfx___kernfs_new_node+0x10/0x10 [ 1191.732515] ? find_held_lock+0x2c/0x110 [ 1191.733016] ? kernfs_add_one+0x3d5/0x530 [ 1191.733514] ? lock_release+0x1e3/0x680 [ 1191.733993] ? __pfx_lock_release+0x10/0x10 [ 1191.734522] kernfs_new_node+0x97/0x120 [ 1191.735042] __kernfs_create_file+0x55/0x350 [ 1191.735632] sysfs_add_file_mode_ns+0x21c/0x440 [ 1191.736231] ? __pfx_dev_attr_store+0x10/0x10 [ 1191.736814] internal_create_group+0x322/0xb90 [ 1191.737405] ? __pfx_internal_create_group+0x10/0x10 [ 1191.738055] loop_configure+0xce1/0x1900 [ 1191.738600] lo_ioctl+0x934/0x1990 [ 1191.739085] ? do_sys_openat2+0x157/0x4c0 [ 1191.739649] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1191.740329] ? __pfx_lo_ioctl+0x10/0x10 [ 1191.740856] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1191.741500] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1191.742169] ? __pfx___lock_acquire+0x10/0x10 [ 1191.742756] ? __lock_acquire+0xc29/0x64f0 [ 1191.743367] ? __pfx_do_sys_openat2+0x10/0x10 [ 1191.743959] ? xfd_validate_state+0x51/0x170 [ 1191.744527] ? __pfx_lo_ioctl+0x10/0x10 [ 1191.745049] blkdev_ioctl+0x35e/0x7e0 [ 1191.745536] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1191.746087] ? selinux_file_ioctl+0xba/0x270 [ 1191.746668] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1191.747223] __x64_sys_ioctl+0x19e/0x210 [ 1191.747775] do_syscall_64+0x3f/0x90 [ 1191.748249] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1191.748911] RIP: 0033:0x7fcb028838d7 [ 1191.749382] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.751560] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.752491] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1191.753359] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1191.754220] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1191.755074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1191.755945] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1191.756827] 18:44:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0xb}, r6}, 0xc) r7 = fcntl$dupfd(r5, 0x0, r2) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0xab358d1624cd19e7}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r8 = io_uring_setup(0x3f8d, &(0x7f0000000280)={0x0, 0xbf6b, 0x10}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}, 0xffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x55}}, './file0\x00'}) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000000180)=0x2, 0x4) 18:44:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000, 0xb5}}, './file0\x00'}) write$binfmt_aout(r0, &(0x7f0000001040)={{0x107, 0x70, 0x4, 0xed, 0x49, 0x9a7, 0x139}, "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", ['\x00', '\x00', '\x00']}, 0x1320) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65302040405b2bff03000024272d254328af5b2726967c0dabfc854e706c4cb90f272d5b28"], 0x2f) 18:44:27 executing program 5: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='limits\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1191.793209] loop3: detected capacity change from 0 to 4 [ 1191.805183] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 30) 18:44:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'.[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) recvfrom(r1, &(0x7f0000000100)=""/116, 0x74, 0x0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x1, 0x1, {0xa, 0x4e20, 0x3fc, @mcast2, 0x7}}}, 0x80) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) dup(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="2800d5ea23fcb890fd03000011963ee99d2806d5a7101c14379a6e3d5ff9fba65c8bc36ad13d7e8e4d973d2e440a3abb00b37bcabf719c00000000400000000000000000002a"], 0x400000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/203, 0xcb, 0x1, &(0x7f0000000340)=""/47, 0x2f}, &(0x7f00000003c0)=0x40) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) r7 = getpgrp(r6) syz_open_procfs(r7, &(0x7f0000000200)='net/udp6\x00') 18:44:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x628e4b6b01c454b4, 0x80, 0x81, 0x0, 0xf8, 0x1, 0x0, 0x5, 0x8080, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x6}, 0x4090, 0x79df, 0xdd9c, 0x2, 0x0, 0x0, 0x480, 0x0, 0x8, 0x0, 0x90b}, r3, 0x5, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x4800, 0x20}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x64, 0x1, 0x7, 0x0, 0x100000001, 0x80000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x800, 0x1, 0x91, 0x4, 0x3f, 0x3, 0x6, 0x0, 0x7645, 0x0, 0x9}, r3, 0x2, 0xffffffffffffffff, 0x0) 18:44:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dsv/sg#\x00'}]}, 0x2f) 18:44:42 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x2, @rand_addr=0x64010100}}, {{0x2, 0x0, @private}}}, 0x108) 18:44:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x80000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1206.676478] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1206.676478] program syz-executor.6 not setting count and/or reply_len properly [ 1206.682876] loop3: detected capacity change from 0 to 4 [ 1206.693348] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-\n(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 31) 18:44:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x6, &(0x7f0000000c00)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x3f, r2, &(0x7f00000006c0)="4be339c687c73e6bcf781ad1a898963983c48b1257973aaa02608821951ddffa2c0cc4fee1945e318b037928c987a7ed7ef68d054bca8a125e8dfb91d54657c0da523c28945c74b143452685224d4a2b322b8f621415965b72d581e5d27b63021a53f24637ae6afde6fc6df265fa04fd07f9fdd48af76ae5b9b83481daba6d43a7c77b73dbce40796df0ebf5ae7c024abbd303693ed7c732600a7070c747e02b5d9dc11a6652d0bd1731d01627be544338b670f40fb37183830bbaf7f497bc8e3442e57976c175", 0xc7, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000800)="df0295fecebc599125d15ce97a06bcbb3d3e0baedb9e3f856b0e76da2a2a57ac5b3576c87311786431ab5f91b331e1307092861b4f7b6e03611e9498a023dcb25330c96af49529df8fa8ec6c150fef6501e2c2ae67c6d71371b95eda4a9bc79909bf5e17776af8ac36270fe680831255dd27d3cc", 0x74, 0x5}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x8000, 0xffffffffffffffff, &(0x7f0000000a00)="05c56580e8821c8df04b9677a586c828f0d3af13a6a4ea6507aaae73050d2bc1946edd2d98763638d6da0a849de21020f27b0d370f133f0a0ebb205292190df7aa6abea06529ebb66d356c65b5b0134102232c799a69855ae6533a29001b1c8aca3fb3434b48", 0x66, 0x7f, 0x0, 0x2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0xf42, 0xffffffffffffffff, &(0x7f0000001040)="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", 0x1000, 0x4, 0x0, 0x2}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000b00)="4daac922", 0x4, 0x6}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x56, r0, &(0x7f0000000b80)="b29a09af8a49871243b68b3e809ee4f4e4ac1236153dfe4472ee86b261bb595fe6826f9449f8e3379b7a9af2", 0x2c, 0xd7, 0x0, 0x3}]) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) dup2(r2, r4) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, 0x20, 0x2, 0x70bd29, 0x25dfdbfc, {0x1d}, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@local}, @typed={0x2e, 0x20, 0x0, 0x0, @binary="e25c8b089cae76a3ef6b3e33c06a0b8ffe363ed0cc5442ee9121d76b73f35bf048b74ad07f67a4243b0d"}, @generic="b68a1d59759242bef318ee60bdb834eb09310b7bb0367e5b189d2d8a5e4d1395263a7d1eef99b0814b787a7a458c5c66ecd51ab32e5af84af33d2e56e299e0344fa69806929a5dfd2ef6e7d4acf51f9c113dbc1b260a81bc8ac3c5acfa56908541", @typed={0x8, 0x85, 0x0, 0x0, @u32=0x9}, @generic="9eff7885d2a9795ce7288bd268452d1b7a3d452883da16c032d4244a24d0fc4c33982cc862e06ebbf0ce537869db59f6c05128fe315884eed70a4adae03d5ef830c0f9369ff2080d40842ecb295e732318301a08188f995c3a87d30adf", @generic="58829cf9c5851c1b1f4ccffc6b2a8cd9f594f617ce949322a57ae537992c82eb2ae5af9cf5750db92cab0df9071dc089820c8bae686a128a5f6eeea8ee6c773e4efc84bf0c404c29ef9d33fe4e2642b6a118e659c726af8e470e25a7e4db0030dfa0d5dc234f43f72c731b2335d8bd1b3e9741ee5139d8be1c40955beaaa3ce0d08be9dafb6518134259c1b7823de407", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@empty}, @generic="6abf626646a16486740e95a05e37a096eeddb0abae245484ec3b3bed38bf9df44258d5b7f8aace5dc0a83bac1e789737433a2ef89a363d15bd37131b72d5046c4eae4da2c5d0a7e761fa4c06c2f6cf61a3cc65517198cf088e2eab9dfa7d9b32f831a3ceb6a004a0fba3cde967130374d1ed1076c2d549c03290d9b0acf812bd57c45850a400d74329fc753e68cced91695b4e1ee80152be265c15b8caf6b4f683d9c9f3c865d093f6cf269565de6999e581d2bdf9f0b3c9035ee1abb14b52508f89483265e34eb219b4a61a19d1fd33e3c46d4527af6b1fce0b6bec238d9aa63b65295ed2882b6920f61274c8965562cea8cd135478d1fa8eacc0"]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040040) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d252e28af5b2726272d5ba200202f6465762f736723000a"], 0x2f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf250300000005000300060000004800018014000200767863616e3100000000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e310000000000000000050002000400000005000200010000000500050040000000"], 0x7c}, 0x1, 0x0, 0x0, 0x80040f0}, 0x80) 18:44:42 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x6, 0x4) 18:44:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x8, 0x6, 0x5}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) [ 1206.896521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1206.924883] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1206.924883] program syz-executor.6 not setting count and/or reply_len properly [ 1206.943740] FAULT_INJECTION: forcing a failure. [ 1206.943740] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.945348] CPU: 0 PID: 7982 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1206.946418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.947410] Call Trace: [ 1206.947746] [ 1206.948073] dump_stack_lvl+0xc1/0xf0 [ 1206.948631] should_fail_ex+0x4b4/0x5b0 [ 1206.949193] ? __kernfs_new_node+0xd4/0x870 [ 1206.949732] should_failslab+0x9/0x20 [ 1206.950270] kmem_cache_alloc+0x5a/0x390 [ 1206.950814] __kernfs_new_node+0xd4/0x870 [ 1206.951423] ? __pfx___kernfs_new_node+0x10/0x10 [ 1206.952086] ? down_write+0x11a/0x1f0 [ 1206.952582] ? up_write+0x196/0x510 [ 1206.953084] kernfs_new_node+0x97/0x120 [ 1206.953677] __kernfs_create_file+0x55/0x350 [ 1206.954267] sysfs_add_file_mode_ns+0x21c/0x440 [ 1206.954889] ? __pfx_dev_attr_store+0x10/0x10 [ 1206.955512] internal_create_group+0x322/0xb90 [ 1206.956187] ? __pfx_internal_create_group+0x10/0x10 [ 1206.956878] loop_configure+0xce1/0x1900 [ 1206.957442] lo_ioctl+0x934/0x1990 [ 1206.957953] ? do_sys_openat2+0x157/0x4c0 [ 1206.958556] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1206.959296] ? __pfx_lo_ioctl+0x10/0x10 [ 1206.959842] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1206.960509] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1206.961244] ? __pfx___lock_acquire+0x10/0x10 [ 1206.961865] ? __lock_acquire+0xc29/0x64f0 [ 1206.962685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1206.963510] ? xfd_validate_state+0x51/0x170 [ 1206.964279] ? __pfx_lo_ioctl+0x10/0x10 [ 1206.964981] blkdev_ioctl+0x35e/0x7e0 [ 1206.965639] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1206.966366] ? selinux_file_ioctl+0xba/0x270 [ 1206.967143] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1206.967761] __x64_sys_ioctl+0x19e/0x210 [ 1206.968342] do_syscall_64+0x3f/0x90 [ 1206.968843] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1206.969535] RIP: 0033:0x7fcb028838d7 [ 1206.970014] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.972293] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.973285] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1206.974203] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1206.975136] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1206.976063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1206.976927] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1206.977807] [ 1207.073105] loop3: detected capacity change from 0 to 4 [ 1207.081456] EXT4-fs (loop3): Invalid log block size: 33554433 18:44:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet(0x2, 0x6, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x1f, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @local}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 18:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xe0ffff, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/scsi_disk', 0x202000, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0xfa, 0x20, 0x6, 0x0, 0x8, 0x19409, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x3, 0xffffffe1, 0x2, 0x6, 0x3, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x1) 18:44:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-%(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:44:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 32) 18:44:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x88, 0x1, 0x4c8e, "ad17bed22292b7e23b078300c2f04c0734bfc759bf1c14f94e28bf8e913bff9e3895def96db9268da445fc0f050591a7ebf5ed5e672dd1514121a4e85cadb43b125fecc7c5772388b582a81789800577313ffaacf2bff45e07933b742c0a385cbafcc8fd04611dfece09b9f4a2d47f4d237af0bfc9b017e27ee75d92fc533d7ce3ec1135cafd735b"}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x4, 0x4}, 0x18) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001040)=""/4096) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/d\xda\xa1\b\x8f\xca\x8d\x84H\v\x96\xb3\xd2\xa4p\xed\'#\x00'}], 0xa, "5f7d1129116812c46ddd2f807358b5cac16eb952bf5a88ec683835da81f4cd112d840b8b7e9fa59ea7b4c6331f6c8f801e1a35e9a6b1cf83a22bd49eef3876938e68325f24cd268a5c6d037771f8dea89d0ad88b43603009415a1e116962e7e1396217f552269cb80a3cb79518673a5904acff3b2002ccaae75bd4f9"}, 0xb6) [ 1220.186909] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.194003] loop3: detected capacity change from 0 to 4 [ 1220.196467] audit: type=1400 audit(1684608296.327:23): avc: denied { create } for pid=7991 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 1220.206836] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.220468] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1220.233510] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1220.233510] program syz-executor.6 not setting count and/or reply_len properly 18:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000100)=""/156, 0x9c, 0x5) 18:44:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101342, 0x100) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffd, 0x5b, 0x3f, @scatter={0x8, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/186, 0xba}]}, &(0x7f0000000640)="3c24521a09721d07028d99b070525d632cd1e3537aca87968301b42f67e015cc026759fb7fd8bf760e832ffbf9533c1e6fce8dec344344f21d91bd5aadee664cacc1da6e17731acccd48ceb759bc2f2c8d76ac48d38287952233ab", &(0x7f00000006c0)=""/36, 0x894, 0x0, 0x3, &(0x7f0000000700)}) r2 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000007c0)={0x40, 0x10, 0x9b62221e4b96c264}, 0x18) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000800)) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x8, 0xa8, 0x1a, 0x9f8}, {0x0, 0x0, 0xef, 0x6}, {0xbc4, 0x23, 0x80, 0x3f}, {0x20, 0x80, 0x1f, 0x3}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsmount(r2, 0x0, 0xfa) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000840)) sendfile(r3, r4, 0x0, 0x7) 18:44:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) io_setup(0x1f, &(0x7f0000000640)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000240)={{r7}, 0xa, &(0x7f00000001c0)=[0x6, 0x91f, 0xfffffffffffff801, 0x8, 0x800, 0x101, 0x2, 0x53cd, 0x3, 0x20], 0xfb, 0x4, [0x6, 0x8000, 0xffffffffffffff81, 0x6]}) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r2, r4, r0, r0]}, 0x4) 18:44:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 33) 18:44:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0xa, '/dev/sg#\x00'}]}, 0x2f) 18:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x1800000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0xfffffffffffff001, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1220.555927] FAULT_INJECTION: forcing a failure. [ 1220.555927] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.557346] CPU: 1 PID: 8024 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1220.558104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.558868] Call Trace: [ 1220.559118] [ 1220.559342] dump_stack_lvl+0xc1/0xf0 [ 1220.559746] should_fail_ex+0x4b4/0x5b0 [ 1220.560146] ? __kernfs_new_node+0xd4/0x870 [ 1220.560551] should_failslab+0x9/0x20 [ 1220.560929] kmem_cache_alloc+0x5a/0x390 [ 1220.561333] __kernfs_new_node+0xd4/0x870 [ 1220.561736] ? __pfx___kernfs_new_node+0x10/0x10 [ 1220.562195] ? down_write+0x11a/0x1f0 [ 1220.562575] ? up_write+0x196/0x510 [ 1220.562942] kernfs_new_node+0x97/0x120 [ 1220.563348] __kernfs_create_file+0x55/0x350 [ 1220.563796] sysfs_add_file_mode_ns+0x21c/0x440 [ 1220.564247] ? __pfx_dev_attr_store+0x10/0x10 [ 1220.564684] internal_create_group+0x322/0xb90 [ 1220.565123] ? __pfx_internal_create_group+0x10/0x10 [ 1220.565621] loop_configure+0xce1/0x1900 [ 1220.566049] lo_ioctl+0x934/0x1990 [ 1220.566405] ? do_sys_openat2+0x157/0x4c0 [ 1220.566818] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1220.567334] ? __pfx_lo_ioctl+0x10/0x10 [ 1220.567740] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1220.568239] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1220.568753] ? __pfx___lock_acquire+0x10/0x10 [ 1220.569194] ? __lock_acquire+0xc29/0x64f0 [ 1220.569650] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.570095] ? __pfx_lo_ioctl+0x10/0x10 [ 1220.570505] blkdev_ioctl+0x35e/0x7e0 [ 1220.570881] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1220.571297] ? selinux_file_ioctl+0xba/0x270 [ 1220.571751] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1220.572174] __x64_sys_ioctl+0x19e/0x210 [ 1220.572578] do_syscall_64+0x3f/0x90 [ 1220.572943] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1220.573438] RIP: 0033:0x7fcb028838d7 [ 1220.573794] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.575445] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.576165] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1220.576818] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1220.577481] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1220.578144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1220.578814] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1220.579495] [ 1220.588316] sg_write: data in/out 1818846731/5 bytes for SCSI command 0xa-- guessing data in; [ 1220.588316] program syz-executor.6 not setting count and/or reply_len properly 18:44:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0xfffc, @private}}}, 0x108) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16, 0x10, 0x1, &(0x7f0000000180)=""/23, 0x17}, &(0x7f0000000200)=0x40) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40842, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xe647, 0x0, &(0x7f0000000080)="b1eac3adaf425255853d9bea5923db855fc79fdfb57818d864bc59c106bedec310b0a19fb787d4059956cf6ebd07e465a0a20ea1d52c708a3d2dc620a72f5c53bdf9b6e2bf19388d2d48fa9fb6f121b63813396f49212db65dc1ab0212e9c044bb420a6a3b82e33dfbde805173a318c94c11b90f9f2bcc61bb9129067a4a3491", 0x7fff, 0x0, 0x0, {0x3}}, 0x6) 18:44:56 executing program 5: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1220.715847] loop3: detected capacity change from 0 to 4 [ 1220.731262] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}], 0xa, "29a4e9cc237e3db6c3db9761b0413f66f55275e90e8219e2dde8cf6d83531b7f79146f549a5808e127db6970e95e9a9b14322806eab1af3f028b93"}, 0x6a) 18:45:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:45:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) 18:45:13 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/icmp\x00') pread64(r1, &(0x7f0000000100)=""/170, 0xaa, 0x0) 18:45:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 34) 18:45:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200000, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 18:45:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x7, &(0x7f0000000000)="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", 0xff) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000100)={0x80000001, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @remote}}}, 0x108) 18:45:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x10, '/dev/sg#\x00'}]}, 0x2f) [ 1237.054555] loop3: detected capacity change from 0 to 4 [ 1237.069456] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1237.070940] sg_write: data in/out 1818846731/5 bytes for SCSI command 0x10-- guessing data in; [ 1237.070940] program syz-executor.6 not setting count and/or reply_len properly 18:45:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000380)={0x3, 0x200, 0x81}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="4e000000400000002b0000008399d047dedd10ec1e251eff684b868195bc8ee47ebc35e70a7f0914d1dc6406e532f1240454133df0f5a349b2601046cae3210043e4da139ee4dca925681cf44e0979a812669bdb20656d88a0ef"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65302726272d5b282c202f6465762f73672300f6ffffff00"/47], 0x2f) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1000, 0xff, @scatter={0x3, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/3, 0x3}]}, &(0x7f0000001040)="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", &(0x7f0000002040)=""/4096, 0x2, 0x10, 0x3, &(0x7f0000000240)}) 18:45:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) 18:45:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x66, 0xfe, 0x3, 0x0, 0x0, 0x80000, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x4, 0x9f9}, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, 0x80000001, 0x64, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 35) 18:45:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000004b80)={0xfffffffd, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x2, @private}}}, 0x2a) r2 = accept$inet(r0, 0x0, &(0x7f0000000000)) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000040)=0x5, 0x4) 18:45:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:45:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x25, '/dev/sg#\x00'}]}, 0x2f) 18:45:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r3, 0xffffffffffffffff, 0x0) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9, 0x9, 0x5, 0xa7, 0x0, 0x5, 0xa0004, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x10001, 0x2675, 0xfffffffd, 0x8, 0x9, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2}, r4, 0x3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="012a8d82bb7c90612b2b62690000030000dd0000000000", @ANYRES32=r3, @ANYBLOB="ff010000000000002e2f66696c653000"]) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1237.310272] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1237.430665] FAULT_INJECTION: forcing a failure. [ 1237.430665] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.432475] CPU: 0 PID: 8085 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1237.433389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1237.434312] Call Trace: [ 1237.434620] [ 1237.434895] dump_stack_lvl+0xc1/0xf0 [ 1237.435360] should_fail_ex+0x4b4/0x5b0 [ 1237.435860] ? __kernfs_new_node+0xd4/0x870 [ 1237.436381] should_failslab+0x9/0x20 [ 1237.436846] kmem_cache_alloc+0x5a/0x390 [ 1237.437347] __kernfs_new_node+0xd4/0x870 [ 1237.437843] ? __pfx___kernfs_new_node+0x10/0x10 [ 1237.438415] ? down_write+0x11a/0x1f0 [ 1237.438891] ? up_write+0x196/0x510 [ 1237.439350] kernfs_new_node+0x97/0x120 [ 1237.439836] __kernfs_create_file+0x55/0x350 [ 1237.440476] sysfs_add_file_mode_ns+0x21c/0x440 [ 1237.441342] ? __pfx_dev_attr_store+0x10/0x10 [ 1237.442209] internal_create_group+0x322/0xb90 [ 1237.443083] ? __pfx_internal_create_group+0x10/0x10 [ 1237.444071] loop_configure+0xce1/0x1900 [ 1237.444825] lo_ioctl+0x934/0x1990 [ 1237.445385] ? do_sys_openat2+0x157/0x4c0 [ 1237.446051] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1237.446881] ? __pfx_lo_ioctl+0x10/0x10 [ 1237.447562] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1237.448372] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1237.449191] ? __pfx___lock_acquire+0x10/0x10 [ 1237.449874] ? __lock_acquire+0xc29/0x64f0 [ 1237.450569] ? __pfx_do_sys_openat2+0x10/0x10 [ 1237.451253] ? __pfx_lo_ioctl+0x10/0x10 [ 1237.451859] blkdev_ioctl+0x35e/0x7e0 [ 1237.452441] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1237.453076] ? selinux_file_ioctl+0xba/0x270 [ 1237.453743] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1237.454384] __x64_sys_ioctl+0x19e/0x210 [ 1237.455000] do_syscall_64+0x3f/0x90 [ 1237.455558] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1237.456318] RIP: 0033:0x7fcb028838d7 [ 1237.456859] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.459374] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.460467] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1237.461463] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1237.462460] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1237.463459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1237.464468] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1237.465495] [ 1237.472310] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x25-- guessing data in; [ 1237.472310] program syz-executor.6 not setting count and/or reply_len properly [ 1237.477325] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1237.511043] loop3: detected capacity change from 0 to 4 [ 1237.552790] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000100)=""/200, 0xc8, 0x0) 18:45:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) sendfile(r2, r0, 0x0, 0x1) 18:45:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) dup2(r0, r0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'\x01\x00\x00\x00\x00\x00\x00\x00\x00\b[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:45:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:45:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x2f, '/dev/sg#\x00'}]}, 0x2f) 18:45:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140)=0x6, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @multicast2}, &(0x7f00000001c0)=0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:45:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 36) 18:45:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="81", 0x1}]) [ 1251.740598] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x2f-- guessing data in; [ 1251.740598] program syz-executor.6 not setting count and/or reply_len properly [ 1251.765630] loop3: detected capacity change from 0 to 4 18:45:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 18:45:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/163, 0xa3, 0x1, &(0x7f00000000c0)=""/71, 0x47}, &(0x7f0000000180)=0x40) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1251.803116] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x84083, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008044}, 0x44001) r2 = pidfd_open(0x0, 0x0) vmsplice(r2, &(0x7f0000002680)=[{&(0x7f0000000280)="ddec2587e6dbbb284e1966b12cb311d2b35cc91a35444288fb07b8dd535a2d3483419d57f91024c64494396d4d32fe591b09c97712d21c74637a29ea9bd97d8c4efaa05bd2e1fa0fd541a03135f93ed66ce4e51034a6f59331afab15c388", 0x5e}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="8bef7010829b5ccec2f1f0a3f617e939b06418cc3b0a45cc432cc844848ace095fa733f7a409ff2e1e475e3b9e61b82f2cbb1cd3c0e272c0663caf8a1ddbe94b6c220b42d179f480a526102ec615a5ca4291062fd0702e61befbfdfafd124932c6d9a28d9c0e4694a7b1ee2a9ac83b89056d2a342b5c358e326a0dd18151a1dda71159cc7bdf23243b9fd342fd94a9359ffa8902448ea87cc6850c20ed623422358e0b3d7d6e1e90e39fd470d3421df50b818bbdca58f5101750ea39d5552b470a8668de3f23fd812b4560cc09cbe4c02a6dae9a6bc879ed0c70f4bbee72d15a29c2e4aa755edb0cb66202dfecc3be8114953abeaaab64", 0xf7}, {&(0x7f0000001400)="d4991b06b638677d938dc606f2f37478ee9ae81a1b8c0c838025859edecd30fbad71ea779ce495aa0bbc9526d61c37d43108227ce1517aae78679bd39c46eb432240d670d155b2caec6be9c5b2d5ca2b8291ba1ac5577de50fafd863022f16b40984fa53ab3a5ac71a23d530b99a54c9be60c5c3136e6b3906acf63f988294c0866aa589b793e6cfe19046b838ff4da88fa75c3d93653424e572d1f214d718076a50ebd69a2c02170025098a1027e16d0ea33d72d22623626c8f3aeff6ad37594e233a763b2eb5cb6b78e7eea833d84670c5a9c781de56c4994f4790ead2d4e6c5e2d60c2ac2893afb1a65e8caad8ec440191847e65e51b6b5d0eaf30475cb16bc672b4af9b0bb4a07e0deccb915e8abd4821e3728712620a08a76fc5fbdbb244e5dcd31989261e49b3c45be21bddc076c604930c51581b7ffc59de9cc7700b6675b261b7a8b0b2e42af286a904bba49ebef002e86971102a4f57be5e3fdd882e8fa169b125147eef6914a3432c4210658009ce38d5c9e7293552e1afcfcc61c0e43eb94cc72159f30aab6f56db6caf2fc24cc5eb9e34f02a3a272b8799f3cfc33ad82468900884066b7ecc573bafd2835316691a0ddbe0846d19637ecce22df680cb687a499ffc6ef089d80849d5e2683e9ec7600419cdfff97d51d7ddb9ee617f2164aa429f0b091142e6ab52672a729c2768041cabd123d3fa80e6491339ae52d7c4d6a1bec5cf3323f0984e7149f8690aa483f04314607d139d4ddd065d3e5a9d84a7f33f78efedfad737e8a021bf15828b2f2c2ff107f0605bfac2d2dd1c25bd31b8aefd86662742379f582d90396531ee59d8e2146ecec5b8cf3ee6d8ee306f6b666ed15a58f6bfb6dd95776c71cd01432271fd4c7137c30280263c0ce77437838c72206aa2e287b043733d0f72531bfcde647218e06cb7e523b59faec33d3959db36bad3b6d8c68258e43cbbf8deec8479e06e597ef3e1beef5896f07ad2f8412cbfaa5d82c1b014fd24198e13f2ecfcaf510d20672e6473503185ee5902972a309e6107e7046500e1dcb832d8d7430a9b0d94dd52262074342cd2ddcf8159811ac44e1bd3846cab83546fe413e22a04e738d7e58ec2d2135b6bb4063c2c106e577f5d09dbfefc0e108b517d6988e715929d6f891dd466f98465271c7fdc86453747bfdfb2be5efcf6d3af16eebdba2b979dba58d374c6828efc099966ac19d189558d82827cbb914a2db994210023d1e288c0eb53005685b2a947cc524ea02acc489037004593a51e6df6a2c2fc1733d4e49d9056fcc11477c38ea38534c4d3958f276633e2f360e9df6a2e5dc33011b35c56e5230e9724b2367c5b3baa489da99e5f4dc283a734eb3168fc7084913116e6a6d382d5b36fd4b985ea7242bc39c3c0baf03b128dbb5eccd0b5b0a5c872c8658e8b320e3ffc9ad5ac8b7da0fbab9aa381ab38d0e277afe40f5630d5ea638ef6a4d288ece7eb6875825674ef5a945e772546d618aada6d215e1c44caf37062713d5cf35940c3ebda69c2ec8aed91683198689a50cb025bfb9fa9a897448a61d318e3a3ad3f35460a0d5d69b67280cd5663898c07655ec0f04601f271509dd1dc79ee0fa60a096e507ae7febe84dbc521f1b0d94dd79e6e62caf6d1d4d9cf46fc49a82760918e67e14b12d8702dcfe2d26af3c7a934607ca563c808b7131eac87a38635099bc29fc0b8486ebd2ea68094a6bfebd2c564ba2992ee284cfd6b1f96ead0858596376b173e5070b8081db3475149c60a8606e311c9083d9e4f8a9e45e99b6cf2f7b170ee6ba3e2e9ffa3b983494564088098d0c781956a5a25758bf8fcf0af2a9fd1d036d48a2929271723394437a44901e50f8203965961ebf9e55ba79c753a9c0b0be31fb71edbf5241ec3792451685a2290a41d429a3f85889efd0efa9ebac50f3f3ed96f2af2286f4ebffefc781058c299a5fe214f93bb59b9a53be25c6e2ab0ca74f6723e12dfa80d3ed655ecfba42a94cfcdd470d5d4276934ab0f8530476c03957f3ad3582a011706cbfc56765d8852170829c0929bb55d9d2b4e688e2bb35c863eca642298ac743a1a25f2f0aad5e05964d958829f112f417ff9b04258781e01e5f53cc867c9b3bfcdeb16192ab4a561c9f14c87fbecf240d7a836872f0dca71c54e3cf271e519b5bc1d8e6053e180db1cb967130ba2f000687c540b2d32df4d22cd4fa2f7df13eb46cf84565f7b033933550eca6a4dfdca0cc70d67b8e69e956c85e9059bbfcaa05bd2bf02f5eac7ec98c05ce75ebd99ad5ebb229154e5083d2f8af395db102c20a847db713264e33e850a451565b755f39287e95ffbb1481bfc63009a2819d0eefc120af74887e218914b4d219342294a8bd9af3dcf9ff50e82ba6f6e773c59019d45605042a357a33f27d227d28be43ffa7fa995bb93925f6471d04313690bb126a745cdececa39288313bb4b07a78fe2819cc0cfa19365b416397dd6e644310f2494797e0c6eae908c7ca0697beb60d57f54bb7a792a5e07492716a47debf6d34af416ae79bb32e39ce0550012e6cbd4be1271a22f3a239137b7695b98c3796b0544f196fd76c723b5b0a3d1e0765febbcc452a8dca923189a40d06d81d854f13c2d1937e9bf867adaa24289029f5a44bc8d5a6b466c933808bba5c8b0830e2f2c2b3b33a35bc99d289e5291b6719291157626b5302abb7b8be337c2c88e0aa2b46c0eb450b434bb255d4ec941d75788b615c9702446af1cfb0273255a215926eed320950503402412ce9e4e71639680c2bf0255f71d231026a29fa87214be32c628ff25855398070a4059b9cdd0e47a38315608ea761aa04b6441b6ccda94f44051570278ee8f43fb2396c04c798ee2087899ef3f46c5a13dc1fe417aec581f9be7ba93009a9ae0a45351d2fa57bdaabad2d7d1e3411e1f8adf09dfc855886d34ed1d1f0034d17127c0e05a6e8ddb79060a6a7918dd95267682371f6d1b733e9d1e57fdf332c5c32d62bf8e3da5e6cf74a5a0091391dbdb5da9c961da9dfa1b1ca2939883531e5fcf7aeb60f7b18a95f46cdd0f60972df57123cdcf82f425ff8a5adb1e6564bef1cc7789dba1a52fd7128ae79c1d3a0afd19b5b609c5ebdc15b3a644271ca3103b22c9775efff5f645d917e86ee689d639d44b2b5051336d1afd7ad329a32b0673b578f8fa1ed14de6b15c28bb3906135f3814e3da57dcc0a59ae7a5de860cff2e541d7e75d96182518f332d5102c8d7bbe9f10b0986dd9262380d7cc325b97ab81f5f3e2700bdebff1a344273cc2691e2fea8848763b569281f17b0a59c1d6aa233462b10875737090af4bdbeb266e8e7aaa496c69e9f9c000e808877e7c66d21a217ebb20bcdf1f2925899d02751390fea44073d7a347930c48b541ac4467478bbb3aadb48a671b92e8d45c2d3a7e5551638d68324711c90dae603db8627bbe2a515f5ad46e2e0e2c3dc03b8c7897d59319ce50ab3f6966c052cc1d15ca4b4e49f5c3eb8a91f2f99a20e118a94b0db19f6c79127e20d242370144b8bcaaf26fed727dde1c1e4c58290232f03535fa79256ec3ac18929740152bf10786f6ec238bc86de25b2ae6476ba6358ca253628fb30c843d99732887024afc9325443ede98987407c6c1c5d55223b6374e048caa05abf08b13bbef0b228195ac7c7652e9c23586251584730a159751f9b1cb6bdb50775fdf7ea1b4b785a62f735ac42a9e30b4065e23f2d82a578a76fc7bdad68abe3a159659f64ed8cda4cec996bc232de623c16019437de33039b5d385ce366fe57c4937231d014a6a64bac45f6a5190c15f6934410ffea239a455f1bb81b4d3264dc3562c9b9207d011bdaf6ea8c4daabbf12b23b09ac60b12a536d562387f118e69bd1956a43b4c3b36a795deb20fab93e22889d96da319904d24ab23f7a49822a4f65fd6e7e34fdd6c4195681150730ae0c7dc67b900878c3a5c2eb37a6cdcee7290a3118ec3181dff8b746d35724bc4a82642ce8e7861880d1eafbc2b7dc135b5d792afda375acff664079fe7bc7f1953ba268289a5a10e50d494cedac466b00633b92d18edcb89fe53a6a71be512d385ebd6596c6ddbac88b3fafe84fd93d5164aebc0d190bbb3f46a95813765870b22c859238a6407c11dc0b9c0fca43186e7c37ab7fe60fd4bb341f955c686994582d51ac969da1e9a630a5facde8dc3b1abbc32e4adfff8a422bd46e1263df049508f412fbaacb2d69aeb0147249c38eec32ea55729ca8a9766bffb1cd6b03ac5384406bfc85d6ad980f87b3dc30725e369654cfaf6fd7eff9328aad2deda4aae17523d41b6c9a72ce024091ee56a820fefeb7bd3fe2505b34e0bb8d2675e0b382d2b3ac3412866262f891f25494f691356d00950f3b1e876d399e85ee32a54e812979976745dc87efff9b8664679126b5315434ff78af8611ec94403911380ed8f2ce567928fa72fe1c979dccf1616da175e8209e1dd928b76bb083deb6d871b1593b7081d27b3f616694bde4bd8c04713d30418133c8c211ce4871eee98c789e8381cc1e89fba736b4e5db0137b8d0e427ac03515e235819299b7a155c29804168efb60665277a014ea7af34ad12091a2b52ea51d4787ffc23457c37a02fe7405c4c3dd365dce26f49f1cdf82d508ff58ab76d6d36e03b586c6ee2056cf1d1b77ad764be51997c35eafe1c620113f26e37a1cf76134cac206d60f966b8f26743b129b16990a37abe9246ef15179ed75f64682deff8d639ccec568d234f4e24b3bdfa976f40d42369b7fbce0037c4cf9df716d805ac43a35c09462cab7ba83f333307dfd507e1632bd4d7cbe6f6d01f37e323d742baaaca7ba5636af4e1bdbbe01592d108143669fa9257733bbada23cf2a742914078f6a95b1d09339acbf114013a568dbdb44bddf5b1b361e25549cebda26635afb329b8c711f57995254f12f918d42ca3f18ebd348c983b9fe997af4e024ecdf022066c0aa96cb259d1dd425afcd9b9092409a4bf7cf45367ab88e5377f7cc13e33a98167eef4e2651b1a8bd47275dfb0f20967bfe572cdad1a80c8d8aa91234adebeba81a5910803105a8fb624aad6a4140a65ad081e3332a37eeaa3e16ac5e124a19e6be54045a28b3e26b9fc064a3b6967e49549022bda5ad84bb087da9f74720cd55f45519bba4d2a644c1db3234a01f11a59c9b347353aca73deae037b225632653e761fe41d7ba52e1fb8f67f9c92d1db31da7b7ffeb72e318e0baa20c269ba393892845a5d0f96b5d38c1eb7ee08f6f6a3138450acad37452a458a4d18b5166aa73ab444756342d8faa20af9c456e20b8240eec58fab0066717b21b50a357c04783cca84a82604ad42050b6cf4a4191cd65687b88b1a18f1155e14ecf695452688469ae3ec2f35711e54416461f8a714d0c49e085ef22a5d0694a88bc1e6739b017687c890461f9657d40af876c27ed2a5fb99dbda24a2fd44e5c9c71e2b14cd9904cb9835311783af66bfa022af4a963d87c4c21baa8b96d12fd3d9b93f1eedab846a59faf7764ff926d3bfb90b366b85400b71acf9740dde6814155815c3f8f0685f1fd75caf05867ac49d865a021c89ad67705d0af09c75a196f50d002e9fa199acb073e0036a1138829f2e04a055b8f57288d7aa097626410c787c283eb68b05dd3b0a30a06a76a742dacc2fe8d3b724f824b17657c10b381735a471fd9d61b8ef3de16b6901c09e8ca2f970d5252aef7085314b63f75585974ce4eb4d743adf8922837c2e1a2b6cecd2a141733bd73ca87c3835fdf214", 0x1000}, {&(0x7f0000002400)="178ab16e26c63d332ead052375dac14b7c4fa3a72799b126b227f56d99a6a1fb1b7c2f887b11aef2adb766fcfa1d9ed3eb28cfd3498e583343be174f032b27fdd4cc30b184326a29de35365f09460f83ccc2a7ded31e5117737ac04ef98b4a1d9d77c6b71016480f8207882b32883fb829637a71000e9c92c3554652e7f03fa5c128f96d01c9f209fc9b30aa997becd15f74e5c3e8a3c4860a4b2cb3f1ebd7f6113adaff9a0a912dd5010f5593da6557796e42987f3e4d1276d4a47f197a236531fe94274ad608169f57a5767901b8b3c7754d2e78dd37edf5109df80d6bbf4e0cb3aa0db8af4ace95c8003783733c85", 0xf0}, {&(0x7f0000002500)="f087be2f36cfbac2595fb6b90488b7ab1a758b811ee07b0ef8951e7e4e47fa9533ae148ccddf2e14769f9690cc80f8541be4f21d5a4db6d43873a412969f349905df03c9390dc6a87c5b0e0a9468314e581ae4714463782f35a4448f88f57be00176223bc81b09923cf4b1d1d0693f5da8555ae7e15e921117220484c0e01b496bb3a9f122332405cd10fb505ee33d311476cca6d1c3dbd9f5b9a69162540bbe37f5c58c0db4873202da6c54a5117e61904753fdbe7e819b26dac4ab910248a55f40a67c3e274a0eedbea8efbd6c3d663300df5d246e25da2af9de17a9bf331a1dd4", 0xe2}, {&(0x7f0000002600)="2090f41a1810f7c5b4f615eec8248eabcef87aae308f0aed52ac0863032b3721799e3f277890ecb9ae93916df664f9396670243801a1918533718b623e6eaf3394373c1930ac5323bf4598f7eb9e526d384930d5152b39893c551d7f0b55774fa6b0ad29bd", 0x65}], 0x7, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:45:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "b02ed82f7ab1e10ce8514da35100000000c2b5bed07d0005611830b6052d975549d42c0248ca46efde54000000000002000000001087ad644374000000000000183c93232b48e470f900000000000000"}, 0x85) 18:45:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:45:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x5c, '/dev/sg#\x00'}]}, 0x2f) 18:45:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 37) 18:45:28 executing program 4: io_setup(0x1f, &(0x7f0000000640)=0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = eventfd2(0x1ff, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x717, r2, &(0x7f0000000180)="654fb2b1448ceb9770489cfe0450ddf834ad061c3ca795dd62f6b5b201a1cb099cc6e24ac30ca1bac9efcf9c5cd13b23b714d0625613ab9bb80864", 0x3b, 0x20, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x9, r4, &(0x7f0000000200)="fd1aa229ef5e88f2c85541d77247ca6a589f5635b22fbe5e19db39137ddd35e57f7f15110219f4bcce8530af6780f599b355f8aa44deaf4b6631cf4564d60e84b717dab126e7082ee211f708a6a3c133f1aef3114c8021dc90a90749b89702c40b5886a39a5078d5eaf41de08d4a4cc3456e22ca4213be06b5f76e5522c3dc662a7ad82c5f3932e700b6aa4936a714ec6927062c21b029c46e34877f9098d7b599199fe57d63465ebf556f10741576cca539be597aa687e104eea7e5de0f695f94ee4e6684c75e49bf399e938b7c9071eb6adf640504915ad32f9fab885a332e726c48dda8eaea", 0xe7, 0x8001, 0x0, 0x2}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$notify(r5, 0x402, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = open(&(0x7f00000008c0)='./file0\x00', 0x400002, 0x10) io_submit(r1, 0x5, &(0x7f0000000940)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000380)="92814634f9c92c5d9ab5d3c5573b1980d394b2bd08f6cbaeb12f4815890b721e136f5f9d1e4d6fc42aac89bee0c4bea5f55d3cf53fda4b49a5d96b23d52c014298299e843084d93f0bb8ddcbc79e35cbaa2caf7c21b572001f24663a478e7b06088415e49481d1b507899d665b979ccb12766aed2cbebc5e3c16c23df1d5beea46b7ef4bd5de4027e5cf46d310bc867f628d890ef5eeb2bc5b0cb7bc30c4e70ac312321e181c56b18a9b3c57", 0xac, 0x2, 0x0, 0x1, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000480)="64bb8e30e0d2578340469e724b0453ed381e68e31d6023c6ef686df42ebdc494b6e7c8cfd6e067fb13ce32bdb21ef620a20cbc1863bf0890277d08fd2ce9f303569e8ea35fa83ee6c2797281d729f05740f575307f604bf740ae0511", 0x5c, 0x5, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x81, r2, &(0x7f0000000540)="7fac65898abf9cef95ba68dae4e99a956e013b5eff04245efe783fde3acdc0ca86aa6cc1af521076ee6f2eb8fdcfc363b39e07d343a7", 0x36, 0x0, 0x0, 0x2, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x8d3a, r7, &(0x7f00000006c0)="9b87a2fa8f42dad82ccbcb329b7702ec9d931f88b83593aaa53260996ad8b59767281cbcf4ae4380da585e0e21ca9848419bfe768bf05647fca52afafb9f0a8ca18634267f9cac1c2b68b0c5410dd7bd90925e861748617db0a5726e4d63256b0a71385430b9872f59493436b260613fd1361d844711d9a29feb11a1b85db8d0610136175842ff9db86e4ba17dc1903983cfa0944995aff1bf171b8b9ef3144551949adf41f1ca78f9ea5dbb3d057f92866da87a5a2ca731bb3cf964394ac2e5b7a5f195f787ed04ea4dd6", 0xcb, 0x10000, 0x0, 0x6, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x1, r6, &(0x7f0000000800)="9c113178472700ada9828b0c3857589f2ece9ae25ab3b716c13c65b6dac0214e345ef855504f4ca04056bcd75178b6c0894032a37fb092afb2fb759bf57b3212bb344ae40b2c198757a9afd81eb3807fddd1d92c0602eae1fcd2ad9faaad21a5c965ed7164b609588effeffca9c65c86818e4f28d25b1a1f22f4238706f9ca6847290ea81684", 0x86, 0x8, 0x0, 0x1, r8}]) r9 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0xb, 0x4, 0x1, 0x3, 0x0, 0x80000000000002, 0x22028, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_config_ext={0x1, 0xeb4}, 0x204, 0x5e, 0xffffffff, 0x5, 0x8, 0x752, 0x81, 0x0, 0x5, 0x0, 0x68}, 0x0, 0xffffffffffffffff, r8, 0x0) io_setup(0x1f, &(0x7f0000000640)) close_range(r7, 0xffffffffffffffff, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x202400, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) dup3(r10, r9, 0x80000) 18:45:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x40, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/89, 0x59}], 0x4}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000580)=""/253, 0xfd}], 0x5, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)=""/248, 0xf8}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000d80)=""/70, 0x46}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x3, 0x40000020, &(0x7f0000000d00)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000d40)=0x16) [ 1252.065399] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x5c-- guessing data in; [ 1252.065399] program syz-executor.6 not setting count and/or reply_len properly [ 1252.201915] FAULT_INJECTION: forcing a failure. [ 1252.201915] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.203463] CPU: 0 PID: 8141 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1252.204540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.205497] Call Trace: [ 1252.205854] [ 1252.206164] dump_stack_lvl+0xc1/0xf0 [ 1252.206715] should_fail_ex+0x4b4/0x5b0 [ 1252.207301] ? __kernfs_new_node+0xd4/0x870 [ 1252.207969] should_failslab+0x9/0x20 [ 1252.208554] kmem_cache_alloc+0x5a/0x390 [ 1252.209124] __kernfs_new_node+0xd4/0x870 [ 1252.209734] ? __pfx___kernfs_new_node+0x10/0x10 [ 1252.210332] ? down_write+0x11a/0x1f0 [ 1252.210857] ? up_write+0x196/0x510 [ 1252.211337] kernfs_new_node+0x97/0x120 [ 1252.211921] __kernfs_create_file+0x55/0x350 [ 1252.212584] sysfs_add_file_mode_ns+0x21c/0x440 [ 1252.213223] ? __pfx_dev_attr_store+0x10/0x10 [ 1252.213806] internal_create_group+0x322/0xb90 [ 1252.214455] ? __pfx_internal_create_group+0x10/0x10 [ 1252.215177] loop_configure+0xce1/0x1900 [ 1252.215777] lo_ioctl+0x934/0x1990 [ 1252.216321] ? do_sys_openat2+0x157/0x4c0 [ 1252.216912] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1252.217674] ? __pfx_lo_ioctl+0x10/0x10 [ 1252.218228] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1252.218943] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1252.219657] ? queued_spin_lock_slowpath+0xd1/0xb20 [ 1252.220346] ? __pfx___lock_acquire+0x10/0x10 [ 1252.220980] ? __lock_acquire+0xc29/0x64f0 [ 1252.221658] ? __pfx_do_sys_openat2+0x10/0x10 [ 1252.222309] ? __pfx_lo_ioctl+0x10/0x10 [ 1252.222871] blkdev_ioctl+0x35e/0x7e0 [ 1252.223394] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1252.223970] ? selinux_file_ioctl+0xba/0x270 [ 1252.224618] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1252.225207] __x64_sys_ioctl+0x19e/0x210 [ 1252.225842] do_syscall_64+0x3f/0x90 [ 1252.226379] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1252.227077] RIP: 0033:0x7fcb028838d7 [ 1252.227603] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.230036] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.231071] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1252.232017] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1252.232987] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1252.233980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1252.235002] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1252.236138] [ 1252.247797] loop3: detected capacity change from 0 to 4 [ 1252.264469] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 38) 18:45:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 18:45:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0xd8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:42 executing program 7: fcntl$notify(0xffffffffffffffff, 0x402, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x40, @remote}}}, 0x108) 18:45:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f666985653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202f6465762f736723000a"], 0x2f) 18:45:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x181201, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000080)) pread64(r3, &(0x7f00000001c0)=""/174, 0xae, 0x6) 18:45:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\ndev/sg#\x00'}]}, 0x2f) 18:45:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1266.692164] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1266.692164] program syz-executor.6 not setting count and/or reply_len properly [ 1266.700439] loop3: detected capacity change from 0 to 4 [ 1266.753161] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 18:45:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:42 executing program 2: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x8, 0x4}) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x50000) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:45:42 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x8, 0x10000, 0xfffffffc]}, &(0x7f0000000080)=0x44) 18:45:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '#dev/sg#\x00'}]}, 0x2f) 18:45:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bind$802154_raw(r1, &(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14) [ 1267.033250] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1267.033250] program syz-executor.6 not setting count and/or reply_len properly 18:45:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '%dev/sg#\x00'}]}, 0x2f) 18:45:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xfffffffffffffd56, 0x0) 18:45:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:45:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 39) 18:45:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) unlinkat(r1, &(0x7f0000000480)='./file1\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES64=r1], 0x220) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0xd6, 0x9, @buffer={0x0, 0xa7, &(0x7f0000000040)=""/167}, &(0x7f0000000580)="7475a96d18148839db6243475163c59e7cb614de91b03e04bb95fb455f03b1c9db6385ed577331866688417664e0c00f0e53ca31323ac54442dca65da6ab03f5300196bb9cd970f7ab2d00f170b6ee507cbedc25fdb6fafe8d859628a4152f0bc13d3468b255a2e99041ffdc3d894ca9d12cd3e5e7057cb652c832273f919938b5d5ac727a8c205c3d7a9c859a557e548d88e1e1a58cb0bc9cc3b283b10f8f56c39dd528979902f6fa961aca52d61b92349071b6f234445317a0dae2ae2416084130603267c80e22880b46c672ea369ef492248f02a0", &(0x7f00000001c0)=""/212, 0x1, 0x1, 0x0, &(0x7f00000002c0)}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4004881) 18:45:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x606c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2f0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x1f, 0x0, 0x8f, 0x0, 0x7, 0x11200, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x4, 0x81}, 0x100, 0x2, 0x1, 0x6, 0x4, 0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffa}, 0x0, 0x5, 0xffffffffffffffff, 0x9) 18:45:58 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000140)={0x7, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @remote}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x5e, 0x4) 18:45:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x10000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1282.208535] FAULT_INJECTION: forcing a failure. [ 1282.208535] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.210231] CPU: 1 PID: 8202 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1282.211485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1282.212706] Call Trace: [ 1282.213054] [ 1282.213366] dump_stack_lvl+0xc1/0xf0 [ 1282.213894] should_fail_ex+0x4b4/0x5b0 [ 1282.214460] ? __kernfs_new_node+0xd4/0x870 [ 1282.215057] should_failslab+0x9/0x20 [ 1282.215497] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1282.215497] program syz-executor.6 not setting count and/or reply_len properly [ 1282.215596] kmem_cache_alloc+0x5a/0x390 [ 1282.217923] __kernfs_new_node+0xd4/0x870 [ 1282.218500] ? __pfx___kernfs_new_node+0x10/0x10 [ 1282.219145] ? down_write+0x11a/0x1f0 [ 1282.219667] ? up_write+0x196/0x510 [ 1282.220177] kernfs_new_node+0x97/0x120 [ 1282.220758] __kernfs_create_file+0x55/0x350 [ 1282.221374] sysfs_add_file_mode_ns+0x21c/0x440 [ 1282.222003] ? __pfx_dev_attr_store+0x10/0x10 [ 1282.222616] internal_create_group+0x322/0xb90 [ 1282.223243] ? __pfx_internal_create_group+0x10/0x10 [ 1282.223931] loop_configure+0xce1/0x1900 [ 1282.224516] lo_ioctl+0x934/0x1990 [ 1282.225039] ? do_sys_openat2+0x157/0x4c0 [ 1282.225615] ? entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1282.226354] ? __pfx_lo_ioctl+0x10/0x10 [ 1282.226921] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1282.227614] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1282.228341] ? __pfx___lock_acquire+0x10/0x10 [ 1282.228980] ? __lock_acquire+0xc29/0x64f0 [ 1282.229640] ? __pfx_do_sys_openat2+0x10/0x10 [ 1282.230296] ? __pfx_lo_ioctl+0x10/0x10 [ 1282.230957] blkdev_ioctl+0x35e/0x7e0 [ 1282.231545] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1282.232218] ? selinux_file_ioctl+0xba/0x270 [ 1282.232985] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1282.233585] __x64_sys_ioctl+0x19e/0x210 [ 1282.234162] do_syscall_64+0x3f/0x90 [ 1282.234686] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1282.235400] RIP: 0033:0x7fcb028838d7 [ 1282.235925] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1282.235957] RSP: 002b:00007fcaffdf8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.235988] RAX: ffffffffffffffda RBX: 00007fcb028cd970 RCX: 00007fcb028838d7 [ 1282.239937] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1282.239959] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1282.241708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1282.241729] R13: 0000000000000004 R14: 0000000020000398 R15: 0000000000000001 [ 1282.241777] 18:45:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, ')dev/sg#\x00'}]}, 0x2f) [ 1282.289454] loop3: detected capacity change from 0 to 4 [ 1282.298919] EXT4-fs (loop3): Invalid log block size: 33554433 18:45:58 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/236, 0xec}, {&(0x7f00000014c0)=""/16, 0x10}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/28, 0x1c}], 0x9, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002780)=""/56, 0x38}, {&(0x7f00000027c0)=""/227, 0xe3}, {&(0x7f00000028c0)=""/169, 0xa9}], 0x3}}], 0x2, 0x20, &(0x7f0000002a40)={0x77359400}) r1 = syz_open_procfs(r0, &(0x7f0000000100)='environ\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:45:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 40) 18:45:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x3e000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:45:58 executing program 7: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:45:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:45:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x23) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:45:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x80, 0x1ff, 0x3f, 0x6, 0x81, "a633492eddc1a0348e6d8c294f8243b1148a40", 0x4, 0x40004000}) [ 1282.422495] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1282.422495] program syz-executor.6 not setting count and/or reply_len properly 18:45:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/\nev/sg#\x00'}]}, 0x2f) [ 1282.536224] loop3: detected capacity change from 0 to 4 [ 1282.551918] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1282.694759] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1282.694759] program syz-executor.6 not setting count and/or reply_len properly 18:46:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/#ev/sg#\x00'}]}, 0x2f) 18:46:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000000001}, 0x404e8, 0x7, 0x4, 0x4, 0x7ff, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x10000000800000, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000380)={{r1}, 0x0, 0x1e, @unused=[0x8, 0x81, 0x51, 0x8], @devid}) pread64(r1, &(0x7f0000000140)=""/232, 0xe8, 0x301) fchdir(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0xc1, 0x1b, 0x5, 0x0, 0x5, 0x4040, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x178b, 0x8}, 0x48, 0x9a9a, 0xffffffff, 0x8, 0x6, 0x2, 0xffff, 0x0, 0x8, 0x0, 0xda3}, 0xffffffffffffffff, 0x1, r0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xcc, 0x0, 0x900, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3a}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd6f9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5, 0x3, 'f'}, @TIPC_NLA_NODE_ID={0x49, 0x3, "9adfb5329049924ae70acf389b52f4acdf863f92833c5daf9432201dce24b4dd0999ccc9c88ca28a2de612dba5f32f99022c581211034d44441b996d27c648b253fa8678a3"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20}, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x10000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="031409fde16feb566b0f4654d5b08ed56d3c20af58fefe789dafefac9a32291c0f419e82d20f5ba7d51539883b9038a6d1ef47b1399a08789bf02ad3693acdbb8b03f7e2190e2e63739c300e08e7283f052b742c59ff29985867f4725d7e02a290c2ac0d0c61210361c0153e5989eb733261e219defb", 0x76}, {&(0x7f0000000200)="dadcb1e46232fc3ec3615b5eff32a93de6d4e496f8b546c498498b2124e18468b3d0895655c13a40e9a01919a4f53680aae8bc3b559d", 0x36, 0x2}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='check=relaxed,check=strict,mode=0x0000000000000000,context=unconfined_u,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c75690080", @ANYRESDEC=0xee00, @ANYBLOB=',audit,hash,\x00']) open_tree(r2, &(0x7f0000000340)='./file0\x00', 0x81800) 18:46:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x2) 18:46:15 executing program 7: ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x5, 0x4c, 0x1f, 0x0, 0xac, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140)="3fed5299e5f395f281777b321673d9617ecc5eda0e66a985a5e3b1fc6ca8886e36b2e8cad7bf5e1fa5bc51e206a832184d5d75ca56ab45a6c5495d867a2b297c4a01e5827c58fdad4b62abf3f464ffed1a8c3164c1c77f8fdb74337df29320cbf6eb236c42a4e9d80d1f3ef468533cd3265a8f5cff331585677637b339287b46f6b3382b5889d72dfc66a4480d77f3c9fc008ce520a228d489e7680e59190a75cbcdbb270061016024b669dd7a97971e2daa8c93159c53c4c130f5c3a114c3520a18356b841a8818d2a57792e69aba7e65051772eb795852ff3a41", 0xdb, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x3, 0xa, 0x0, 0xc0, 0x3a, r4, r5}, {0x7, 0x6, 0x7f, 0x3, 0x30, 0x5, 0x480000000, 0xfffffffffffffd8b}, {0x4, 0xff, 0x211, 0x1}, 0x7fffffff, 0x6e6bb9, 0x2, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x3, 0x1, 0x7, 0x7, 0x3f, 0x80}}, 0xe8) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000004b80)={0x1, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 18:46:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 41) 18:46:15 executing program 2: io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r1, 0xffffffffffffffff, 0x0) sync_file_range(r1, 0x1, 0xfffffffffffffff9, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0x125) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xfffffffb}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x44, 0x4, 0xfffffff7, "89b5584c49c909c004715fc23388165561817bf13a735d2e4476fc3b423a4212c2987afde615ddf8152fa15cd8e99240d5e066beff1d121152d3f43f83b25d8cbaa4c751"}) 18:46:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) 18:46:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xfe0f0000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1299.226716] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1299.226716] program syz-executor.6 not setting count and/or reply_len properly [ 1299.265775] loop4: detected capacity change from 0 to 128 [ 1299.283176] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1299.285975] loop3: detected capacity change from 0 to 4 18:46:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/%ev/sg#\x00'}]}, 0x2f) [ 1299.314042] audit: type=1400 audit(1684608375.443:24): avc: denied { relabelto } for pid=8245 comm="syz-executor.5" name="HCI" dev="sockfs" ino=29325 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:zero_device_t:s0 tclass=bluetooth_socket permissive=1 [ 1299.317819] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1299.340163] loop4: detected capacity change from 0 to 128 [ 1299.345699] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 18:46:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 42) 18:46:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xffffe000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:46:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x41, 0x3, 0x8b, "c0bfee050da9adc16e9455654b9f8bf43e4929c45dca6fa7bc4f8451fa834be0b44949cd85dc7a2d356e0eed13fe6e0a12f232c82fe90b9cb8934b71f75a968289"}) 18:46:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 18:46:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/233) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000a40)=""/101, 0x65}, {&(0x7f0000000ac0)=""/92, 0x5c}, {&(0x7f0000000b40)=""/69, 0x45}], 0x6, &(0x7f0000000c40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x1) r4 = syz_open_dev$hiddev(&(0x7f0000000dc0), 0x0, 0x101000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000e00)) pread64(r1, &(0x7f0000000fc0)=""/215, 0xd7, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000e80)={{0x9, 0x5}, 0x100, './file0/file0\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x997c, 0x7, &(0x7f0000000640)=[{&(0x7f0000000280)="c8e2a6367b25040db7ac6cefb05d144d9e83b542ac884df531b1bdbe62853b86fb3f4dd73fd7f05a872284da50e1051bcbab79fd155e9c5a2972d025000aefbb0f5d3596bbcef6ec8e064b0be7d5901a53dcdc45a95efd2d9244b6365ed071522be44b1a5a46166bdd42f684e4e1a9", 0x6f, 0x5}, {&(0x7f0000000300)="8d422c6d71a43441dc88e30d", 0xc, 0x3}, {&(0x7f0000000340)="472855ca1c0b51bbdf0529c8df3814b10c1df823bd52f9cd963c21e2fcb1db1fe8e502fc74d792d7f4ac3628a7a9901eccfd0e96cd362dd108e476fc6ba69963bfaee291b31189e125db371c1f91775c9a35c3cf488c76c51fd090df8f80eb7bffa469d3ecf15afc9e53fb7ce48a5d430429061d2b91cd9239ec", 0x7a, 0x9}, {&(0x7f00000003c0)="8ea46668b7516424c40b45844a475fe6f37251d31851fcd5a01fea513139b765d7613cb57602c34b3efc2192e4d5571887fa142cb8bbbcff805420792f2f9d2b61611a89682a93", 0x47, 0x200000}, {&(0x7f0000000440)="3520351b7cc898f3a3358a74de648f53f8f53944bcfb24d24cd33f6370c92522e5540fe28d3cda1d433f5d2ed5896c4ea683c8d6bde749ec133b3be277e1a3a26bf556b9ff92ebc243a6d447b5f32b386f5edd27110b11fc1aeda8de0f9eba858e232869773f876e70a0aecefe089f1b844e34eaff8f0b7e2af990cbefc3c37937a3b30834406acd283b475d68f8c990da4a0bec71eac6a2f4e55d2f18d0de7d0112b80cf2543e58c0fd171750a0", 0xae, 0x7c121542}, {&(0x7f0000000500)="87050a378f1eba12cc4970a38d1267af87c43459e91c5462c9d55196d902978c2f6132b2afae9392968679748122bcb8d9ee0aaf68f565698366ec67324da21e0fede6730750e97bfd198df8310d3918c4d98b7b4c9e969ee57d4a691b4b4e3550bdd86910154c125a7a74cab73b71a98baa2fbdf8eca9fc353514fe59e8541b599dfa88fffc3c74a78eb892cd447e83cf0a31cf06e8efad53cbe6d4536ec708ed05d1754838e26ecd2e4f7a3cef5c167434be49ede1b00a7305d2815869a3fae8ad3b102a7510c0b88f1173e29d4c1d08df8c81690bebcf02c0bf5af01f6ff7f01a80721904e688fe075de63e81", 0xee, 0x6}, {&(0x7f0000000600)="b8c47ffd878f9eca49eb8ee9a4c1a86f6ddddba08542d6453bbb24ebf3aca49b4fcc9da37f5af985b2ee9ecba656abb5835117321162c7", 0x37, 0xffffffffffffffff}], 0x20, &(0x7f0000000d40)={[{@shortname_mixed}], [{@dont_hash}, {@appraise_type}, {@fowner_lt={'fowner<', r2}}]}) [ 1299.463624] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1299.463624] program syz-executor.6 not setting count and/or reply_len properly 18:46:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)}]) [ 1299.619996] loop3: detected capacity change from 0 to 4 [ 1299.623901] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1299.660806] loop5: detected capacity change from 0 to 205333 [ 1299.682225] loop5: detected capacity change from 0 to 205333 18:46:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:46:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/*ev/sg#\x00'}]}, 0x2f) 18:46:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9c, 0x80, 0x9, 0x2, 0x0, 0x1, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb8, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x9b2, 0x86, 0x1, 0x7fff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, r1, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 18:46:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r1, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000100)=""/170, 0xaa, 0x2) 18:46:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x8000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:46:29 executing program 1: fcntl$notify(0xffffffffffffffff, 0x402, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x40, @remote}}}, 0x108) 18:46:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 43) 18:46:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/i2c_i801', 0x28800, 0x126) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz1', "554ebf4b3618de8a402379cf4915a366bcd86c810d07bd6dd399c06734aa25c2e5ae742292622242f24a1f68596b9ff4df08b8433ff139681b0d"}, 0x3e) [ 1313.159942] loop3: detected capacity change from 0 to 4 [ 1313.171883] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1313.181374] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1313.181374] program syz-executor.6 not setting count and/or reply_len properly [ 1313.189367] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1313.189367] program syz-executor.2 not setting count and/or reply_len properly 18:46:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/+ev/sg#\x00'}]}, 0x2f) 18:46:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 44) 18:46:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000000)='team0\x00', 0x0, 0xff, 0x100}) 18:46:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x2002) lseek(r1, 0x2, 0x2) 18:46:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x101) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="19fd0c22ef0248a80800dd6e210f436fed641fbf6a2066d99414ea559b6e539e09a78d8854b6456763bf9f681834e7bc08d7c73a9dfb2408a369f8dc1cad4c1335e77a2e2563e737a766676b3c59bf98bec084405b358af44da3e95c1f8a5fc395b6a5ae43a4125c", 0x68}, {&(0x7f0000000100)="c63877334c0f73dea7491303c8ce34f92b2b4d48a90a98eff2b6c084b6c134555f5d44af858dc32139ca8820c695ccd4c7f973cb01ff5af12fe86b8b8c3f272cbee65352988cab11d28858968ab6ef414993262213f91f5701382911952192aeccb20e3e52336912020538ce66560eb9c8160eb84d4841d201477bfbdc56544557277447131243e5a0", 0x89}], 0x2, 0xfffffff8, 0x5) 18:46:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xe0ffff00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:46:29 executing program 5: ioprio_set$pid(0x1, 0x0, 0x2000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = getpgid(r0) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x10200, 0x8) pread64(r3, &(0x7f0000000140)=""/178, 0xb2, 0x2) ioprio_set$pid(0x3, r1, 0x2007) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x4, 0x3f, 0x0, 0x0, 0xff, 0x4200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x3}, 0x180, 0x168, 0x6, 0x0, 0x8, 0x101, 0x20, 0x0, 0x6}, 0x0, 0x0, r4, 0x3) [ 1313.431924] loop3: detected capacity change from 0 to 4 [ 1313.432913] FAULT_INJECTION: forcing a failure. [ 1313.432913] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.434786] CPU: 0 PID: 8319 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1313.436021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1313.437091] Call Trace: [ 1313.437442] [ 1313.437756] dump_stack_lvl+0xc1/0xf0 [ 1313.438283] should_fail_ex+0x4b4/0x5b0 [ 1313.438847] should_failslab+0x9/0x20 [ 1313.439376] kmem_cache_alloc_lru+0x6b/0x600 [ 1313.440062] ? __d_alloc+0x31/0x9c0 [ 1313.440732] ? lock_is_held_type+0x9f/0x120 [ 1313.441541] __d_alloc+0x31/0x9c0 [ 1313.442201] d_alloc+0x4a/0x1d0 [ 1313.442827] lookup_one_qstr_excl+0xd0/0x190 [ 1313.443652] ? mnt_want_write+0x153/0x410 [ 1313.444418] filename_create+0x1da/0x4a0 [ 1313.445213] ? __pfx_filename_create+0x10/0x10 [ 1313.446059] ? __pfx_lock_release+0x10/0x10 [ 1313.446869] ? __virt_addr_valid+0x102/0x340 [ 1313.447615] do_mkdirat+0x98/0x2d0 [ 1313.448202] ? __pfx_do_mkdirat+0x10/0x10 [ 1313.448882] ? getname_flags.part.0+0x1dd/0x4f0 [ 1313.449661] __x64_sys_mkdir+0xf6/0x150 [ 1313.450312] do_syscall_64+0x3f/0x90 [ 1313.450912] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1313.451747] RIP: 0033:0x7fcb02882c27 [ 1313.452338] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1313.455086] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1313.456243] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1313.457342] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1313.458416] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1313.459441] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1313.460406] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1313.461380] [ 1313.466437] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.491780] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1313.491780] program syz-executor.6 not setting count and/or reply_len properly 18:46:29 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x1, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4e24, @private=0xfffff7f9}}}, 0x108) 18:46:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/-ev/sg#\x00'}]}, 0x2f) 18:46:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x2002) lseek(r1, 0x2, 0x2) 18:46:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x100000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:46:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffd, 0x76, 0xfc, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000001040)=""/4096, 0x1000}]}, &(0x7f00000004c0)="8e4a117e277d29f9f184c15bbfc18feaf9f125abf8d6f6a3083a520aaaef03dc3d6ee6a3bdf9c4031ffa32eb3f8ec82211d594220fa16d8223d9ee6332b981dabca7c25fca7c4d578fe12d9201c5c50622567f92582cb761fa5732bdf73f7cfa67e108b3b42ad4e0ac05cc199334266dc396c58506f5", &(0x7f0000000540)=""/189, 0x5, 0x10, 0x2, &(0x7f0000000600)}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x6d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x420002, 0x62) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="6830839ca10a0e999b7f3c94382ba439c1d24f9d420ab04c27f4942bb6b85afcd1bcc545866db607322f5d5dca8ae4b9bda9c292f3dbec10bf3db934ebb9f924a173e9fa5b30b658987ab330572a7caa0852cf9f88a19cd1e25dfbc39ffa316b30806299b334c005eeafd976540e007778c6deab41c547f9c622adda028653ba179d2c4456c34568ff94d18ec9f037e85ba648494271672b14c04e00dc", 0x9d) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'Z\v=/:)\"@:@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x35) [ 1313.664043] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.724284] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1313.724284] program syz-executor.6 not setting count and/or reply_len properly 18:46:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 45) 18:46:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x180000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:46:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x400000) 18:46:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x2002) lseek(r1, 0x2, 0x2) 18:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000001640)={0x4, 0xf, 0x400, 0x800, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f00000026c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001680)={{r4}, "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"}) pwritev(r2, &(0x7f00000015c0)=[{&(0x7f0000000100)="3d345e9e6bdef8c7b70cb2942b45b855028e9d80c198a119434faf442e7f0c98214eb8a751f4f2b944d36bad6989876219ad49394a0dedce1e266123af2813aa1b80", 0x42}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="6c811541e8a266370f72e096a67a882026da954dd59269", 0x17}, {&(0x7f00000011c0)="8013a54e6776cc762b8dfd659844ec1ab53a4aa8c354b4eb61ac26482c46fe39d1a148b614a44476c81ae0ef45f5a57790ba6187324d685862329c1598722082b758068c37a644cad8be131abf67e75b8d490aa87d7a9dbf5212c1664c189f95c73bf6590534fdc0cf3c777d47b17b238a3e2ea7bdc53b56a849b656c6c957437c3bcba1bf5ff4343f796889ef98712ba3ef52e0497d21feb16631019dfb0a098a7c8f6ff9cf618ddf5e23bdac69445c585c5c3eb8d1592c5ec88c65f869e86295e14f0d1988ef40e4", 0xc9}, {&(0x7f00000012c0)="96715160041b0ac295530c86e7b701d0999d30243acf42a07151e005eec371d53c7b714d77a554000829cd8d0667a319ff847d6723afbe099d14e3fec425a37f8781809a2541fbd70a171d3abe8c90cd5e884a5c8e5d36704406605726f4fd13c1016f1b29fbd6818789627f53c2a59714e5f3acf34d4fe68d584a80ce66667e68131126f12d2ae7f648311b9b287c3d80ae675c141d13f9ed34458a515508aca98c16c19f8a2d14e1897ae3d4bdeda0e34d644d1f7bcf3160165f5d7c604dad47ac410627886f2379dfcb72a8", 0xcd}, {&(0x7f00000013c0)="3e36cdb379d6fc3d05d7e7324ea3f3b4c251bf60cb8d2eb9fe9a91cb949d017dc3a3312006ffc8945d6142b293bf2979fe1550ba4b5641cf33ab5ebb55e7aa9669a19f85f691ce53ad91c040e1694a08c999794eb94cf53b11d188e10f80e05d99d96f641418a1d25d5d809d33ea7603510063ce9f0bec5228d32ad60cf9feea8e0ffd57303cb06e42f086c82de0f170de08b54fcbc20d6ad006d3e77ab745efc1cd6c6372b3056b99f30b78c03c640ccf2458d4429ac8d707b332dfcda3f9d0dccbdc9139977b915ec3bf5da8988d15816cc81c975ec5d74da120a636789d35f3a7c6e862e74041b926ff42fdb5ad339588c5f408800202", 0xf8}, {&(0x7f00000014c0)="c2901976e61f682ff85e2d14a7c9beaaa430bc2fab5f25915bfc847f79b7a3973a450f0a3fcc62e7869cc1e634edfb5b61080c1b492e3ec6bb5e35a7855a99b7ebfb4915ef425558cdf517f8002e28e09d34be71992fdbcc4375487218d1cf9072a7136ae804d4a203ca48bbef0b", 0x6e}, {&(0x7f0000001540)="3f323d8dc7dd36c7c171565aa4b689de65bf506e6d3a63f8b0ef1806da18140eafe1c7955bdf7002733afe45c24e766d802fb08b0e0e2cf01e0d627ebbb00cc2aaeb8d826b331be308c6b30e94668011e0635564914d8b7b8301a365ebeab1f704702381515c65", 0x67}], 0x8, 0x3d, 0x1000) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) ioctl$TCGETA(r0, 0x5405, &(0x7f0000002680)) 18:46:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/.ev/sg#\x00'}]}, 0x2f) 18:46:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f800)={0x509, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4}, {r7, r12}, {0x0, r15}, {r17, r21}, {r23}], 0x4, "c24ec04ec47a9a"}) 18:46:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf253600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB=' 3\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bd7000fcdbdf25590000000c009900fc0d000007000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000ffdbdf2504000000080003000700000014000180060023000008000300ffffffff08000200040000003c000180080006000200000008000300ac14140b060005004e240000060005004e240000060005004e22000005000200010000000500020040000000080002000600000008000200040000000800020004000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x20000, 0x1) renameat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r5, &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'ip6gretap0\x00', {0x2, 0x0, @broadcast}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1329.308908] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1329.308908] program syz-executor.6 not setting count and/or reply_len properly [ 1329.321635] loop3: detected capacity change from 0 to 4 [ 1329.322764] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.336002] EXT4-fs (loop3): Invalid log block size: 33554433 18:46:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 46) [ 1329.414524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:46:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b254328af5b2726272d5b282c202f6465762f736723000a"], 0x2f) [ 1329.464597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1329.582121] loop3: detected capacity change from 0 to 4 [ 1329.599408] EXT4-fs (loop3): Invalid log block size: 33554433 18:47:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/0ev/sg#\x00'}]}, 0x2f) 18:47:01 executing program 4: r0 = socket$inet(0x2, 0x6, 0x80000000) sendto(r0, &(0x7f0000000000)="8a536997458b19da85d7d7a93b757941870bc4165b0e2926a6b32ad002306fd92e20025d0125737c", 0x28, 0x40800, &(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, &(0x7f0000000180)=""/204, 0xcc, 0x40000000, &(0x7f0000000280)=@l2={0x1f, 0x9828, @any, 0x921, 0x2}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 18:47:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xc353, 0x2a4100) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x0, 0x7ff, 0x6}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:47:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 47) 18:47:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r0, &(0x7f0000000100)=0x5, 0x9) 18:47:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syslog(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x1000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="848e54f381f3702792fe213cb36adef8f75d2e3d3e96734719ba50567c06da140b5be74e732f47fa98949acb24ccb3782f6a8b88ac65b0b89def0c56c3cce18c47edbec99be8414cc90c89", 0x4b, 0x9}, {&(0x7f00000000c0), 0x0, 0x1000}, {&(0x7f00000001c0)='\tF*:', 0x4, 0x3ff}], 0x40a1, &(0x7f0000000380)=ANY=[@ANYBLOB="71756f74612c646174615f6572723d69676e6f72652cc9e773747764756d6d795f656e6372797074696f6e2c7065726d69745f646972656374696f2c646f6e745f617070723de235cecc8fbb15f8effb0fc7067e18616973652c7065726d69745f646972656374696f2c7375626a5f726f6c653d002c001c6781d0a6c110529d6c672880206704493c297003803f415ce0e95ffef4"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x1, {0x0, r2}}, 0xffff) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000440)={0xfffffffe, {{0x2, 0x0, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @remote}}}, 0x108) 18:47:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x2002) [ 1345.551212] loop3: detected capacity change from 0 to 4 [ 1345.576864] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1345.578216] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1345.596143] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1345.596143] program syz-executor.6 not setting count and/or reply_len properly 18:47:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{}, "ac7c0e0ccc8b5f9d", "5863acee04646581a52ce57f6d63d109ae911835e9e19126604ea90e55656ab9", "0175e3c6", "5ade9530e618b892"}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=0xb0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x202800, 0x6d) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={r4, @empty, @remote}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x9, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 18:47:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf251}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x420440, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x81800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/230, 0xe6}], 0x5, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x40}, 0x22) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x41, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,posixacl,cachetag=,/:#-)(.}^c,cache=mmap,access=client,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',func=POLICY_CHECK,measure,euid=', @ANYRESDEC=r3, @ANYBLOB=',sma=*z6%,\x00']) close_range(r0, 0xffffffffffffffff, 0x0) 18:47:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 48) 18:47:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x7d, 0x23, 0x7f, "b722a387b2b0595eefc0fba46a0f38aab1e6b71e29c4bc5dcbdf202673fec0b0de2c998cd53658f7d51dcddebbc74c81e4db4635650493db561e5b25bd754fd1fa32d960d4e993dba2d9cedaafb35dfccd5f7e68d046e349f1d4723a7e55d803ec33646dbca51184311d70f3e84e26b26542f04d701bd46a73cda78d32"}) 18:47:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/Xev/sg#\x00'}]}, 0x2f) 18:47:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x100000001, 0x141882) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x5a, 0x6, 0xfffffffe, "161ca8807fd25fdb946d3adccafa079b66bede676f365affb117ca608cdd2a5b29eff4b4eec892f915837d22953e2b94733b9c474e59400474bd0a08024240e5150aa40f9994b436c6207fed8597567611dec46cd81b5699c437"}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r3, @ANYRES16=r1, @ANYRES32=r4], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:47:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x400000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000001c0)={0x200, 0x10, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x7, 0x0, 0x6, 0x7fff}, {0x2, 0x7f, 0x4, 0x2}, {0xff, 0x8, 0x3c, 0x1ff}, {0x0, 0x0, 0x9, 0x400}, {0xa, 0x9, 0x1, 0x4}, {0x7ff, 0x0, 0xfe, 0x592e}]}, 0x10) [ 1345.867370] loop3: detected capacity change from 0 to 4 [ 1345.868270] FAULT_INJECTION: forcing a failure. [ 1345.868270] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.869746] CPU: 1 PID: 8403 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1345.870721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.871714] Call Trace: [ 1345.872038] [ 1345.872337] dump_stack_lvl+0xc1/0xf0 [ 1345.872835] should_fail_ex+0x4b4/0x5b0 [ 1345.873387] ? security_inode_alloc+0x38/0x160 [ 1345.873977] should_failslab+0x9/0x20 [ 1345.874478] kmem_cache_alloc+0x5a/0x390 [ 1345.875053] security_inode_alloc+0x38/0x160 [ 1345.875751] inode_init_always+0xbb2/0xea0 [ 1345.876434] alloc_inode+0x84/0x240 [ 1345.876965] new_inode+0x25/0x1f0 [ 1345.877461] __ext4_new_inode+0x323/0x5410 [ 1345.878015] ? lock_acquire+0x19a/0x4c0 [ 1345.878538] ? avc_has_perm_noaudit+0x148/0x3a0 [ 1345.879128] ? __pfx___ext4_new_inode+0x10/0x10 [ 1345.879726] ? avc_has_perm+0xfe/0x1a0 [ 1345.880236] ? selinux_determine_inode_label+0x1b6/0x340 [ 1345.880933] ext4_mkdir+0x33e/0xb20 [ 1345.881453] ? __pfx_ext4_mkdir+0x10/0x10 [ 1345.881965] ? inode_permission.part.0+0xb5/0x520 [ 1345.882593] vfs_mkdir+0x24b/0x470 [ 1345.883063] do_mkdirat+0x163/0x2d0 [ 1345.883534] ? __pfx_do_mkdirat+0x10/0x10 [ 1345.884058] ? getname_flags.part.0+0x1dd/0x4f0 [ 1345.884663] __x64_sys_mkdir+0xf6/0x150 [ 1345.885173] do_syscall_64+0x3f/0x90 [ 1345.885689] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1345.886343] RIP: 0033:0x7fcb02882c27 [ 1345.886804] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.888952] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1345.889892] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1345.890742] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1345.891591] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1345.892442] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1345.893322] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1345.894214] [ 1345.912490] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1345.973959] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1345.973959] program syz-executor.6 not setting count and/or reply_len properly 18:47:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 49) 18:47:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)={0x5a, 0x6, 0x89, "e8e53128aa2199fd5df92a75b90756936bac3df1e93461a732e99975565ae4c9cd91d6f3a12e36b26f2ef09b99cb178b71b98d4f8c10d49bba454f9a3e9e6b4884ae8f02b4995e214baefada7ab51deebc44bdaeeb0fb73d2d86"}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x7, @buffer={0x0, 0xe6, &(0x7f0000000040)=""/230}, &(0x7f0000000140)="244f38a5282a", &(0x7f0000000180)=""/230, 0x80200, 0x10006, 0x8001, &(0x7f0000000280)}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r2, &(0x7f00000003c0)=0xffff, 0x4) 18:47:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/cev/sg#\x00'}]}, 0x2f) 18:47:14 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3036, 0x0, 0x2, 0x1b, 0x10, "b0d7d1a9c12bafe8c16903c2d64eca926a8670aad181be5c56a44bf737766e4946ad5842a4f7713333cad19cb1d6f6e209e3f7f87b60abbd85042784f4ad104a", "f8b248923ab0de347a4e10b832f379d24c741620339b620f73690edf7c68a811812eed44ebeb8a7659aeb381758ed5c880e4941a7fa7df69dfc572c5ea3923fe", "2b7769278e81deb01aa7a25b6995fc9340db4b1e0737ba1dfe7310cf5a885731", [0x800, 0x7]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x250400, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:47:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\fZev/sg#\x00'}], 0xa, "c6a0c294000082f892fed9e9980000bd5f102ff450d3fb2e37efbf96f38fefba5ee5d338f86b4dcb909ebab49b8cc4ea93515f3782b9d8d095ab2ab77ca76e76888b2fe5d741e8a7b7e1194f78b0ceee126b43c96caf383f71c0d01d329d54fc"}, 0x8f) 18:47:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x401}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_USERDATA={0xe4, 0xd, 0x1, 0x0, "758567afaa36546d00fd377dad56b3502a6bac0d88e38a17049f3091e822e233b6dc20d512894b3737316b23f95ea83fd5ba6b719c5ca8520ae690aa6dae1b2ef78eb4f7e7d7423569ad0e47ab085830b3958a24b197960b2043a51b5c76e07429e66ef2bf30114c22d92b65d0e9a4fe4ad199da54bbf7f27b02187a852ba158764ba68457b82f4ac9f9d6a351d7e2c22caa6de991ff2b163d4965ad4b1eff2b82626250562d74b2e08f468a58eae8bd4ead9558d02d8af2c070ae230e4a247f26adf0b9d3e6dea519d51bf79c7396daedcfa84f0758915dcc53ef1579b329c2"}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x184}, 0x1, 0x0, 0x0, 0x820}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000300)) 18:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x500000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:14 executing program 5: mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='qnx4\x00', 0x0, &(0x7f00000001c0)=',}{)*.,)/\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1358.141754] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1358.141754] program syz-executor.6 not setting count and/or reply_len properly [ 1358.154116] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1358.154116] program syz-executor.2 not setting count and/or reply_len properly [ 1358.157542] loop3: detected capacity change from 0 to 4 18:47:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/iev/sg#\x00'}]}, 0x2f) [ 1358.182743] EXT4-fs (loop3): Invalid log block size: 33554433 18:47:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000004b80)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1358.221355] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1358.221355] program syz-executor.2 not setting count and/or reply_len properly 18:47:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 50) 18:47:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x600000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:47:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x5, 0x140002) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x9, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000440)={0x4, 0x0, {0x80, @usage=0xd9a, r3, 0x7, 0xeb6, 0x5, 0xffffffffffffff81, 0x250, 0x30, @struct={0x800, 0x1}, 0x0, 0x4, [0x200, 0x3, 0x5, 0x9, 0x8, 0x80000001]}, {0x10001, @usage=0x7, 0x0, 0x2, 0x3f, 0x5, 0xff, 0x80000001, 0x8, @usage=0x3, 0x7, 0x7ff, [0x8, 0x6, 0x4, 0x1, 0x8, 0x7a]}, {0x292f, @usage=0x1337, 0x0, 0x4, 0x81, 0xffffffffffffffae, 0x3, 0x2, 0x14, @struct={0x7, 0x3}, 0xfb1d, 0x8, [0xa880, 0x9, 0x1, 0x800, 0x7, 0x1f]}, {0x401, 0x3, 0x4}}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202f6465762f736703000a"], 0x2f) 18:47:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x74, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x808, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c4aa9359", @ANYRES16=r8, @ANYBLOB="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"], 0x1dc4}, 0x1, 0x0, 0x0, 0x800}, 0x840) [ 1358.327827] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1358.327827] program syz-executor.6 not setting count and/or reply_len properly 18:47:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/lev/sg#\x00'}]}, 0x2f) 18:47:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000004b80)={0x6, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @remote}}}, 0x108) [ 1358.435389] loop3: detected capacity change from 0 to 4 [ 1358.436448] FAULT_INJECTION: forcing a failure. [ 1358.436448] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.438183] CPU: 0 PID: 8458 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1358.439231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.440265] Call Trace: [ 1358.440608] [ 1358.440924] dump_stack_lvl+0xc1/0xf0 [ 1358.441476] should_fail_ex+0x4b4/0x5b0 [ 1358.442029] ? security_inode_alloc+0x38/0x160 [ 1358.442660] should_failslab+0x9/0x20 [ 1358.443184] kmem_cache_alloc+0x5a/0x390 [ 1358.443746] security_inode_alloc+0x38/0x160 [ 1358.444368] inode_init_always+0xbb2/0xea0 [ 1358.444969] alloc_inode+0x84/0x240 [ 1358.445485] new_inode+0x25/0x1f0 [ 1358.445981] __ext4_new_inode+0x323/0x5410 [ 1358.446568] ? lock_acquire+0x19a/0x4c0 [ 1358.447136] ? avc_has_perm_noaudit+0x148/0x3a0 [ 1358.447778] ? __pfx___ext4_new_inode+0x10/0x10 [ 1358.448431] ? avc_has_perm+0xfe/0x1a0 [ 1358.448982] ? selinux_determine_inode_label+0x1b6/0x340 [ 1358.449765] ext4_mkdir+0x33e/0xb20 [ 1358.450290] ? __pfx_ext4_mkdir+0x10/0x10 [ 1358.450857] ? inode_permission.part.0+0xb5/0x520 [ 1358.451542] vfs_mkdir+0x24b/0x470 [ 1358.452064] do_mkdirat+0x163/0x2d0 [ 1358.452574] ? __pfx_do_mkdirat+0x10/0x10 [ 1358.453148] ? getname_flags.part.0+0x1dd/0x4f0 [ 1358.453865] __x64_sys_mkdir+0xf6/0x150 [ 1358.454421] do_syscall_64+0x3f/0x90 [ 1358.454944] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1358.455644] RIP: 0033:0x7fcb02882c27 [ 1358.456146] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.458516] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1358.459520] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1358.460461] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1358.461400] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1358.462355] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1358.463294] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1358.464275] [ 1358.481506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:47:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 51) 18:47:14 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) 18:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x700000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1358.574395] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1358.574395] program syz-executor.6 not setting count and/or reply_len properly [ 1358.735535] loop3: detected capacity change from 0 to 4 [ 1358.746115] EXT4-fs (loop3): Invalid log block size: 33554433 18:47:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x1000000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}, 0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7, 0x9}) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 18:47:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 52) 18:47:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/oev/sg#\x00'}]}, 0x2f) 18:47:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f660000000000dd745c9861e2de045c343755c163ba035713a4898e19454e7cce9f23e5dda4bce86a2a5865f9d14214bb14058b1b5001a1b92744233e4456dcd002ccccb9b5e4e4640fc5addbc7ea547e9507f76a16aec493cc507955cd1d527e9bd3432bda46771f93a71d35c9520672571668e6ffc68c27102acf58169409fe34c5a1e162c6e31b69021dd96d37eb6d56f1"]) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = timerfd_create(0x6, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x7, 0x2, &(0x7f0000000800)=[{&(0x7f0000000780)="2e18316401a4b3768843a7682d6de2ab9f993a3ff5398f4e1469db6bbe6393fcdcb733c598c8f7c6", 0x28, 0x4a00}, {&(0x7f00000007c0), 0x0, 0x3}], 0x1200080, &(0x7f0000000840)={[{@data_ordered}, {@errors_continue}, {@grpid}, {@bsdgroups}, {@orlov}], [{@euid_gt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '\xdf'}}]}) io_submit(r2, 0x5, &(0x7f0000000a00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000280)="73e0d4698a5720000e16b6267f41bd866932663abacc56f0506117c472f6646e99ab164f3d26f3c99ead23e3003fb1e5c5f1172a0c303b1651cfa2c3027c9f919a5e9ee0cc827b06a9e5c3d927a3b30835573ce6cd3b58daf39093fe2965e337f6d6b9470d84d02bbdf55847956578ebd82017ca3007d7edcbceaf1d8c653c51c929a9b975461d5aa0abe453d3b125d040fe09257a4148b2e46766a1dc9fdbbe937fbd241080c9a0651b122e7b231141788abee890f59b184e7fe47101b889", 0xbf, 0x3, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x3, r4, &(0x7f0000000380)="b9aa3535efca6bf66c940df17ff7e9a45dcf44a0a981f03615330110c28798afb7960057764463e577b5faee0d6553e988f90227d6ae6e19d41db54912162a20beb416470601cf0934b9301168ced88057583cb193e891125d2a6096ef642f8ba8d54e2de6415e122c73025ae6a2cf00e6b2cca3fb2914387508bc99f2ed86cafcf968e98baaa5e357a7d2f32638dfa40fafed590913714e5de5c41a3a88ecac86653b3174874b349877d2c189ae2a349074d6d0eced769637d5c1da031b752978c7d79c07db5586f35fcdfd9a5267f0dfdd15988b2f4777a93be9941d1f0757df5d46ac48e5b2b6c9e799fbd9879d46", 0xf0, 0x20, 0x0, 0x3, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f00000004c0)="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", 0xff, 0x0, 0x0, 0x2, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x80, r8, &(0x7f00000008c0)="3b804e1afeced52286eb74de309da81a89cd8def886d7313ee1e3856ea1eb4e9bcf35d2691bfd1b9dfe5ededd9ba2669c3b256c9a1e6fc0302763593e43b5b98fddb7d7d68c2153d0acfa98c5cfb709c6f324bbcb7a1fa0b82e1a7583760f77a35642c0cb115638fa1050d3057754ff70c4a3937766c56d4bad9d0", 0x7b, 0xffffffff80000001}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0xfffc, r0, &(0x7f0000000980)="54ee2f07ff2160bf0b640a77549043d04e03b72608992cc58eee8033302b2d0c80de11e8bcc41aebf108f290a997315dfb271c2364c0d67e5200f8", 0x3b, 0xffffffffffffff81, 0x0, 0x2}]) sendfile(r1, r3, &(0x7f0000000140)=0x5, 0x81) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000a40)={{r7}, 0x3, &(0x7f00000007c0)=[0x0, 0x8, 0x80000000], 0x7, 0x1, [0xa10a, 0x4, 0x5, 0x3]}) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:47:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{0x20, 'syz1'}, {0x20, 'syz1'}, {0x20, '*&$('}, {}, {0x20, 'bridge_slave_1\x00'}, {0x20, '(}!!-\''}, {0x20, 'bridge_slave_1\x00'}, {0x20, 'syz1'}, {0x20, 'syz1'}], 0xa, "8dd79875a9"}, 0x51) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0x81, {{0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x2d}}}, {{0x2, 0x4e24, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) io_setup(0x1f, &(0x7f0000000640)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000006c0)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1', "68673ed26f72c29cdea187cf7347adb684e6ab9d353d1cd62fdc782db533e7621f36a34047d5ea00529a82a5b83d22c68a725ec50ac5b4ba504a6c4086323c6a1bac465fb55e205707deee671ccb5cbcda75d9c1a220daa5a3e591f9abbf56a533f4304cf5bbc0675c449d104253a9e818bcbd903ec2934a04e11371840896395c70a3625a34adcab3709fc61cf8738a945b7f29ff1924924ce1d443718256a36b09e0cd6d64f0bd8d51a84d2275df0bd754"}, 0xb6) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge_slave_1\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000140)=0x80, 0x4) 18:47:27 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) 18:47:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)) [ 1371.486202] loop3: detected capacity change from 0 to 4 [ 1371.489614] FAULT_INJECTION: forcing a failure. [ 1371.489614] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.491569] CPU: 1 PID: 8493 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1371.492784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.493844] Call Trace: [ 1371.494189] [ 1371.494495] dump_stack_lvl+0xc1/0xf0 [ 1371.495016] should_fail_ex+0x4b4/0x5b0 [ 1371.495576] should_failslab+0x9/0x20 [ 1371.496097] __kmem_cache_alloc_node+0x5b/0x310 [ 1371.496721] ? sidtab_sid2str_get+0x180/0x700 [ 1371.497337] ? sidtab_sid2str_get+0x180/0x700 [ 1371.497968] __kmalloc_node_track_caller+0x4b/0x160 [ 1371.498645] kmemdup+0x2c/0x60 [ 1371.499094] sidtab_sid2str_get+0x180/0x700 [ 1371.499684] sidtab_entry_to_string+0x33/0x110 [ 1371.500317] security_sid_to_context_core+0x32e/0x600 [ 1371.501016] selinux_inode_init_security+0x4c4/0x6b0 [ 1371.501749] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 1371.502483] ? __pfx_get_cached_acl+0x10/0x10 [ 1371.503122] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1371.503954] security_inode_init_security+0x155/0x360 [ 1371.504668] ? __pfx_ext4_initxattrs+0x10/0x10 [ 1371.505310] ? __pfx_security_inode_init_security+0x10/0x10 [ 1371.506148] ? chksum_update+0x50/0xb0 [ 1371.506713] __ext4_new_inode+0x38ed/0x5410 [ 1371.507359] ? __pfx___ext4_new_inode+0x10/0x10 [ 1371.508026] ? avc_has_perm+0xfe/0x1a0 [ 1371.508611] ext4_mkdir+0x33e/0xb20 [ 1371.509144] ? __pfx_ext4_mkdir+0x10/0x10 [ 1371.509737] ? inode_permission.part.0+0xb5/0x520 [ 1371.510436] vfs_mkdir+0x24b/0x470 [ 1371.510974] do_mkdirat+0x163/0x2d0 [ 1371.511498] ? __pfx_do_mkdirat+0x10/0x10 [ 1371.512084] ? getname_flags.part.0+0x1dd/0x4f0 [ 1371.512745] __x64_sys_mkdir+0xf6/0x150 [ 1371.513316] do_syscall_64+0x3f/0x90 [ 1371.513905] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1371.514627] RIP: 0033:0x7fcb02882c27 [ 1371.515147] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.517533] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1371.518564] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1371.519509] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1371.520461] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1371.521429] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1371.522423] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1371.523416] [ 1371.548161] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1371.548161] program syz-executor.6 not setting count and/or reply_len properly [ 1371.627943] sg_write: data in/out 32691/5 bytes for SCSI command 0x0-- guessing data in; [ 1371.627943] program syz-executor.2 not setting count and/or reply_len properly [ 1371.637901] loop5: detected capacity change from 0 to 74 [ 1371.650957] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1371.678350] sg_write: data in/out 32691/5 bytes for SCSI command 0x0-- guessing data in; [ 1371.678350] program syz-executor.2 not setting count and/or reply_len properly 18:47:41 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) 18:47:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 53) 18:47:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) socketpair(0x4b, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r3, 0xffffffffffffffff, 0x0) dup2(r1, r3) 18:47:41 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/arp\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x5) openat(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x60002, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000140)) 18:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x3e00000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/pev/sg#\x00'}]}, 0x2f) 18:47:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = socket$inet(0x2, 0x800, 0xfff) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:47:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x1, 0x736b, 0x7fffffff, 0x0, 0xf}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000180)={{r0}, "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"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) [ 1385.134769] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1385.134769] program syz-executor.6 not setting count and/or reply_len properly [ 1385.156386] loop3: detected capacity change from 0 to 4 [ 1385.167321] FAULT_INJECTION: forcing a failure. [ 1385.167321] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.169014] CPU: 1 PID: 8532 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1385.170173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.171253] Call Trace: [ 1385.171608] [ 1385.171927] dump_stack_lvl+0xc1/0xf0 18:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xfe0f000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1385.172470] should_fail_ex+0x4b4/0x5b0 [ 1385.173181] should_failslab+0x9/0x20 [ 1385.173730] __kmem_cache_alloc_node+0x5b/0x310 [ 1385.174412] ? sidtab_sid2str_get+0x180/0x700 [ 1385.175058] ? sidtab_sid2str_get+0x180/0x700 [ 1385.175691] __kmalloc_node_track_caller+0x4b/0x160 [ 1385.176396] kmemdup+0x2c/0x60 [ 1385.176863] sidtab_sid2str_get+0x180/0x700 [ 1385.177478] sidtab_entry_to_string+0x33/0x110 [ 1385.178134] security_sid_to_context_core+0x32e/0x600 [ 1385.178857] selinux_inode_init_security+0x4c4/0x6b0 [ 1385.179574] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 1385.180340] ? __pfx_get_cached_acl+0x10/0x10 [ 1385.180955] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 18:47:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) [ 1385.181791] security_inode_init_security+0x155/0x360 [ 1385.182613] ? __pfx_ext4_initxattrs+0x10/0x10 [ 1385.183221] ? __pfx_security_inode_init_security+0x10/0x10 [ 1385.183983] ? chksum_update+0x50/0xb0 [ 1385.184513] __ext4_new_inode+0x38ed/0x5410 [ 1385.185125] ? __pfx___ext4_new_inode+0x10/0x10 [ 1385.185766] ? avc_has_perm+0xfe/0x1a0 18:47:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1385.186336] ext4_mkdir+0x33e/0xb20 [ 1385.186913] ? __pfx_ext4_mkdir+0x10/0x10 [ 1385.187460] ? inode_permission.part.0+0xb5/0x520 [ 1385.188131] vfs_mkdir+0x24b/0x470 [ 1385.188647] do_mkdirat+0x163/0x2d0 [ 1385.189149] ? __pfx_do_mkdirat+0x10/0x10 [ 1385.189706] ? getname_flags.part.0+0x1dd/0x4f0 [ 1385.190353] __x64_sys_mkdir+0xf6/0x150 [ 1385.190892] do_syscall_64+0x3f/0x90 [ 1385.191406] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1385.192118] RIP: 0033:0x7fcb02882c27 18:47:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x22, 0x0, {0x1}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) [ 1385.192639] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.195089] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1385.196097] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 18:47:41 executing program 7: keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/4096, 0x1000) r0 = add_key(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="e89d5da42a3e97c44a54e5ef4504cb42e636f436b4a97d70b85dc43502815d00679867b6c38a7f4a0e774d879b97d71eed26b9399e62d2fd3d1577a1f290387210d5505bf353be7d274c4336996ae265c964a4d36fd8fbbd3b07ec5102e607310ec6261f481089ed06fd3a8b55908261d13fe369fb5141f8f52446d6d3986f8e1711fb912468a0ab33f3abc441db9dae27da89383a658f193468bc72a8621c9e0b8a004cdf13a4bafa268cf4e85f6673d82ec63d9fb61da2dcd834703194f687787c2ff26f028914fc7441acf31879f41263f1af975d95a47ef92e0bdd3e7aa07dab2ace10bca970", 0xe8, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)='keyring\x00') keyctl$chown(0x4, r2, 0xee00, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r0, 0x1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000001000), 0x3, 0x10000) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000001040)=0x9e8, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1385.197045] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 18:47:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000040)={'\x00', 0xcb, 0x1, 0x7}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1385.198066] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1385.199091] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1385.200029] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1385.201012] 18:47:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/sev/sg#\x00'}]}, 0x2f) 18:47:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 54) [ 1385.347903] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1385.347903] program syz-executor.6 not setting count and/or reply_len properly [ 1385.351911] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1385.351911] program syz-executor.2 not setting count and/or reply_len properly [ 1385.361626] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1385.361626] program syz-executor.2 not setting count and/or reply_len properly 18:47:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) [ 1385.419119] loop3: detected capacity change from 0 to 4 18:47:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c654ec6caa2e16ae9e321287d3224272d254328af5b2726272d5b282c202f6465762f736723000a"], 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:47:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x3, 0x20, [0x4, 0x786, 0x40, 0x8], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:47:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x80000003, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}}, 0x108) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) 18:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1385.441166] EXT4-fs (loop3): Invalid log block size: 33554433 18:47:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/uev/sg#\x00'}]}, 0x2f) 18:47:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530204081f7ebc9b67595722024272d254328af5b2726272d5b282c206871aa3a59a84f7302fb2e73abe0c74b998d46c9f10bb53196788af3585f23240b1b8d10b04f18e52c7441d1cee728d81499f2a14ae3e2d5f4e78ae9b3f057ec6f6f0b5b3ae8c784d38b43ff64be1c38b854d9486fcbd8ef32cc50b19e3db62fcf3d65753385e97b62822f0a761d892b01b5a6c8e1c0a86ada1c31220acb7cae296159fea82786ba88966d174451eb6288b7276ebcf3efe4a2b3299a4af3a87653d8b1911025d818ad6e8e1b88eadbd4e2f516825bf10a"], 0xdc) 18:47:53 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x802) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:47:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 18:47:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x2, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 55) 18:47:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="58a4a99d10c54c9e88d7d36b7c0ece70", 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:47:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1397.907879] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1397.907879] program syz-executor.6 not setting count and/or reply_len properly [ 1397.915365] loop3: detected capacity change from 0 to 4 [ 1397.946623] EXT4-fs (loop3): Invalid log block size: 33554433 18:47:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\x1a\xdf3P\xdd\xf8S\x1c=\x04B\xf8F\xc0\xd9Mb\xca0\xc5\xb2U\xf9\xa9 5\x18UeR\xdf\xea'}]}, 0x46) 18:47:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) io_setup(0x1f, &(0x7f0000000640)=0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x56c5, &(0x7f0000003fc0)={0x0, 0x7ee0, 0x1, 0x0, 0x2f2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004040), &(0x7f0000004080)) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) io_submit(r1, 0x9, &(0x7f0000004340)=[&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000001b80)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x2, 0xfff, 0xffffffffffffffff, &(0x7f0000002c00)="c31e32df9adcd50f3571a3181db2b456b3db8bbc2b670af00ee3ab61693f2ed951f8faa73b57963ca0a9d9bbfb5bcbed4baa510bbf504717b0cea46cd1a025974eceba82dc134599495d43d4e4f4caeb81c31771b169e42d5150e27a66a26ad53d4fe44c51916342fd", 0x69, 0x67eb, 0x0, 0x85c17f83769b72dc}, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x2, 0x80, 0xffffffffffffffff, &(0x7f0000002cc0)="aac1edd64e8bf68de10e9b9dbd7cc4043ac1848b012fe387bcce9012f3570e16657131a1acf475011b0836b977470a86ea5368288a93ca9cc0718e519095b294d7c19dd5dd415c0499d9d9234d856b5569796cbbc1f533808440baa906e393197d25f33f89b3852144da88a941b8c6daa1363b1fe85cab0590ae961debcefb06483bece86e96e443bf97da5bb28e14b454f3c3b881bb6747c48f0dc34dc74338a1a004a243272059f8aef3bac5f193e9ee4c5f6d8de604cd843ad48a600e2946f960df8e4ebeee5d61308115f68a3f37223ed26151e78d63539b0033a980336084ccf9940c81567e74a4b3f99d0ef6e5ed4bc5", 0xf3, 0x100000001, 0x0, 0x2}, &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x3, 0xff, r0, &(0x7f0000002e40)="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", 0x1000, 0x7fffffff, 0x0, 0x2}, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0xe, 0x2, 0xffffffffffffffff, &(0x7f0000003e80)="d4d8f763fb8d0cb7699e9f8803672f0d560fba61dad0a505fa87e5cc383a148895cbde7d8df5779db4e3c173c7128ff861ad492fc0f3aa769d262f207e4b772cb4ee8490a97a862078f04e9a2dce73e317c5e67d2db7eec469249b4b1a5e43a5a2e4df5a8bf9ed99cf1a43474820ad8a000e5c550aa6b26d9ccb842386c8a6ac13252f116025ada179ffa01f2a03aac333668114e92d921e670afededa66c1ee50c80a7342088ff6c4441d63509ba4b8a5aeb102f29a02235654f1a2e3ff5b475311f60fb9d520fdfc0f1cedc6b0909620d0e87e", 0xd4, 0xab}, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000004cc0)="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", 0x1000, 0x8, 0x0, 0x3}, 0x0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000004100)="5969b72339a0e9855e35a8abc2270e6abfe099c519c67a2bda526a2fe3cb13707d51dadda4a5013490ca448d2623bcbefd6fcb91ab78bc031119eb10b155477a9b81ca8ae6b010ec4e2fe45feaed428d5a7dd0d9fa6ff64b5ddd5c0faa66a5d71ee8d3ed73e9493ccfda81a1e5c06860fe00d38e25df1e03737e97b6575f3470bb7ed71b54850e7680eacf12e3304d3148c602668cfe", 0x96, 0x1000, 0x0, 0x2}, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000004200)="cf1517e89b1d1ae46836bb2b9f3006bb0c6e711f3a3d8418615052d5c98a70df407abfa6c3ed3e5a8627f73803770bc983f9ce432de3c6670c07d7139a3b6b5b70914ed898c98b8ebd4f30a13995f658d0e888196e60634a283fa7a3e31fa1e8f1e1f3555cebdde47125b92cf48b0ed6665021113a690f184a17b07d532b7c7f40c5c5cbf606ca81e218b5a4ee09b7fd48f5a9e020266bcf87218a0e48288b2c2d96c43c56e14a077b0d6c20589b5c4ff10b0d28888e47a211c068216b94ab088c756e04662ab9", 0xc7, 0x8, 0x0, 0x3}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000ea2600"/23]) write(r0, &(0x7f00000003c0)="36f31b0d8a2a711456db7c8fb074cb4418706d9c8f597bb4480dda768114918ef0ba37ea59649283df52aa5c61f14475e847b2dee6af31e0c9fb89926200bf789efe13d190b3678ba642eabc62c26058fa6805fbe1d3f50c19e09ef9aaab61b7725682458d8db75f5ab302b01f77a792e1da8bf8d0b81b0c100d292232c10f7c457e33e83739ecc5081ed4165910275d0004fb1d2977b949b0a3", 0x9a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) io_submit(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x4, r5, &(0x7f0000000000)="822ee714f3f6808e6c8d4e770ad8a9ecd884059a68bcf519c5fd10001f16c96daaedc536bc9b275b20af8f05dcb73dd702604ce4832b9138a3d017f3638318f7d74be7a6570564ca2d69272af175542b2ba573b6f85fd0652f5063511de64460a006414e78bdecd832cd252bc516b9fc8b74310065cfdc1ce05d0db3ec707f3907791799a70d7838e2404f6be45c8e958f13138bfac969693b46d9a63abb29398b5a0058a52b31847c0f375f0f03cf0114806b9c2c1522fd64eef4445a", 0xbd, 0x200, 0x0, 0x1, r6}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000140)="fe5c924a27b66b3d3a921192259c80e8c6c2ccd246af4753fa5d8a92509ba71c9f2cd63a534cb3e1c1fad465ad40183e056b7ed30a51bada1addea1627122c7dce57f108466995ba464545dc2759f8030a4a9da9bd16765df2c9f309e78b2eb69cb771aced94459e62e12aba", 0x6c, 0x9, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000000240)="c2a4259ae0f505cbdb0e49ec3733f666efa29f753f5a30459c48dc441fd21ea8a88a5883825f54558213df93742fcab59a9b2fa5e41cece7f903d08a00cc28a6684376fd7a359faaa5c31b16235b260cbd49bfad937fa352060ae2c32aee646cc580184ffcf9fcc7ad203a835a2813f4579cdb24666398775286d22c15bdad32b632076d9b310567ad63eb82824a7b27a2a0dc82de950fd1d2ac790d0bbb580d1a90ef700d250d66788a427c8ac62832e2f53fc9ef479a356d24316e41d443e08e8114ebbef209a8bd3c661a75f8db1dda81af44", 0xd4, 0x8, 0x0, 0x1, r8}]) 18:47:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 56) 18:47:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:47:54 executing program 5: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e20, @remote}, {0x6, @broadcast}, 0x48, {0x2, 0x4e20, @empty}, 'macvlan1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21420200}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25060000003c0001800800030003000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f4f627269646765004c000180140002006d6163767461703000000000000000000801030005000000140000000000000000000800030001000000080003000300000008000300020000000000000000000000000045d0c4b5d828768100a59d1e97557cca0c81571fae19d5439c4ae714c4e32c4951da508455abbb464829cbb814c0bc0753f1239cf11da2febbb99a19baf316a6f8d9be2d77fc36f8c28827b854f2e3f38d012cb3f70970a19ab98666f95f8f4d8fd7dd01667a00"/213], 0x9c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000100)=""/178, 0xb2, 0x2) 18:47:54 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/xev/sg#\x00'}]}, 0x2f) 18:47:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000000)) 18:47:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x5, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:47:54 executing program 5: fsmount(0xffffffffffffffff, 0x1, 0xf0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1398.229603] loop3: detected capacity change from 0 to 4 18:47:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1398.249357] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1398.249357] program syz-executor.6 not setting count and/or reply_len properly [ 1398.268184] EXT4-fs (loop3): Invalid log block size: 33554433 18:48:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff2cc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:48:06 executing program 7: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:48:06 executing program 5: r0 = getpgid(0xffffffffffffffff) r1 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x12142) r3 = open(&(0x7f0000000400)='./file0\x00', 0x2000, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000004c0)=0x80) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000500)={r4, r5, 0x20}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000000)='net/arp\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:48:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40401, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x4a, 0x81b2, 0xfff, "ff7e9ea30918854e023efa46f58edb3bc5d0a1734254483b75cc3d15d43968559e83abccd5087ea13ff25f543d409f7b2aa295fc8c412997cece979fc57300b981fe3d28035ba9613266"}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001000002f66696c653020403a7b405b2b21287d2024272d25432800000000000000002c202f6465762f7367233184e04ea3b6693a867aa00500aae620e6452b5630e59cd632c4cace0000000000000000"], 0x2f) 18:48:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:48:07 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/d\nv/sg#\x00'}]}, 0x2f) 18:48:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 57) 18:48:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x90e, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) [ 1410.931000] loop3: detected capacity change from 0 to 4 [ 1410.935574] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1410.935574] program syz-executor.6 not setting count and/or reply_len properly [ 1410.949884] EXT4-fs (loop3): Invalid log block size: 33554433 18:48:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xb0, 0x7ff, 0x2, "07a16f5a6a2d5dd4676d87f8b70e5d3d286c5ebd2cf4ed104a4d9a3d04c4bbb4e3f76e44fc0d0286019be75063b1b7e9513ba29d36e093dc95e961f18feffbd95f1226a5f959d9efba6bd4d974050328c94e9de5d07e9c370d63059fea59500d6fc40db3e84a20c93e895b5e15c255cbbba37d6591dc8a5c1bb4b28db0cc5ae9b9f7f3a11dced4c799097711476875ce5d38d7248b4fe2d11afc3af7f710359a448fb652e2bab638be9326a8e422a0bf"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, '#! \x03\xd3\x989Y!\xf7\xce\x1f\\\x1b\xb2\xc8(\xe4\x88\xa5\x05\xb8\xb8\x88\x95\x19B\x8e\xe8I\xe5\x18\x1b\xbe\xec\vne\xbbY\'\xa7\x95X \xd3\xc1<\xbc=S,WO\xa5r\vE\x15{\xc09\xaf\a\x0e\x0f~}\xefEAS\xe6\x9c\\F\xafQ\x85\x13z\\&Q\\\x9f\xac\xcf\xfe\xb6\x03\x1a\x9d\"\xc3\x1f\x00\x00\x00\x00\x00\x00\x00\xc1\x1b\x85\xa0['}]}, 0x78) write(0xffffffffffffffff, &(0x7f0000000040)="a3fd54b7e2315ec948c1fd95a37e0c424b9428e52fd648f4c793d8449f3dda5b175830234249ad990f5d815dc85579f2cb5d1e1c7528c31f08bd88d7668799277a75859e9c31218b5d5a1210e3b1d6ee2ebddb623efe", 0x56) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x105141, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0xda, 0x6a9, 0xffffffff, "076ed8bb799563e382b8cf84aa6973541d7a9e52829b9adc2b1e05b668935ca3310fa13e0cb8d74675b4c8715df948719f4d0cf617c7d71fa89690958678394a6313b5864bb3e3582220e19b5c03441b28ac2b01ac7f7877ad45429563cd19cd44ab094925353f4a800dd0dd0fa5027e6f59e4e90dce1bf90395594bee12bd48edf2f77de131a235dafb68895fe172794d828e59febf01e269276383bccc24306fb91eff02502153735f3e1312dc54c24f8c6293e42afefa5290f284cd83beb0b1fa23aa9abd124e742c4db7910f51cbab62ad903ce4c403f032"}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)={0xee, 0x7, 0x4, "26b506cc214794601bf1bc46c52f320cfc9593348b88f7dbf97bcbd4df81ee2988f83ffe2d892654d8f04c84546c845484310ea1db968a8ea99da33cbc5bde45bfce4f08e2e7cb1ec76eaf8ff122b2dd8bfc07992216ba4c21b5adfccdb44e8f47fb7b5949d58a711394a81519f02ac386648ad8fba44df828f2f1e3eb7b9ecd8c2663f7f81faa4096a28410a5bef2bc4d22c8984966e955b968e0919b5499e43a2d833458d99df6174c4802530ddcac37c6bf9570fd046f287cbc566be50b220b9095f24a7731fa0e7b272a8c844a9794746a6c7f2435172809fa65d4739bb8e4b261d46bbda001b867e9951448"}) 18:48:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 58) [ 1411.159483] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.162338] loop3: detected capacity change from 0 to 4 [ 1411.166018] FAULT_INJECTION: forcing a failure. [ 1411.166018] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.168210] CPU: 0 PID: 8659 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1411.169298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.170415] Call Trace: [ 1411.170745] [ 1411.171035] dump_stack_lvl+0xc1/0xf0 [ 1411.171539] should_fail_ex+0x4b4/0x5b0 [ 1411.172074] ? __es_insert_extent+0x3a9/0x12f0 [ 1411.172656] should_failslab+0x9/0x20 [ 1411.173151] kmem_cache_alloc+0x5a/0x390 [ 1411.173683] __es_insert_extent+0x3a9/0x12f0 [ 1411.174255] ? do_raw_write_lock+0x11e/0x3b0 [ 1411.174841] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1411.175467] ext4_es_insert_extent+0x2db/0xb30 [ 1411.176065] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1411.176714] ? __pfx_lock_release+0x10/0x10 [ 1411.177256] ? kasan_set_track+0x25/0x30 [ 1411.177781] ? __pfx_ext4_es_is_delayed+0x10/0x10 [ 1411.178409] ? __es_find_extent_range+0x197/0x4b0 [ 1411.179026] ? do_raw_read_unlock+0x44/0xe0 [ 1411.179580] ext4_ext_map_blocks+0x18e9/0x5970 [ 1411.180177] ? __pfx___lock_acquire+0x10/0x10 [ 1411.180748] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1411.181398] ? __pfx___lock_acquire+0x10/0x10 [ 1411.181964] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1411.182654] ? jbd2_journal_dirty_metadata+0x1bf/0xdb0 [ 1411.183328] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1411.183936] ? lock_acquire+0x19a/0x4c0 [ 1411.184437] ? ext4_map_blocks+0x270/0x19e0 [ 1411.184992] ? __pfx_lock_acquire+0x10/0x10 [ 1411.185527] ? ext4_es_lookup_extent+0x48c/0xad0 [ 1411.186129] ? lock_release+0x1e3/0x680 [ 1411.186654] ? lock_is_held_type+0x9f/0x120 [ 1411.187217] ? down_read+0x1b4/0x470 [ 1411.187701] ? __pfx_down_read+0x10/0x10 [ 1411.188223] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1411.188826] ext4_map_blocks+0xb15/0x19e0 [ 1411.189371] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1411.189956] ? __brelse+0x88/0xa0 [ 1411.190430] ? __ext4_new_inode+0x150/0x5410 [ 1411.191019] ext4_append+0x1b7/0x540 [ 1411.191518] ? __pfx_ext4_append+0x10/0x10 [ 1411.192065] ? avc_has_perm+0xfe/0x1a0 [ 1411.192571] ext4_init_new_dir+0x262/0x4c0 [ 1411.193104] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1411.193709] ext4_mkdir+0x3d3/0xb20 [ 1411.194200] ? __pfx_ext4_mkdir+0x10/0x10 [ 1411.194718] ? inode_permission.part.0+0xb5/0x520 [ 1411.195346] vfs_mkdir+0x24b/0x470 [ 1411.195823] do_mkdirat+0x163/0x2d0 [ 1411.196296] ? __pfx_do_mkdirat+0x10/0x10 [ 1411.196826] ? getname_flags.part.0+0x1dd/0x4f0 [ 1411.197428] __x64_sys_mkdir+0xf6/0x150 [ 1411.197936] do_syscall_64+0x3f/0x90 [ 1411.198428] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1411.199081] RIP: 0033:0x7fcb02882c27 [ 1411.199543] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.201689] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1411.202629] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1411.203480] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1411.204339] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1411.205189] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1411.206048] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1411.206939] [ 1411.219305] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1411.220325] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.222957] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.224383] sg_write: data in/out 1455193092/247 bytes for SCSI command 0x28-- guessing data in; [ 1411.224383] program syz-executor.2 not setting count and/or reply_len properly [ 1411.228216] sg_write: data in/out 1818846731/78 bytes for SCSI command 0x19-- guessing data in; [ 1411.228216] program syz-executor.2 not setting count and/or reply_len properly 18:48:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/d%v/sg#\x00'}]}, 0x2f) 18:48:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:48:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 59) 18:48:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x7, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@posixacl}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x1}}, {@aname={'aname', 0x3d, ']'}}, {@access_uid={'access', 0x3d, r3}}], [{@subj_user={'subj_user', 0x3d, 'net/arp\x00'}}, {@fowner_gt={'fowner>', r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'net/arp\x00'}}, {@obj_user={'obj_user', 0x3d, '\\,+@'}}, {@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor}]}}) 18:48:21 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x9, 0x40, 0x9, 0x0, 0x8000, 0x400a2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8a32, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x8088, 0x5, 0x7, 0x4, 0x4, 0xb8, 0x3, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) 18:48:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) removexattr(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)=@random={'osx.', '\x00'}) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="261a6b6decdbd94b7a74f313ebf0397214b228f2754068c029d3352b0afb23877c9f5802d0aa3e9b7bacb4f711894c8fd84f420cb9a52b95875825e431dc2ee4d0477d31eead9bf9d509946acc7a99cb5b942fccd1e45889455470904437519feef9f9c7b04655f9ea89372ddd82a39c1da6fa6296f6bd934d61deb708e2f151245b28e189d8635c8600cfa33a3a2cd75236ab6273570fed9960fd159d263df67fedcba74cf7a3def12a16141c6ba8e3d2993d718b87eff922540cbc44647679dfde30665f2c5f65ece261539e01a748feb768bc4205e515fa6b7f32f03bc4bd29be155d", 0xe4}, {&(0x7f0000000480)="a854664d1aed47d76ba953aa38c9844bc8f921d54d74aad2119b47dce1b43e5103d217d7de145905ff5f0ecc41c0eed58ddbbef373e275f3839df0479361d9aa10e25e40f809653a5e5390eacf24b5ac658439b86383997938f45c6183be84624fcee5ead640e0d0566ba664bd3015413a145e38edcc4ef897f363bb1acd9e014fad2b163a1b60b359", 0x89}, {&(0x7f0000000540)="ec9a1b3243343bf86497a934868cbae23e90837d22211b0f9f8c5840290618f831db69eabac94cde401ab5c39ea7f3c7c59724661c8c5a813253dbe5a617447fdaa2fe41ca684e4af2265f7d365c13992a733f8ace3993f9959df9a6bf300f633e4fa58cfbdd399189dc784c2d819d54576a04ba9acc0288", 0x78}], 0x3}}], 0x1, 0x20008000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) syz_io_uring_setup(0x64af, &(0x7f0000000000)={0x0, 0xdb53, 0x4, 0x3, 0x52}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000640)=r0, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r3) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0xab358d1624cd19e7}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') r9 = io_uring_setup(0x7c50, &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x14, 0x0, r10) syz_io_uring_submit(r2, r5, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r8, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/63, 0x3f}], 0x1, &(0x7f0000000240)=""/163, 0xa3}, 0x0, 0x101, 0x0, {0x1, r10}}, 0x0) 18:48:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) sendfile(r0, r0, 0x0, 0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400018082cd003b124310f1d51532a57d037b825d97340427de0327a102d7d89f8a5162e035d57a40a3a9cd2f47703dfd79cfc93e1c126d15e6dbe071d709feaa68a936f2e1bd1e9fb403606a64c1cce3121e149dc73aa48e7b6416f2175aeee204ea6a4da8e05baa353da3e74afe056eabfe702e9fda1bcf7e4cc0ea9841f7c7883e84b7fd3789bd0665a663a750b9654fb490a81267e2808123596823b465dc82aa3662a2a715bf", @ANYRES16=r1, @ANYBLOB="000127bd7000fedbdf25010000000000000008410000001800180000000569623a73797a6b616c6c657231000000"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@:{\x06\x00\x00\x00\xe7\x0f\nx&\x93\x88P\x16)|(}'}, {0x20, '$\'-%C(/[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x3a) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0x0, 0x81, 0x2, 0x0, 0x101, 0x61814, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000380), 0x6}, 0x1010, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0xfffb, 0x0, 0x29, 0x0, 0x3ff}, r3, 0x5, r2, 0x0) [ 1425.267643] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1425.267643] program syz-executor.6 not setting count and/or reply_len properly [ 1425.278021] loop3: detected capacity change from 0 to 4 [ 1425.304103] EXT4-fs (loop3): Invalid log block size: 33554433 18:48:21 executing program 1: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) 18:48:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x8, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev\nsg#\x00'}]}, 0x2f) 18:48:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 60) 18:48:21 executing program 5: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x424, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1, 0x11, [0x4, 0x9, 0x9, 0x4, 0x80000001, 0x5, 0x100, 0x101, 0x80000001, 0xdeec, 0x4, 0xaf85, 0xfc920000, 0x3, 0x1, 0x1f, 0xfffeffff, 0x5, 0xfcd, 0xffff8000, 0x80000001, 0x6, 0x3f, 0x1, 0xe406, 0x8, 0x4, 0x40, 0x6, 0x7, 0x1, 0x5, 0x7, 0x800, 0x401, 0x3, 0x80000000, 0x3, 0x7, 0x1, 0x4, 0x7, 0x40, 0x1ff, 0x80, 0x5, 0x1, 0x6, 0x0, 0x100, 0x0, 0x8, 0x40, 0x0, 0x6, 0xf6ef, 0x5, 0x1, 0xfffffffd, 0x1f, 0xff, 0x5, 0x86, 0x9], [0x3, 0x9, 0x10000, 0xff, 0x1000, 0x4, 0x2, 0xdbe1, 0x1, 0x4, 0x3c889f79, 0x9, 0x0, 0x8, 0x9, 0x4, 0x6, 0x7, 0x9, 0x8, 0x2, 0x3ab, 0x0, 0x4, 0x4, 0x4, 0x79, 0xf50, 0x8, 0x10001, 0x9, 0x200, 0x4, 0x6, 0x1, 0x1014, 0x3, 0x200, 0x6, 0x4, 0x7fff, 0x8, 0xfbc, 0xfff, 0x7, 0x6, 0x4, 0x7fffffff, 0x3e, 0x101, 0x3, 0x7f, 0xfffffc01, 0x8, 0x4, 0x76bf522f, 0x0, 0x8, 0x0, 0x3, 0x53, 0xb80, 0x9, 0x2], [0xbfc, 0x80000001, 0x2, 0x1000, 0x200, 0x40, 0x0, 0x10001, 0x6, 0x10001, 0x4, 0xff, 0xf02, 0x3, 0x0, 0x3afa, 0x1, 0x1ff, 0x690, 0x0, 0x400, 0x9, 0x0, 0xfffffff9, 0x1, 0x2, 0x2, 0x9, 0x3ff, 0x2c5, 0x53, 0x3, 0x6, 0x9, 0xffffffff, 0x1f, 0x43a3, 0x7f, 0x3f, 0x81, 0x4, 0x81, 0x81, 0x3f, 0x5, 0x0, 0x4, 0x6c4, 0x3, 0x907, 0xffffffff, 0xfa59, 0x4, 0x101, 0x5, 0xfffffff8, 0x2a88faab, 0x8, 0x1, 0x7, 0xb73c, 0xe6dd, 0x1000, 0x10000], [0x10001, 0x0, 0x7, 0x3, 0x3, 0xffffff7f, 0x8001, 0x7, 0x5, 0x2, 0x5, 0x7, 0x7f, 0x1, 0x8, 0x5, 0xffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0xb74, 0x540f2188, 0x15f5, 0xfffffffd, 0x3, 0x101, 0x0, 0x8, 0x6, 0x8001, 0x5, 0x9, 0x9, 0x34cf, 0x8000, 0x100, 0x0, 0x6, 0x8cb9, 0x8000, 0x6, 0x200, 0x0, 0xf8b, 0xf49, 0xec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0xff, 0x5, 0xb0f, 0x3, 0xfffffffe, 0x1], 0x2, ['[\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:48:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5, 0xd078}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x26, 0x20, 0x6, 0x0, 0x7, 0x200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x100, 0x4, 0x7, 0x9, 0x9, 0x8, 0x4, 0x0, 0x9, 0x0, 0x81}, 0xffffffffffffffff, 0x3, r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) [ 1425.520605] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1425.520605] program syz-executor.6 not setting count and/or reply_len properly 18:48:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x200, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7, 0x5}}, './file0\x00'}) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000180)={0x6, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0xa9, @remote}}}, 0x108) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x0, 0xa, [@loopback, @multicast1, @loopback, @local, @remote, @private=0xa010101, @remote, @broadcast, @remote, @private=0xa010100]}, 0x38) 18:48:21 executing program 1: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) [ 1425.636222] loop3: detected capacity change from 0 to 4 [ 1425.641282] FAULT_INJECTION: forcing a failure. [ 1425.641282] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.643520] CPU: 1 PID: 8697 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1425.644757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.645995] Call Trace: [ 1425.646436] [ 1425.646802] dump_stack_lvl+0xc1/0xf0 [ 1425.647357] should_fail_ex+0x4b4/0x5b0 [ 1425.647953] ? ext4_mb_new_blocks+0x653/0x4460 [ 1425.648616] should_failslab+0x9/0x20 [ 1425.649180] kmem_cache_alloc+0x5a/0x390 [ 1425.649775] ? __mark_inode_dirty+0x530/0xc10 [ 1425.650445] ext4_mb_new_blocks+0x653/0x4460 [ 1425.651108] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 1425.651814] ? kasan_set_track+0x25/0x30 [ 1425.652407] ? __kasan_kmalloc+0x7f/0x90 [ 1425.653006] ? ext4_cache_extents+0x68/0x2d0 [ 1425.653659] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1425.654372] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1425.655035] ? ext4_inode_to_goal_block+0x324/0x430 [ 1425.655763] ext4_ext_map_blocks+0x1e14/0x5970 [ 1425.656429] ? __pfx___lock_acquire+0x10/0x10 [ 1425.657071] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1425.657823] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1425.658574] ? ext4_ext_map_blocks+0x9b6/0x5970 [ 1425.659224] ? __kmem_cache_free+0xd1/0x2f0 [ 1425.659849] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1425.660537] ? ext4_map_blocks+0x704/0x19e0 [ 1425.661158] ? __pfx_lock_acquire+0x10/0x10 [ 1425.661774] ? lock_release+0x1e3/0x680 [ 1425.662343] ? __pfx_lock_release+0x10/0x10 [ 1425.662947] ? lock_is_held_type+0x9f/0x120 [ 1425.663577] ? __pfx_down_write+0x10/0x10 [ 1425.664163] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1425.664817] ? ext4_es_lookup_extent+0x48c/0xad0 [ 1425.665520] ext4_map_blocks+0x776/0x19e0 [ 1425.666125] ? __up_read+0x199/0x750 [ 1425.666692] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1425.667351] ? __pfx___up_read+0x10/0x10 [ 1425.667936] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1425.668621] ext4_getblk+0x62d/0x860 [ 1425.669167] ? __pfx_ext4_getblk+0x10/0x10 [ 1425.669778] ? __brelse+0x88/0xa0 [ 1425.670295] ? __ext4_new_inode+0x150/0x5410 [ 1425.670977] ext4_bread+0x2e/0x1a0 [ 1425.671508] ext4_append+0x225/0x540 [ 1425.672079] ? __pfx_ext4_append+0x10/0x10 [ 1425.672692] ? avc_has_perm+0xfe/0x1a0 [ 1425.673300] ext4_init_new_dir+0x262/0x4c0 [ 1425.673908] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1425.674615] ext4_mkdir+0x3d3/0xb20 [ 1425.675163] ? __pfx_ext4_mkdir+0x10/0x10 [ 1425.675733] ? inode_permission.part.0+0xb5/0x520 [ 1425.676455] vfs_mkdir+0x24b/0x470 [ 1425.677029] do_mkdirat+0x163/0x2d0 [ 1425.677555] ? __pfx_do_mkdirat+0x10/0x10 [ 1425.678171] ? getname_flags.part.0+0x1dd/0x4f0 [ 1425.678883] __x64_sys_mkdir+0xf6/0x150 [ 1425.679455] do_syscall_64+0x3f/0x90 [ 1425.680015] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1425.680751] RIP: 0033:0x7fcb02882c27 [ 1425.681307] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.683775] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1425.684801] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1425.685789] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1425.686776] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1425.687750] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1425.688873] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1425.690223] 18:48:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev#sg#\x00'}]}, 0x2f) 18:48:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001140)='totmaps\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000100)) getdents(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 1425.931209] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1425.931209] program syz-executor.6 not setting count and/or reply_len properly 18:48:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 61) 18:48:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:48:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x100) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000140)={0xe1b, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 18:48:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x3e, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) sendmmsg(r1, &(0x7f0000001c00)=[{{&(0x7f0000000140)=@ethernet={0x301}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="303555f145fec0d6f47652e768c2784d112f6f6e44ced7f2930cb886c9d881c431b6878661c9dedd3acfb2f9c95f9fd842762599b4eaafc4f6ffa303f1aa75", 0x3f}, {&(0x7f0000000200)="022736c50ed2c1f056e02405", 0xc}, {&(0x7f0000000240)="3e6d973c7aa27b539ad1885efd91aeb6090646428962db6187709d3bc1e33933fe433e3be6a84cb6a3671c2d693852851f460be7ea661e40224c12a8b7d44179fc21b1771efc4a83f8b44b7383edf18d37aa3f5ad7873606251efe8ce018fda54b533c2c674c0413d1a9508956c09406b39e53f4f33fb8d75ab8b851e3138acc56016dcb5fd9edf78087a8f7922bf297ec14967eae7bfd6b01d68086b98b53104d1760169d7b7f2df353c327f16d21b0817a55999b7bd25e78d6ece6c1a8958fd6c150ce7f8f4ab36cc37f690516cfb816ea093b47", 0xd5}, {&(0x7f0000000340)="0c02d6348fdb60b701138dfc544048c022dbedb29615076fa95c53c9b8257b7a33d20a29ca7b7f5e14651d86b91b847d605a61efb4d468a22e89d0f0fd1e736f1c3aebf4c51846ac941669d704d5ebb6eea77c92db3ad51304b80c18b368fd1ea7f8cab5b43d0602a984f342db98fd6f21e7448380cc25d9835ddc607f8f212888b9c1958fd91d4dc397d5623e2ea86c", 0x90}], 0x4, &(0x7f0000000440)=[{0x68, 0x103, 0x81, "f2f70ab526571d5b77c1cca4ce3cf380339297c929d42df96a43bac231291784a8ac01a7dacd52c49b8799bf087a994067107caa2097c4bb75084544b5b618a3f4f7f0eea17d679e42e0535284b2e57d4aedc2a2073f"}, {0x1010, 0x2, 0x0, "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"}, {0x70, 0x119, 0x7fffffff, "42a0194ec5b48aac12a6735ee8472ca70275d94ec3fcddd7b788077c64fbdb5dadc55e593f8f96998c3a144da0953fca9d4b708c30cf91b5a4369a79b97ff668f6ec42cdbe1e52d82018cb5ff95122a0ef3d9d64e9031d69696fd011c8bb45"}, {0xa8, 0x10e, 0x5, "2adcf1bd89f0de5e3446fd46362f5565f15ce308356bce84fcb3713376db3f299cdae716020188ec2906cea9fffed938ccf44cad7a6b3592ce8a8a632647947deb47a5f25ebe80851b1fbddf2e5899cd0a81beda735a76d57a0b56e065c871a18ecace3446c319c269c2f045ef8c1ebb030dd4a0caaf9fe9a4ca131ea2f6bdf20b30c8da3235d3c49b6867113eae56e3e4"}], 0x1190}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001600)="e6335f0bb553466feffff7eb6849cf18f3d56031b969019e2c22567dd4563db04be2404900f2f8ebe351b72db585042d3424e55dc1eefecbc293748833909d2d7593cc5bbc4e846e6d6ff50c6226dd485d890c3d01edaa81c68cbec8ed06014d80afa27345756ae2d3bee54122efc97f732c957a23d5a88153c35a4a65608eb15baefa7fa5266cef6851297bca6de4e42cf346fbca05d306b73e62295ba103792523427aa3dc7ab693256d3ccdd810c4abbe335b75065425dc2ec4266e7e2ccd2fa681cd9e0043724b916ac06d16eef4e00997e32420d14846e1fa0a5010d4f3cb1039", 0xe3}, {&(0x7f0000001700)="7aedb2a98064ed6ed943b1ef33f11343f642f24d00803ec814a8736bce61c31d55a7fd5dc98433ba751170b50bee5c0de668bba9a9fe2857333a221152255100cfd78c5e3f5e833b90f0693793f0f565dac19fcd328ec66a7a4ed364bc802c31dca3449fa245156a0ce15aeb70800b373a2361305fde568e861fe876d7d2f18c99bd273aeaa70f1aad04c25afd6570234d216bda3a4a3cfe4d7744d285d409b96e35bb6711fbe0a42b2bfccb3b2b4e36dc112503cae2fbc1d6dad06ec0051a1dddf41e839e5b7a7d42f3b7c3882c", 0xce}, {&(0x7f0000001800)="e426633636f71335c29af32502417847e650b92081af5f5c8b0275a3c804cd56a864a77472f5d8e573f0947acb5a0060fbe420c9110c5298c11cd2dfe235e9a8b3baa7f52edf", 0x46}, {&(0x7f0000001880)="123b7a96175bd8742e39f3f3defd499ac39229ad8f1bb622b17e1ca4f88e304b8c7b0bec54257e87f68678de44ec70f5a3e4019814de1f8ada9933df2833db7a95334ab193eb22cdcccf950dc1fc3e3fea3bcbcdbfdb88c08805945eca9b4ef215baf626d352a72a22581c", 0x6b}, {&(0x7f0000001900)="a679f449a7913cf32ac6df7db7bffe4ccbf9e603a3fd57680e31732208f0d0412b829b2a2f", 0x25}, {&(0x7f0000001940)="8431c930f0448b", 0x7}, {&(0x7f0000001980)="bec827f77ad3a549811a0f2c09d8093363ddabc2f2c59ea480dd4b8b617ccac2a25937cea2e8a319a20ba55826c193a9ee2f6d49d8eaf99aa9aa0485e23e10b739fdf549ee70bdbefa8d233ee0d9bc1166378f45d02d06173a464a24b20fccbee45f4c82beb09f3bd828e3c306f01d4f2a4597ef9c6c81b5a2f25f62720bca79404560c7aed38e02b31c3e89bae7821054235f300d266dc569f190c8ee19df3c", 0xa0}], 0x7, &(0x7f0000001ac0)=[{0x60, 0x104, 0x6, "01778d69c8245ef58a2d141acd50d4d5d6a4b1abb89d8eeb1482851d518ac81840acbea721a95233b9ba62d4cc5744205b5fc98b476ef8920bcab7241edb3bfa8e3d343079f498633229aefea5"}, {0xb0, 0x108, 0x400, "abc9d06b7605af975f2c8b2e49332fb4f6067ae0f965bb8ff7f2a93bb09d4f8c82c5df6a855aa50f818d1c9fbea7f1ef0a0ef3dd55e2567438d87c740476024720b501baa5e42a0d690d837428447fcb82e2c2c4701e00b6b48d80273ca963ae22259ad8a2c4a2f50283816d8bca430495c69f0f5edbd73cb2b7424f48d967e452d16ec3730fc1ce96cdeee40d6495047cf2a9288e34629f5a73a4cfeeb930"}], 0x110}}], 0x2, 0x4000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:48:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev%sg#\x00'}]}, 0x2f) 18:48:35 executing program 1: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x125) 18:48:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) accept$inet6(r1, 0x0, &(0x7f0000000040)) [ 1438.978796] loop3: detected capacity change from 0 to 4 [ 1439.002662] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1439.002662] program syz-executor.6 not setting count and/or reply_len properly [ 1439.006156] EXT4-fs (loop3): Invalid log block size: 33554433 18:48:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:48:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 62) 18:48:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, 0x0, 0x125) 18:48:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x180, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x5108, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x0, 0x178, 0x4438, 0x8001}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/3g#\x00'}]}, 0x2f) 18:48:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev)sg#\x00'}]}, 0x2f) 18:48:35 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400002, 0x101) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, r0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 18:48:35 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x22, 0x0, {0x1}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) [ 1439.285706] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1439.285706] program syz-executor.6 not setting count and/or reply_len properly [ 1439.286059] loop3: detected capacity change from 0 to 4 [ 1439.304003] FAULT_INJECTION: forcing a failure. [ 1439.304003] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.305639] CPU: 0 PID: 8760 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1439.306634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.307631] Call Trace: [ 1439.307958] [ 1439.308260] dump_stack_lvl+0xc1/0xf0 [ 1439.308773] should_fail_ex+0x4b4/0x5b0 [ 1439.309300] ? ext4_mb_new_blocks+0x248e/0x4460 [ 1439.309902] should_failslab+0x9/0x20 [ 1439.310406] kmem_cache_alloc+0x5a/0x390 [ 1439.310960] ext4_mb_new_blocks+0x248e/0x4460 [ 1439.311567] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 1439.312207] ? kasan_set_track+0x25/0x30 [ 1439.312739] ? __kasan_kmalloc+0x7f/0x90 [ 1439.313275] ? ext4_cache_extents+0x68/0x2d0 [ 1439.313861] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1439.314504] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1439.315105] ? ext4_inode_to_goal_block+0x324/0x430 [ 1439.315760] ext4_ext_map_blocks+0x1e14/0x5970 [ 1439.316359] ? __pfx___lock_acquire+0x10/0x10 [ 1439.316934] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1439.317598] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1439.318264] ? ext4_ext_map_blocks+0x9b6/0x5970 [ 1439.318875] ? __kmem_cache_free+0xd1/0x2f0 [ 1439.319442] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1439.320067] ? ext4_map_blocks+0x704/0x19e0 [ 1439.320639] ? __pfx_lock_acquire+0x10/0x10 [ 1439.321195] ? lock_release+0x1e3/0x680 [ 1439.321708] ? __pfx_lock_release+0x10/0x10 [ 1439.322255] ? lock_is_held_type+0x9f/0x120 [ 1439.322850] ? __pfx_down_write+0x10/0x10 [ 1439.323392] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1439.324007] ? ext4_es_lookup_extent+0x48c/0xad0 [ 1439.324636] ext4_map_blocks+0x776/0x19e0 [ 1439.325183] ? __up_read+0x199/0x750 [ 1439.325673] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1439.326269] ? __pfx___up_read+0x10/0x10 [ 1439.326800] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1439.327429] ext4_getblk+0x62d/0x860 [ 1439.327919] ? __pfx_ext4_getblk+0x10/0x10 [ 1439.328478] ? __brelse+0x88/0xa0 [ 1439.328936] ? __ext4_new_inode+0x150/0x5410 [ 1439.329525] ext4_bread+0x2e/0x1a0 [ 1439.329993] ext4_append+0x225/0x540 [ 1439.330501] ? __pfx_ext4_append+0x10/0x10 [ 1439.331060] ? avc_has_perm+0xfe/0x1a0 [ 1439.331585] ext4_init_new_dir+0x262/0x4c0 [ 1439.332134] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1439.332759] ext4_mkdir+0x3d3/0xb20 [ 1439.333237] ? __pfx_ext4_mkdir+0x10/0x10 [ 1439.333768] ? inode_permission.part.0+0xb5/0x520 [ 1439.334406] vfs_mkdir+0x24b/0x470 [ 1439.334914] do_mkdirat+0x163/0x2d0 [ 1439.335404] ? __pfx_do_mkdirat+0x10/0x10 [ 1439.335946] ? getname_flags.part.0+0x1dd/0x4f0 [ 1439.336563] __x64_sys_mkdir+0xf6/0x150 [ 1439.337089] do_syscall_64+0x3f/0x90 [ 1439.337588] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1439.338260] RIP: 0033:0x7fcb02882c27 [ 1439.338747] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.340916] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1439.341844] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1439.342703] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1439.343574] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1439.344433] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1439.345309] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1439.346203] 18:48:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:48:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffa, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x290000, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:48:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x500, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x22, 0x0, {0x1}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 18:48:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, 0x0, 0x125) 18:48:49 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/\ng#\x00'}]}, 0x2f) 18:48:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 63) 18:48:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0xff, {{0x2, 0x4e23, @private=0xa010100}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1', "68673ed26f72c29cdea187cf7347adb684e6ab9d353d1cd62fdc782db533e7621f36a34047d5ea00529a82a5b83d22c68a725ec50ac5b4ba504a6c4086323c6a1bac465fb55e205707deee671ccb5cbcda75d9c1a220daa5a3e591f9abbf56a533f4304cf5bbc0675c449d104253a9e818bcbd903ec2934a04e11371840896395c70a3625a34adcab3709fc61cf8738a945b7f29ff1924924ce1d443718256a36b09e0cd6d64f0bd8d51a84d2275df0bd754"}, 0xb6) sendmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f00000000c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="659232afb3f0e2027b5289bc4211c4a003c44ad5fded5b0a2824bd2154a3184a820623abf9cabb0926259a7887a9cfdd78a15af83c3e7e99f5514169fd21b7a600d0cda3a3f1116d042ade5827ebbfa277b098537482e9b21bfdc18e552b346527b9438ca66a344f51b91b32271b0b6ce92e9530877ef8a3b68f6c65efa39615cbd20f823d02", 0x86}], 0x1, &(0x7f0000000240)=[{0x20, 0x10d, 0x3d, "e7679629ca25ff5d3e278a0bf84c6a"}, {0x20, 0x108, 0x2, "4cda10521f17137f0fb583e3db"}], 0x40}}, {{&(0x7f0000000280)=@llc={0x1a, 0x30d, 0x8, 0x5, 0x1f, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000300)="0e48aeeee40c38527e6025e66d4cbb52a45a6c32053aba22c1e0ea571e81ce37", 0x20}, {&(0x7f0000000340)="73804963adac86dfbfebb626bff05b3894c8cb09370c7f0a88b51bb347c9d4a90b2921713a23866192dacb74b7e0f5c473be2780e6d0efaf84d0f035cedab8020d84ac13d50a5b6e9868b5492d456e989a2c0782e6", 0x55}, {&(0x7f00000003c0)="f6f170ec06421882f06015ad6d1be613590cb7f44beb8c09a9de599c74f606b8704e5a81040a0689650f5f9f8eb07a7dca021ad5e32579dbb22f97c25e8df69bfcc6461ef58261ba8c40b46c99f8ddc464162417fa44af0134d62d3cce5e3c9a26bbf349cc2fbff964c84cd04c10d3581dcdb3977890de22356b0810346e34fb87e49d85e4", 0x85}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="c80000000000000003010000040000001d60a95cf21bbae21161c61c07881c8bcca41eaeffba4868b174f7105df8d4997bafac4293e291be97b72acece0c593ce68f599ffbb3ee08173dd1607df82ee5a0e61306ac8bd0cc528552ab6912c59756b4af170e53748b8f7017d4d902798aa6b4794a0aeeb94a2ec5c13d3863e934a523154f641e822b87c4e55bcc9df3436c847b1fe25051889892d38dfd16d67fa1c549b012ea5fb02567872791820800000000000000f6f23945a8d9c407cba92f4dbc25ab4b059cc004aa25fbc5774b02a8ac00000018000000000000003a000000fd0c000084ce96d7a75b0000280000000000000007010000f8ffffff6a94ff3ae3e13f4435debd32f55084141039000000000000"], 0x108}}, {{&(0x7f0000001600)=@llc={0x1a, 0x323, 0x84, 0x7f, 0x5, 0xe1, @broadcast}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)="89c192c4e686817398700d003253d6ecf3f7", 0x12}, {&(0x7f00000016c0)="e703243bba38a2b570e85c8fd1fc58cbb3ab8842e38f85b513cdec73d3db054ed4693ed4eaa1cb483510caef246deb1685513b32b5f375bdcccf95fac106eba2d3b2843272c7f499ac8866b6bf0ce91dc75c285556a96cb41260943014a66174e7183929986cda81bc58af3f37e6bcd00a566e9ec2f8d3b4a17af9c5476009eb363bd2ad1343ff7c9b26d8e3873ea99fba", 0x91}], 0x2, &(0x7f00000017c0)=[{0x78, 0x118, 0x0, "55a33c697035079999ecaa088117d2d44cc214bd6d5cfc2f1dfeacaf367ef9d5a1b4c850f7a2adb47063b12f215bdfa2ec69cbb82af53d7cc0283b1d0a6d3f6e1fa7550bbcafcc9f575290ab3523dc70ac444f6092a4ef962fd6483573afd796472c"}, {0xe0, 0x0, 0x8, "f67e7fa66b533073025fbfe2bb57fe2a2d4e032d819accecd14ab906cb61fdf73aef4b87a74f42bb46ada22f63b7074cc423180e26a133e6fa982564f32f06358009f1d164e3776c2e33deb45bd62b6a1f1de08edbf6770442b8aff5a51fa21a77d20275235aa2cdb91f3d9f18665188ab3592e350cf95a1ad234dda0627292d096adc1c390c65c0e186275e4eee36e5549ea5c5770d89ef89dadeb7bac4d5e8105a1c3c2ff2977fd5f4b0267ce93e33a014ea60d16299945f32a5ac42085e5dd49e062167248a7543"}, {0xd0, 0x118, 0xffffffff, "66f33574e878b163270b2ed7de0f186569e51fa10e655ba340b5d08f19e6c5bb5fad10c875a1aa7465c5adef911d3969dfcb80191a9f34ce604137d1acd7bdc3dc4a10626853e3d3f2f495fd7a75b434f13ca21fcb9b7f029626ff6f32e76640cd1836ccd313f44af5bc731ad586b5dcf4ac22a77e6aa625974606f229780266634be79ba8e86c816acbbf87faf119385a8ea10046264835abb8ed8f8e4bae08c3f8c3e1a1a3c009e74e761c78cfa27ef9d620d1d46217c397"}, {0xd0, 0x0, 0x0, "0cbeeaf2544e1bf7fb769c9c14aa8fe23e69b245e0834b6bcc256a1924007eb1160bd0a96d618aa83842ee72d8faa730dbb80832222b7861e38257221cfe100c9d5f5c235721130ccb6e3287f0a4ad5921d7eb3d50ce57b6e494c30fc0726d09a54e90d615fef590ebbd52a6ecba117d746b7e2471d1c8721174e46d8bf3db1da81b77bcc753a5311270592c8c7aa92da7023b58a6d0a4fc2e12a06abae3d3dc47485fce983bd65527d134930e5713851d79c871c3a923203df2e6c9ad1c"}, {0x80, 0x10a, 0xd909, "a81e6eba93bfe9fb67ca27d969f5edd6fd1e9bd3267b734a002c1397a9b0287fd9d2565706b3098e43d223c1ef9a3b3f90ddc8202dbc1a6af9c70af39d0877c7189cd4ab3679ed1ed109a9f2226695b97ca386855a42ac6af5d5286b0ee69c3c1c9a24d853e3c5efe70c79f1fac1ee23"}], 0x378}}], 0x3, 0x8840) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f000000aa40)={0x0}, &(0x7f000000aa80)=0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000000aac0), 0x90503, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r7, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r9, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ac80)=[{{&(0x7f0000001540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001d40)="493babf0898c621a9c65153f2cd7c00723086af163d6ddaa16e77fe7a8ee863e094c52d1fdff0d1141255cb28a679a58af78580cfa7a945bfb4fd368eebcf54504adc67952faadb7898327d99af22428022394c41ded", 0x56}, {&(0x7f0000001dc0)="25db4ed7e3bf503178ae68ac93e99b2d87dc374fbf6fa7cfe82fb5e2fe91fb2ff574895bfac5fec9615aab0d1b9cab7336cbea44c444a1a9eba4c47fbe7f1f5db7eeb4f437b85025bd2a992faa545cbae0654cd2cdfa707381b20fde905067d7c5a348086c6919fafc6001db9efc502f373c4d0a6043225afdb1e773a4380a1461fbe88bf6ecdccca7151edcc81f637027fd0254c490c76a89935607d71cfc04968794b40b8f54ea9f227120392888e52f7d8caa3b6a272b826c9226c2ecbcc3966d2d6cd8a110df7d21cd16c6fec8a2244c6bdc1d62716d2ce513", 0xdb}, {&(0x7f00000015c0)="8e4f2a98f5caaffdd6cf85c5cb3980e7274af140ea50acec8782ae48e917f09dda98a712903468b0c2b65c5c39ffc4c80e9f72d6a4", 0x35}, {&(0x7f0000001ec0)="93bccfef0f917904e2b2a28afee8303dbf0668f42f4c4aeb8503e682a1fda40188974a647ee911f2a6", 0x29}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="acbff3d289ec208dcb2e7460ac7580701a8a069e9909e3c5b5cf10930fa51743fdbbed5e93586e5bcd84bf4d59b488c9a4e62da493628107cf61c198f018add83f5416fed156a1d570901d238fa6fbc789ece35f0500630eb2f0a67b41649b860b9bffc25344bda2b2259a512f53d96ad2b19b91fb62aae6b600c0e19c6f9b760278d7f00be1ff47f17c", 0x8a}, {&(0x7f0000002fc0)="7d5157b66e8acfc2241d03bd9408de097b7f34b6a356c0e17584a22389906753d36cea75c611ba6af80f7f62f71dd11a8ec40226062bc4376f94d378c6789adb9418770d62ccfbd6bb3dbcb78623f188ae186635a0b08461672b68b214c988f7d401cdbce4b9a48616b6f9a183e0cb0a7f7391db44020de6d56950b16ca343edea20129e34b2ec4182feb7b004127d42b38f6316866a4944893e0b050621f937c67b19edc91f24ff2e", 0xa9}, {&(0x7f0000003080)="444da5a65f5948abeee2f7f24f1e6012d28ccfe45ad1fad8e0ab93f9b419b1bbd97f0bd32e1a3f8b3303103cb5a8cd809041bd6bebd6329c3bd718c25880d9982666b319e80479117758e95ec5c09ee40568a2068680c0495a9cd7a363088c34856b2de27748277c7b05abb0d572ec96949b13f472430b5741811b360796c4e968b5ab6e73dc6d4f444392a42af5a8952f9f5353ef5b890b30591ba7bd781ade215852934fddca2fa82b89c7c3b833c405cfe355", 0xb4}, {&(0x7f0000003140)="43b0c508ba79639841348d456da870326afcbf7e67397f2e887eee915bde6516ffe3d204ec5f5df61e3f8016805d2694be042c0ad5cd21a6ed6650844262142e10a1bd9a2d6bc907a9d41690e44febee8e3cdab51a8637c4dc14c931b0b931e83356c38fb3d2c84f1476e3c06773e47db9cbb234801941e5e030392c81539e34ca92d29d19207b5d9c90245163822ed3ee89996b7031b44e5d5873", 0x9b}], 0x9, &(0x7f00000032c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x80, 0x20004000}}, {{&(0x7f0000003340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003480)=[{&(0x7f00000033c0)="4d1b31d530ad24f2f7cadd1a2990033c50ce5e6bbad4d30697bda083b5329fec32df682e19d0379da8d381ab847e759b1927675c00ad97c73e31fd68fa01ca6ac656eca9724edcae3b25bec0cc4e28a191d55399d1c41f6cd4808733b125cbfa9f6f1eb70ade3eba119a2f84c8c9f493bd7a1d4b612977fb880eafe4a9b391599d65e7fc997605b4e99420eadf36566b22a57816248041aa8a9c", 0x9a}], 0x1, &(0x7f00000039c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}], 0xb8, 0x20040cc1}}, {{&(0x7f0000003a80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003b00)="af1d30207ddfb77b2300483cc1427c7d5a967087a0b18595b7b6097340", 0x1d}, {&(0x7f0000003b40)="90ae9ef48d714f5592e3a00c6e9d78b439", 0x11}], 0x2, &(0x7f0000003c40)=[@rights={{0x34, 0x1, 0x1, [r0, r1, r2, r3, r3, r2, r1, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x78, 0x4000040}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003cc0)="63eaa69738", 0x5}, {&(0x7f0000003d00)="ada03b6701baa984a3608047af4d00be01a97d392e325c5b7312c03893696abe15ebdb3a70b347243f5b847677ba81b3addc778c3b6efd5e4f122ddfb528fcbf7fe7d87ea2fc2c7c809c8355e4793681c70e1972e6a38f20048dae04101f9cd447a00c6087f0f3df215af01ccba16447ac7bfab88abffa0a9d60350e0295f35a89573c2a5c8e0077706fbcd6534a3359a83d6102182f2444a000fec8725f56f3a783d66aee867d4586cec8909eb196a9caa7efb899bab33e9089be1906c915cc783230b657d7384b23c17116c3bb4af2", 0xd0}, {&(0x7f0000003e00)="a199ce808e0d4dc1da2b9418070015e2f4c3a5347cd96ed9bb40eb7a65809d01f27cb9ec40566847a58f2541fc5323c0dca1fe08750c5181fc16cffb8a8cb78cbe18cfa421ed57c12dc02bae262bdc6548cc12daf48fe2341df78b1b936a80b7cc63026df1f5cdec3326d80d32e6660fe91788ecc0cab8f90398e17b590a4a5c4d42784f98db10bf892829f73484f868614af59255845d25cb601315d4de6136f86228a35984a76ac0503a2a9ed9b985", 0xb0}, {&(0x7f0000003ec0)="6891eb54c37e385ad87a11b1a17eb83db4088153fb36cbbe9b996cf11c749973ec6c0920361441298891bf5e8a9d81ec9f47843ec799d0a6f31b84e132573fefd8de515dcb402575b4bd8fa51d104585b97f635780e45f9ce4c6bd4eba88819ec44a87eaff7b5be059b106", 0x6b}], 0x4, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x48000}}, {{&(0x7f0000004440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780)=[{&(0x7f00000044c0)="bb48c0caf3b49d5bf81b3a7e98a0830aa2ba122fbab48258645ad1b843b98b149e0ceb8fa003cb7975ee", 0x2a}, {&(0x7f0000004500)="cc022759f382afda855cbf40e1b6893d12e20c5257bb0ebfe874e29351b130db64df9c10e26bb0f34d13875e0c8d6abbe2ffbc778fb05cc5e16b8c0fd3409e7c8b7d02c3ac50071a089945b350f02dc39c07d13d97eaf1c168302e5efebfc1ec977bd79ab77d1a8c41f086e38b61d5c2c8c4c742", 0x74}, {&(0x7f0000004580)="16e74e15e1358faaf00262bf762c9ac964046bcc1e44630b8e70f289baef17d76f4a4273edb922fe3ccd14f43303a31a985931d293dde242b0b059bc", 0x3c}, {&(0x7f0000004cc0)="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", 0x1000}, {&(0x7f00000045c0)="1bd69e59a5e90bccd3276502e750c70ace5bee7a7023d6e2f5dbb8b73533c4d1cc9cd5badda1cad801485eaf3b52be2fa94f5ecce78703108b346c4f97bc3d07ac03897015d35f2c461ccab70d033e92d057bc603b628836ce2421b10117d3f9727bde245bfc152c7f", 0x69}, {&(0x7f0000004640)="c1d88378015404ba1a4e97c715", 0xd}, {&(0x7f0000004680)="4769936482cf6396cdaccc00b41b8dbb6cdc27c5c4741fe17b946eded768e50f5aacae8b91573094edd681852b433ea62d484c95ca16fbd20b3b8b6622ffbd21050ae95fc038fe9cf27ea53d8621e956d58253d27103feb75e09f9f4717eea607f96cd653b214ce2c6f562e8df8cf75f8568e0636105ad6ad55158a0f672959fb8263bde28d7e2753eab591046cd4c33dba96ad64d398d9d5e5ae16cd002a5cca6ea0c6dcc50362a156f1d020029c1b420095f751fbb73801998ecf65bd893c651b71e72170c3d081935544fbbfebf93bddc84771c72377538f7f27e637cf18a0f1a5eeb7a6c36f34cfd78cb937d0232c74269", 0xf3}], 0x7, &(0x7f0000004800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x60, 0x4080}}, {{&(0x7f0000004880)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004900)="e40928951b3bcb44bd935cdaa958c1a8ed1318eb3632fba6388dd4916707ddfff27313934941dd4dc6119e4ca9e3543ebe5578b07b88893fe2c0aa4785afc9b2aae6667427571a0e8ae81cdbd020fe0d5a2eea5323f20f8cd013d12aae20f70bdeac11a56e17b6cc647aac4eea03e5a969331746593ee394f350", 0x7a}, {&(0x7f0000005cc0)="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", 0x1000}, {&(0x7f0000004980)="f722590a9011e3dd5bfbc41e31f37518af9888cdbd98bcc1e0701df982ccf3249bb30756c065b68134363172619515857dca15e2487fa7935752b2269b93871ca04d0c5570d920a2e1aa3f84c6e297773c4d2568c8031f86656e8f3b5924c743abe4845d5c46d11dc6ce3df2acaae3ff9e830f28259acacf12232103f33885e4b84b8a4e9a2f85a2b11788b14c3831b2d113c48e2e5aa0056c5aa284b3faf87b13c0df1cfba209b98ec954cb2d7618fdda3f59d0c2e4a69a9baea8864d234d8e5d9664f5", 0xc4}], 0x3, &(0x7f000000a180)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x138, 0x20040040}}, {{&(0x7f000000a2c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000a540)=[{&(0x7f000000a340)="eff047c63bd4f9538cf5ff0081437f1ae4d96441b8d927130e664c8ec72d15ce49fca452b464748c220dbaa104ea47dd6786273811db751963fbea8b452ca1dc0918b4f50328f5419ba67b69c9f54d0bf571f4b98d97062b5ee3db29bf7d29f489087509d83553d38f38341d8af3f0be41bd0f338a551611174146e7945bc9869f841d151e90e9517169b654424fee86d1f03e8a60e1c28b23540f22e7731216456128cfd6cf8565fd28ac712caea1aca2e58af738c5d9285ecb96a7762a4836071635d6ca6ab3cd8fe5806a0907407531106268b4ce001647c498", 0xdb}, {&(0x7f000000a440)="4e6668853597b4e6e9ccb99432fde674272f934346e6449f4862d916da6a6c35200326f0acfa993a32b723dda4081d5dd4b8972b6f69bb96b34e1bc0ca00505f02526f3abbd85a8548a467f4cba1b9bbd686362c5b4db5afd752941c9242c50b838985edbfbefb1d60e541b6b6b16a3cd766ec04f85d61cb070a66c6c5adf010013e410312777f758c16398eac4bb6e3be4a558e9d0d755f6f37dd752f6e8e1d1109eaea8129100d449ce795f7c0011acf98fb4ed5c7f94a6ab406e33f379953c83b18c3b9b6781c4cd9fd69ce088ba7bb7795d95855704c238b7e9b4a217521c9fb389fd2a5ac8926", 0xe9}], 0x2, &(0x7f000000ab00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r0, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x158, 0x20004180}}], 0x7, 0x8081) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1453.147911] loop3: detected capacity change from 0 to 4 [ 1453.162297] EXT4-fs (loop3): Invalid log block size: 33554433 18:48:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 64) [ 1453.211554] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1453.211554] program syz-executor.6 not setting count and/or reply_len properly 18:48:49 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/#g#\x00'}]}, 0x2f) 18:48:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x802) write$binfmt_aout(r0, 0x0, 0x125) 18:48:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x1, @private=0xa010102}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1e0001000000000000000001001000e9010100e3e29b304bc6dcf4b33a0ace5acbd9d221448600968c23e9354401"], 0x14) 18:48:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x600, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:48:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x1, 0xfc4, 0x7, {0x5, 0x7}, 0x7, 0xffffffff}) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:48:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpgid(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x8, 0x7, 0x4, 0x37e6, r2}) 18:48:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x22, 0x0, {0x1}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) [ 1453.386404] loop3: detected capacity change from 0 to 4 [ 1453.388232] FAULT_INJECTION: forcing a failure. [ 1453.388232] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.389388] CPU: 0 PID: 8796 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1453.389977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1453.390505] Call Trace: [ 1453.390692] [ 1453.390853] dump_stack_lvl+0xc1/0xf0 [ 1453.391125] should_fail_ex+0x4b4/0x5b0 [ 1453.391413] ? __es_insert_extent+0x3a9/0x12f0 [ 1453.391731] should_failslab+0x9/0x20 [ 1453.392005] kmem_cache_alloc+0x5a/0x390 [ 1453.392298] __es_insert_extent+0x3a9/0x12f0 [ 1453.392614] ext4_es_insert_extent+0x2db/0xb30 [ 1453.392941] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1453.393308] ? __pfx_down_write+0x10/0x10 [ 1453.393595] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1453.393915] ? ext4_es_lookup_extent+0x48c/0xad0 [ 1453.394251] ext4_map_blocks+0xa0d/0x19e0 [ 1453.394550] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1453.394876] ? __pfx___up_read+0x10/0x10 [ 1453.395162] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1453.395495] ext4_getblk+0x62d/0x860 [ 1453.395763] ? __pfx_ext4_getblk+0x10/0x10 [ 1453.396061] ? __brelse+0x88/0xa0 [ 1453.396308] ? __ext4_new_inode+0x150/0x5410 [ 1453.396620] ext4_bread+0x2e/0x1a0 [ 1453.396874] ext4_append+0x225/0x540 [ 1453.397156] ? __pfx_ext4_append+0x10/0x10 [ 1453.397455] ? avc_has_perm+0xfe/0x1a0 [ 1453.397740] ext4_init_new_dir+0x262/0x4c0 [ 1453.398026] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1453.398390] ext4_mkdir+0x3d3/0xb20 [ 1453.398661] ? __pfx_ext4_mkdir+0x10/0x10 [ 1453.398963] ? inode_permission.part.0+0xb5/0x520 [ 1453.399311] vfs_mkdir+0x24b/0x470 [ 1453.399589] do_mkdirat+0x163/0x2d0 [ 1453.399843] ? __pfx_do_mkdirat+0x10/0x10 [ 1453.400145] ? getname_flags.part.0+0x1dd/0x4f0 [ 1453.400467] __x64_sys_mkdir+0xf6/0x150 [ 1453.400760] do_syscall_64+0x3f/0x90 [ 1453.401020] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1453.401401] RIP: 0033:0x7fcb02882c27 [ 1453.401676] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1453.402939] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1453.403464] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1453.403968] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1453.404456] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1453.404945] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1453.405430] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1453.405935] [ 1453.418636] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1453.446775] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1453.446775] program syz-executor.6 not setting count and/or reply_len properly 18:49:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 65) 18:49:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000fe75ddf636246e32c291514cbf638b5f745869d57fbb4f2221625a8e9560c6a1d58d83975e526587a3f7d976eb578dfaa8a25db15e18039656684456cd789d1b3fc81fe3460395206fca6686e2ebf3630a5cf913a19228c6af9e448c31f349037a60823a4b493296f84f60da77880bed2809e9bd72345bc9c3b0fe720e0101000000000000ee022d7296b01f6b98e335208b065a7d8a81190a5764319a", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x32, 0x0, 0x8, 0x0, 0x0, 0x5, 0x67}, 0x8) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321012e2f66696c653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202fedb20e76cfcc43d822"], 0x2f) 18:49:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) fstat(r0, &(0x7f00000005c0)) r1 = io_uring_setup(0x46c1, &(0x7f0000000100)={0x0, 0x6d2b, 0x0, 0x2, 0x1b3, 0x0, r0}) write$binfmt_aout(r1, &(0x7f0000000180)={{0x0, 0x80, 0x4, 0x3e0, 0xdb, 0x83ec, 0x254, 0x4}, "441d8b84d76695952b8ccc8e17530d65bf35e8e4d9", ['\x00', '\x00', '\x00', '\x00']}, 0x435) 18:49:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/%g#\x00'}]}, 0x2f) 18:49:02 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a3168673ed26f4ec272c29cdea187e6ab9d353d1cd62fdc782db533e7621f36a34047d5ea00529a82a5b83d22c68a725ec5ffc5b4ba504a6c4086323c6a1bac465fb55e95447a40ee671ccb5cbcda75d9c1a220daa5a3e591f9abbf56a533f4304cf5bbc0675c449d104253a9e8bd903ec2934a04e11371840896395c70a3625a34adcab3709fc61cf8738a945b7f29ff1924924ce1d443718256a36b09e0cd6d64f0bd8d51a84d2275df0bd754000000000000"], 0xb6) shutdown(r1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:49:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x700, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)) 18:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:k\xb2TS\x99\xa1y'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8100, 0x50) r2 = open_tree(r1, &(0x7f0000000080)='./file0/file0\x00', 0x18900) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) dup2(r4, r6) r7 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x66}}, './file1\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0xef, 0xffffffff, 0x4, "af1809a9fdecf192c998ee052d090912f619cbe797788719b5bfcbc04e071802c8002f7fba24802dcb3ffd17533f4253cf92ce1ff584118bc99de346d8f37b6abcd14a5bd439895caf49f88d38839e6b9b0a097e06f41c8196a26f3f22350305e1dbc2901d91a49d05ad52b4b293dccf969d5947bd498fc10a4787cb82ce0ba6be2f513d67f547bf4fc8bd3eb10a7a18da0ce1a1a6c8014a0509b7ac350adcea974884302a7055ef72964d908c8a4b6833fda4ed7dbad6b5fe1e531b6d1ac2c681921ca0e95580feed0bd9ba4c576d6260e407aec6b539a0a5297ef08c0236488451fc97eebf0c4141bb5aeb2c1472"}) [ 1466.421382] loop3: detected capacity change from 0 to 4 [ 1466.426574] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1466.426574] program syz-executor.6 not setting count and/or reply_len properly 18:49:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0xffe, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1466.450410] EXT4-fs (loop3): Invalid log block size: 33554433 18:49:02 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "02c75416866f52b33c43481cb3a2d0385f334070e7387f58992aae8299eb8f8557b58a98a794bd5fb38ffda4ebc8b18f65234b3c4412723b9b88d202118976fd", 0x3f}, 0x48, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)='keyring\x00') keyctl$chown(0x4, r1, 0xee00, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000200)) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0xff) 18:49:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/*g#\x00'}]}, 0x2f) 18:49:02 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) io_setup(0x1f, &(0x7f0000000640)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r5, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) io_submit(0x0, 0x4, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000080)="c2725b9003c987befe534d67b0b7d1a89ff4a075c92f2b84de452ff5136e26806becc682eac616664372376e32d2cce32ec352be33cdf0437b5a1075af6a95e2451ca10c0dc668cc9a9ff867c8929775cb15e9554526d917e6b8", 0x5a, 0xbb8, 0x0, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x81, r2, &(0x7f00000001c0), 0x0, 0x3, 0x0, 0x5, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000240)="e1bc40fb6f4cd6c700a4cecb841e6c68f5311faf48e52e4c190caf1c14dfe7bd281dc0930d577055156a8f831884209f70df80ff43ffb1e80cfc6241441efe3c919169be800a063d7194f90900"/89, 0x59, 0x0, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x6, r7, &(0x7f0000000300)="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", 0xfc, 0x81, 0x0, 0x3, r3}]) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x1, 0x5}) [ 1466.494849] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1466.494849] program syz-executor.1 not setting count and/or reply_len properly 18:49:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 66) 18:49:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)) 18:49:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x163802, 0x3d, 0x15}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r4, 0xffff}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @loopback, 0xffff}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') [ 1466.692108] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1466.692108] program syz-executor.6 not setting count and/or reply_len properly [ 1466.713511] loop3: detected capacity change from 0 to 4 [ 1466.730267] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1466.773565] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1466.773565] program syz-executor.1 not setting count and/or reply_len properly 18:49:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 67) 18:49:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 18:49:14 executing program 5: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xe0, 0x5e, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x7ff, 0x3, 0x1, {0x22, 0xaf0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x81, 0x1f}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf7, 0xc3, 0x20}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x7f, 0xf8, 0x10, 0x6}, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="050f1900030a0710021293ff070000000000000000000000001995e04cda9ac7e3642359c99837453beeec491377096ddb8bbdad9d90c7a647f86579a5319a6fe9311eda3e1d61c97ccc47f4cf29a862f1848a8a0a32fa608c3d279441e13491170cd3cc1c4f3d8cdc694eb4890316df0fb174278c4a0717046f142c22758200a0ad104434779b1421853e7fd628b1ccca049a3154"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x70, &(0x7f00000005c0)=ANY=[@ANYBLOB="70032678f018797d566dfb52b2565e332ceb5473a608e5f158c1b899ea28035d199ae2ee8fa1b0e5cea5cb2eb63740605695180b15c75dcd2523a95adfafe5ca1c8ededb5a45424be3791000e9e109f8bbcf556de6b33ebdfd2653ab964c52f1bf6eff0f200a617b7ddf91480de23786ce84dd644c45efac9363f4646fe7b60b67a38ff1e21cd879a757bb030a56b6e1b6949c63715e567eb2d17e7bbb1e172ef986594d39b5a931e102247ea2ab35f1d68ce1a97b2a37f484c45b3eab43e394af02f16e70392c529cd75880e6834c9b31c97e51dac1b121f73e31984ffae50f"]}]}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000280)=""/184, 0xb8, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'veth1_virt_wifi\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a3168673ed26f72c29cdea187cf7347adb684e6ab9d353d1cd62fdc782db533e7621f36a34047d5ea00729a82a5b83d22c68a725ec50ac5b4ba504a6c4086323c6a1bac465fb55e205707deee671ccb5cbcda75d9c1a220daa5a3e591f9abbf56a533f4304cf5bbc0675c449d104253a9e818bcbd903ec2934a05e11371840896395c70a3625a34adcab3709fc61cf8738a945b7f29ff1924924ce1d443718256a36b09e0cd6d64f0bd8d51a84d2275df0bd754"], 0xb6) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r4) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xd31c) 18:49:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)) 18:49:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/+g#\x00'}]}, 0x2f) 18:49:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x0, &(0x7f0000000100)) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x8000, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x40000009}) 18:49:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x3e00, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1478.743427] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1478.743427] program syz-executor.6 not setting count and/or reply_len properly [ 1478.750968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.751748] loop3: detected capacity change from 0 to 4 [ 1478.755285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.774538] FAULT_INJECTION: forcing a failure. [ 1478.774538] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.777638] CPU: 0 PID: 8879 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1478.778678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.779728] Call Trace: [ 1478.780072] [ 1478.780385] dump_stack_lvl+0xc1/0xf0 [ 1478.780911] should_fail_ex+0x4b4/0x5b0 [ 1478.781470] ? __es_insert_extent+0x3a9/0x12f0 [ 1478.782089] should_failslab+0x9/0x20 [ 1478.782610] kmem_cache_alloc+0x5a/0x390 [ 1478.783198] __es_insert_extent+0x3a9/0x12f0 [ 1478.783844] ext4_es_insert_extent+0x2db/0xb30 [ 1478.784497] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1478.785219] ? __pfx_down_write+0x10/0x10 [ 1478.785879] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1478.786522] ? ext4_es_lookup_extent+0x48c/0xad0 [ 1478.787197] ext4_map_blocks+0xa0d/0x19e0 [ 1478.787799] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1478.788441] ? __pfx___up_read+0x10/0x10 [ 1478.789009] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1478.789683] ext4_getblk+0x62d/0x860 [ 1478.790218] ? __pfx_ext4_getblk+0x10/0x10 [ 1478.790817] ? __brelse+0x88/0xa0 [ 1478.791328] ? __ext4_new_inode+0x150/0x5410 [ 1478.791960] ext4_bread+0x2e/0x1a0 [ 1478.792473] ext4_append+0x225/0x540 [ 1478.793014] ? __pfx_ext4_append+0x10/0x10 [ 1478.793610] ? avc_has_perm+0xfe/0x1a0 [ 1478.794169] ext4_init_new_dir+0x262/0x4c0 [ 1478.794761] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1478.795449] ext4_mkdir+0x3d3/0xb20 [ 1478.795966] ? __pfx_ext4_mkdir+0x10/0x10 [ 1478.796525] ? inode_permission.part.0+0xb5/0x520 [ 1478.797219] vfs_mkdir+0x24b/0x470 [ 1478.797748] do_mkdirat+0x163/0x2d0 [ 1478.798246] ? __pfx_do_mkdirat+0x10/0x10 [ 1478.798786] ? getname_flags.part.0+0x1dd/0x4f0 [ 1478.799405] __x64_sys_mkdir+0xf6/0x150 [ 1478.799919] do_syscall_64+0x3f/0x90 [ 1478.800413] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1478.801055] RIP: 0033:0x7fcb02882c27 [ 1478.801529] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.803645] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1478.804557] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb02882c27 [ 1478.805392] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 1478.806235] RBP: 00007fcaffdf9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1478.807090] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1478.807930] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1478.808907] 18:49:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x400002) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7f, 0x6, 0x9, 0x4, 0x0, 0x9, 0x8829, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x20, 0x3}, 0x4200e, 0xfffffffffffffff8, 0x76, 0x6, 0x2, 0x1ff, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, r1, 0x3) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup(r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffe, 0x3d, 0xe2, @buffer={0x0, 0xd2, &(0x7f0000000200)=""/210}, &(0x7f0000000140)="b5f6a15ec4d91b9c1353231e553d2de8e50422132070f7cd36858fce4e6008a9d64e3ee2ccda584c70334ea8ada947a293b60a2d7684eae1256554c74a", &(0x7f0000000300), 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file1', [{0x20, '@:{\xda\xf7\xdf7@['}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '1d\x14uA\xea\xd9MR\xfe\x1dm\x97\xb4\x16n\xc9a5\xc3\xab9\x12\xb5\x1d\xc2\xf8\xa0\xd3u}\xd1\xf3%\xbd\xc1/sg'}]}, 0x4d) [ 1478.829320] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1478.864428] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1478.864428] program syz-executor.1 not setting count and/or reply_len properly [ 1479.324591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.326191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:49:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0xfe0f, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) 18:49:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\xeaR\xfd\xba\xbf\x85@:{'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}, {0x20, '[#%\\'}, {0x20, '-\xd6'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}]}, 0x4b) 18:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 68) 18:49:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @loopback, 0x0}, &(0x7f0000000100)=0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280920a8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:49:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) 18:49:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/-g#\x00'}]}, 0x2f) [ 1493.799126] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1493.799126] program syz-executor.6 not setting count and/or reply_len properly [ 1493.817143] loop3: detected capacity change from 0 to 4 18:49:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r1, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:49:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/.g#\x00'}]}, 0x2f) [ 1493.856578] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1493.856578] program syz-executor.1 not setting count and/or reply_len properly 18:49:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x57, 0x4, @scatter={0x5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/96, 0x60}]}, &(0x7f0000000400)="de1ec800db153ff26f9fe66728fec5d0088ce2f88389932570fb2209f2c6fb55b9e666d0c5663414ed1b0f9e28cd0e73b87efcfede0eb7d360ff23599be933a898b94f5bd3c907f5e0fe476b4242eb06f7339e1ba78451", &(0x7f0000000480)=""/232, 0x401, 0x27, 0xffffffffffffffff, &(0x7f0000000580)}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x14a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:49:30 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xfff8, 0xffffffffffffffff, &(0x7f0000000340)="db342324a2ab0e4b590f", 0xa, 0x9, 0x0, 0x3}, &(0x7f00000003c0)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 69) 18:49:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x6, 0x0, [0x7, 0x3ff, 0x3, 0x7fffffff, 0x100], [0xc4fc, 0x2b42, 0xffffffff, 0x3, 0x1, 0xefc2, 0x9, 0x400, 0x8, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0xfffffffffffff2f0, 0x6, 0x0, 0x552, 0x9, 0x100, 0x7fff, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0x9, 0x8, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0x9255, 0xfff, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x19a, 0x7, 0x3, 0x59d, 0x4, 0x401, 0xfffffffffffff801, 0x58, 0x7, 0x6a6aa4cb, 0x401, 0x101, 0x8, 0x2, 0x2, 0x4, 0x0, 0xfffffffffffffff8, 0x80000001, 0x1000, 0x6, 0x0, 0x3, 0x720000, 0x100000000, 0x0, 0x1, 0x8, 0x6, 0x101, 0x5, 0x6, 0xa28d, 0x6, 0x5, 0x8, 0x3, 0x2, 0xdc, 0x0, 0x6, 0x80, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x7ff, 0x0, 0x3, 0xfb2, 0x4, 0xfd0, 0x1, 0xf1, 0x3, 0x80, 0x3ff, 0x1ff, 0x2, 0x4, 0x4, 0xfffffffffffffff8, 0x7, 0x9, 0x132c, 0x5, 0x418, 0x6, 0x7, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2, 0x7fff, 0xb5, 0x9ca0, 0x7fffffff, 0x9]}) 18:49:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x80000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1493.986732] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1493.986732] program syz-executor.6 not setting count and/or reply_len properly 18:49:30 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) [ 1494.151875] loop3: detected capacity change from 0 to 4 [ 1494.224937] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1494.224937] program syz-executor.1 not setting count and/or reply_len properly 18:49:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0xe0ffff, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/0g#\x00'}]}, 0x2f) 18:49:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 18:49:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x1, {{0x2, 0x0, @private=0xa010100}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 18:49:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 70) 18:49:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x40002) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000140)="037d16a6909cbf61f4ea", 0xa, 0xeee6, 0x0, 0x0, r5}]) close_range(r4, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x6100}, {r0, 0x8}, {r4, 0x20}, {r0, 0x1000}, {r0, 0x8ad63a79cc61e661}, {r0}, {r0, 0x1604}], 0x7, &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000100)={[0xffffffff]}, 0x8) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:49:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_setup(0x61, &(0x7f0000000300)) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000300)=0x6) [ 1509.425644] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1509.425644] program syz-executor.6 not setting count and/or reply_len properly [ 1509.434398] loop3: detected capacity change from 0 to 4 [ 1509.457514] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1509.457514] program syz-executor.1 not setting count and/or reply_len properly 18:49:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/Xg#\x00'}]}, 0x2f) 18:49:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x2f) 18:49:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty}, &(0x7f0000000040)=0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) 18:49:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 71) 18:49:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:45 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x800, 0x2, 0xb7, 0x1000}, {0x1, 0x4, 0x4, 0x5636}, {0x3, 0x6, 0x40, 0x7}]}) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) pread64(r1, &(0x7f0000000180)=""/170, 0xaa, 0x2) [ 1509.738769] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1509.738769] program syz-executor.1 not setting count and/or reply_len properly [ 1509.749891] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1509.749891] program syz-executor.6 not setting count and/or reply_len properly [ 1509.799577] loop3: detected capacity change from 0 to 4 [ 1509.814499] FAULT_INJECTION: forcing a failure. [ 1509.814499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.816025] CPU: 0 PID: 8970 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1509.817020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.818014] Call Trace: [ 1509.818337] [ 1509.818625] dump_stack_lvl+0xc1/0xf0 [ 1509.819125] should_fail_ex+0x4b4/0x5b0 [ 1509.819658] _copy_from_user+0x30/0xf0 [ 1509.820172] memdup_user+0x72/0xd0 [ 1509.820637] strndup_user+0x78/0xe0 [ 1509.821113] __x64_sys_mount+0x137/0x310 [ 1509.821643] ? __pfx___x64_sys_mount+0x10/0x10 [ 1509.822237] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1509.822908] do_syscall_64+0x3f/0x90 [ 1509.823416] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1509.824059] RIP: 0033:0x7fcb0288504a [ 1509.824526] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.826813] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1509.827733] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1509.828583] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1509.829443] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1509.830347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1509.831198] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1509.832081] 18:49:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 72) 18:49:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/cg#\x00'}]}, 0x2f) 18:49:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x1800000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x2f) 18:49:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe219}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xabc2530}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbdde67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xde8bf98}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cff352e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ccd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d7e9426}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41db296a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436eb15}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a94978}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e496088}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b66c834}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b328e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x58040) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000885}, 0x80) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r7, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202f6465762f736723000a8bf01c2daf9c40af95783278a953c4686557c943043928bf4d1689ad2f86a6ec6ef2388e8cfa384471a7cf05ca941843a019fd79d8f05069343e"], 0x2f) [ 1510.088881] loop3: detected capacity change from 0 to 4 [ 1510.090164] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1510.090164] program syz-executor.6 not setting count and/or reply_len properly [ 1510.108006] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1510.137534] sg_write: data in/out 589796/247 bytes for SCSI command 0x34-- guessing data in; [ 1510.137534] program syz-executor.2 not setting count and/or reply_len properly [ 1510.156782] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1510.156782] program syz-executor.2 not setting count and/or reply_len properly [ 1510.222352] sg_write: data in/out 589796/247 bytes for SCSI command 0x34-- guessing data in; [ 1510.222352] program syz-executor.2 not setting count and/or reply_len properly [ 1510.230801] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1510.230801] program syz-executor.2 not setting count and/or reply_len properly 18:49:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/dg#\x00'}]}, 0x2f) 18:49:58 executing program 5: getpid() r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:49:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2d) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x0, 0x9}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x1, 0x5, 0x2}) 18:49:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x2f) 18:49:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 73) 18:49:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x18a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x4, @rand_addr=0x64010100}}, {{0x2, 0x105, @private}}}, 0x108) [ 1522.509232] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1522.509232] program syz-executor.6 not setting count and/or reply_len properly [ 1522.526855] loop3: detected capacity change from 0 to 4 [ 1522.529719] FAULT_INJECTION: forcing a failure. [ 1522.529719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.530476] CPU: 0 PID: 9005 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1522.531025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1522.531576] Call Trace: [ 1522.531754] [ 1522.531915] dump_stack_lvl+0xc1/0xf0 [ 1522.532182] should_fail_ex+0x4b4/0x5b0 [ 1522.532472] _copy_from_user+0x30/0xf0 [ 1522.532755] memdup_user+0x72/0xd0 [ 1522.533011] strndup_user+0x78/0xe0 [ 1522.533270] __x64_sys_mount+0x180/0x310 [ 1522.533565] ? __pfx___x64_sys_mount+0x10/0x10 [ 1522.533886] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1522.534248] do_syscall_64+0x3f/0x90 [ 1522.534508] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1522.534867] RIP: 0033:0x7fcb0288504a [ 1522.535120] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1522.536326] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1522.536830] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1522.537302] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1522.537776] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1522.537788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1522.537798] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1522.537821] 18:49:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/ig#\x00'}]}, 0x2f) 18:49:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 74) 18:49:58 executing program 7: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1745], 0x6d1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="29fb036ab74d956028790000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800) 18:49:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/lg#\x00'}]}, 0x2f) 18:49:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x99+*+-,#$\'\x00'}, &(0x7f0000000080)='&+!/*\x00', 0x6, 0x3) r1 = epoll_create(0xa4) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x3) 18:49:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:49:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:49:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r3 = fsmount(r1, 0x1, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000080)=0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x2f) 18:49:58 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1522.836835] loop3: detected capacity change from 0 to 4 [ 1522.843980] EXT4-fs (loop3): Invalid log block size: 33554433 18:49:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xffff, 0x2, 0x0, 'queue0\x00', 0x7}) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1522.894534] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1522.894534] program syz-executor.6 not setting count and/or reply_len properly 18:49:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x88, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) 18:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 75) 18:50:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:50:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r2 = fsmount(r1, 0x1, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r3, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)=0x1) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x2f) 18:50:10 executing program 2: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x7ff, 0x40) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:50:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:50:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x20}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="7006e8b0f4236fe4ea2b1bee1c18f3aa5541931cb3e1f964a0faacf88db07d2219ab3dbaaa83b0f6e8be7894f13552aaeb88cd136fb04f717ecf30502c772c624dc2b06336c20fc7d10aaeaa4e407be454a18d2aa041143e7a36b7b6f2ff06e780c5af930c3b278a4c0847265350c2fa18ddacae68264e978787ab5eadcfd4b3f4d36a83c80432adbb3451e57bde55881fd0a9f0083572f8b62b534fe2ec0437dea6aa9fbf0b", 0xa6}], 0x1, &(0x7f0000000280)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x32, 0x8, 0x1, 0x0, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}}}], 0x58}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="78498c916d3e3e4c44117af23ba8603a7afb40df59f5acf68964b69954cd272c81e837e4399ed75da22132eb766112c1c0ec1bcac40263b1213c4eaf59b894b983e157203494694675a2acd96664a9e9f02a7842721768b90a8751ae38dde338a077c95c187e0f84e8acd7ea65e4e96d8d07c0e4e4af405e1d42973d1f09b6d61427c0d6ab9f1e964db6f7cfbd2dd397bb1dd76b723db53359364150cdfdf56d3129b3b7e9b5b8c725496a3140321c3f263961f7fe77fad72e1035cda9641ee04e94068875a6aabb08a8d02603b9a34241aff8e68b9ef61c727a5d", 0xdb}, {&(0x7f0000000400)="22fa2c209f9049c9bd95604cf54014524f76a5fd792769fc86adf5c71918ce58e19738e5706816a2b2d3743b8adb950adf9c1df6b9166f0a08474e800027477d683be2af3992145888bb6d5570cbb3535199a1de40574c", 0x57}, {&(0x7f0000000480)="d43e1d478380b0d85dc7493dd6e82be712d2683ce719ea22550cd7d1767feaec13dd9487511451386fa83fc9110183fe0a630c33f32074b70ebf90d13f7458b32cc5cf9617d96bdb09d81bd064d5460988052837c38e3e7c18", 0x59}, {&(0x7f0000000500)="be5b94410631a122ebac49eb8a657219ff8ff0972cbed63cfdc68aa5eb54435ff5a3603c781b3128aad4245292d125eac512e7ab279f8f04fefa91960db0e1c838d9dd6ccacf79dbd4ae07e4bd25049a73b63f3830b1f59361dc49220114a16440dcd6f9bdea98fe873ba59f389f1556d41764adfc8c4fa0c42d06b16cecd944d2996bb70521f6bf2d7a86bdf2a5168ac05f123db947372b7b965f543f1a8de03db417932f5d49d34a2fbdd11773f7191a4c9f27d1a884440a611eb51af2d512914715eb9b24", 0xc6}, {&(0x7f00000006c0)="6af5626be29e440fb5cb2efd8ecfd02fb14fcb34b08798bebdf80c62c0fd60011b4cf5a045a3ca6f16d2fad45fb046f72a9a2bc824a2e0d3c7876845d6b481f05848c25d70dbcc5b28a209e4b20a078694953a1503a8e5306748fb1f7e6c0e19e1fe2b1db4b05bdd052848e95005970c9342b15953b50a9a057105edbfddae0eb4d0a6bdcd868c6757702a22", 0x8c}, {&(0x7f0000000780)="08a845c301959177d729e9986e7201c39057497b4cb4cc8a1af9a4fb42281bd831a47bccd9999714cdceef92bd315af805e20d54457274", 0x37}], 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc0}}], 0x2, 0x4000) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000100)={0x0, 0xfffffffffffffffb}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x30800, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x2, 0x7, 0x901, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x850) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000a00)="9dafc9ff4ef7a8d6c7ad9260e49782955e52280bf58278990c9032b46e750200c3effd2e45fbc23fe8df458bffb776b3c81981aa3eefaf3efb674e83ff4081e4c16c33a26f9c13a3b2a633f2963ccb55efa0863e8497b994e2cb2b081f8d2e617c8e524cd10eae5479f344715ff5caf386b45078a242e2d2e7873b06be") pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x94600000000) io_setup(0x1f, &(0x7f0000000640)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r6, 0xffffffffffffffff, 0x0) sendfile(r3, r6, &(0x7f0000000980)=0xbdea, 0x3f) 18:50:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/og#\x00'}]}, 0x2f) 18:50:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x5000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1534.750787] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1534.750787] program syz-executor.6 not setting count and/or reply_len properly 18:50:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r3, 0x0) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) [ 1534.760656] loop3: detected capacity change from 0 to 4 [ 1534.769368] FAULT_INJECTION: forcing a failure. [ 1534.769368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.769511] CPU: 0 PID: 9059 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1534.769529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.769539] Call Trace: [ 1534.769543] [ 1534.769549] dump_stack_lvl+0xc1/0xf0 [ 1534.769575] should_fail_ex+0x4b4/0x5b0 [ 1534.769605] _copy_from_user+0x30/0xf0 [ 1534.769634] memdup_user+0x72/0xd0 [ 1534.769655] strndup_user+0x78/0xe0 [ 1534.769677] __x64_sys_mount+0x180/0x310 [ 1534.769706] ? __pfx___x64_sys_mount+0x10/0x10 [ 1534.769735] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1534.769758] do_syscall_64+0x3f/0x90 [ 1534.769779] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1534.769803] RIP: 0033:0x7fcb0288504a [ 1534.769815] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.769831] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1534.769848] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1534.769859] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1534.769869] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1534.769880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1534.769890] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1534.769913] 18:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 76) 18:50:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r2 = fsmount(r1, 0x1, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r3, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)=0x1) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x2f) 18:50:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/pg#\x00'}]}, 0x2f) 18:50:11 executing program 7: prctl$PR_SET_FPEXC(0xc, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:50:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x6000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:11 executing program 2: read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/222, 0xde) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d202478a70e8dcc42641826272d5b282c202f645076c4b86723000a"], 0x2f) write(r0, &(0x7f0000000040)="6d74ca94b7d9076bcd3321332e65f0cf1846046171dbf8f310ac2ebfa82c2c4a4096bb404653d0115f686d70156ad1ca448d4808a66ae5a5736720aa0c1bf6cc78874d11d70ba87a6aadc19212a12e4cf4d70bd6", 0x54) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x880, 0x80) [ 1535.036527] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1535.036527] program syz-executor.6 not setting count and/or reply_len properly [ 1535.043228] loop3: detected capacity change from 0 to 4 [ 1535.058638] FAULT_INJECTION: forcing a failure. [ 1535.058638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.059399] CPU: 0 PID: 9079 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1535.059988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.060485] Call Trace: [ 1535.060671] [ 1535.060834] dump_stack_lvl+0xc1/0xf0 [ 1535.061095] should_fail_ex+0x4b4/0x5b0 [ 1535.061365] _copy_from_user+0x30/0xf0 [ 1535.061633] copy_mount_options+0x76/0x180 [ 1535.061911] __x64_sys_mount+0x1ac/0x310 [ 1535.062183] ? __pfx___x64_sys_mount+0x10/0x10 [ 1535.062486] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1535.062823] do_syscall_64+0x3f/0x90 [ 1535.063070] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1535.063431] RIP: 0033:0x7fcb0288504a [ 1535.063689] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.064886] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1535.065354] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1535.065788] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1535.066227] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1535.066696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1535.067137] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1535.067623] [ 1535.108895] EXT4-fs (loop3): Invalid log block size: 33554433 18:50:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x7000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000380)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x50040, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000003c0)) move_mount(r2, &(0x7f0000000300)='./file1\x00', r1, &(0x7f0000000340)='./file1\x00', 0x12) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, 0x3, 0x1, 0xa0fc1aae1aeb84f7, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x4}, [@generic="546bd9248293e11351b06d1bc41b388e301db534508e95a9e8d66cabfb331f28fe8d37dc6b809836953d2100098d06a0df4fe26802d74a17085d8941db670f3df6b5feab853cf1096d410d7cd73fc961416b2e4252e4b8844e37dd890fdd4c2376ecc545bf8da0dca26bf0f74b5a0596c38ba3bcba570162c1ed38bcebab27b3a64c3fa8b6a157d654b5c4736604f96af9eb91b3884b261fa1e4151cbf9e7c222039e97b6c4a6e50df7e1f377e1976a02cb5abebca10a0fc677fc9753efe9d228d0c3308d0b88f5975d1397157", @typed={0x4, 0x57}, @nested={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @uid}]}, @generic]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x40085) 18:50:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/ug#\x00'}]}, 0x2f) 18:50:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 77) 18:50:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:50:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) r2 = fsmount(r1, 0x1, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r3, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)=0x1) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x2f) 18:50:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '\x01\x00\x00\x00\x00\b\x00\x00\x00'}]}, 0x2f) 18:50:24 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000040)={0x1}) lseek(r2, 0x80, 0x0) [ 1548.160205] loop3: detected capacity change from 0 to 4 [ 1548.166795] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1548.166795] program syz-executor.6 not setting count and/or reply_len properly [ 1548.199826] EXT4-fs (loop3): Invalid log block size: 33554433 18:50:37 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x3, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x0, @broadcast}}}, 0x108) 18:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 78) 18:50:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 18:50:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/xg#\x00'}]}, 0x2f) 18:50:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) fsmount(r1, 0x1, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r3, &(0x7f00000002c0)='./file1\x00', 0x40100, 0x110) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x2f) 18:50:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x10000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:37 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:50:37 executing program 2: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1561.566547] loop3: detected capacity change from 0 to 4 [ 1561.576550] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1561.576550] program syz-executor.6 not setting count and/or reply_len properly [ 1561.578854] EXT4-fs (loop3): Invalid log block size: 33554433 18:50:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:50:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) [ 1561.630027] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1561.630027] program syz-executor.1 not setting count and/or reply_len properly 18:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 79) 18:50:37 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac1e0101ac14141ad853e4fe98ba56b9f3771e2eba990100000003000000ffffffffac1414bbe00000010c58a8bd01cb0125a773b1a59ae3230ca4f16ce7df86f6b7e7799fd39b11db02f3481587f16bb06b1340dacd7e0500000099a3e1666a71a70a6c9d25212708685e8cc6d6c77a0642e9df5dbc1d80ed1bed49a7d4280108d1783ff39755f56983a930fef6251eaa29d5bb695ee515914864939a90df9a379fc929e2bb36eeec7ee5c0ce10ec29990d9bb7ffa67fb23f9a7976055063de9e52078d8dbdbedb1436984923d4f376553befec3656051b2612644ce182c04c8ae4936aa7e7"], 0x1c) 18:50:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202f0ac9aba4736723000a"], 0x2f) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x40000) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='/usr/sbin/cupsd\x00', 0x10, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'netpci0\x00', {}, 0x2}) 18:50:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x3e000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/s\n#\x00'}]}, 0x2f) 18:50:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) fsmount(r1, 0x1, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x2f) 18:50:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1561.839602] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1561.839602] program syz-executor.2 not setting count and/or reply_len properly [ 1561.849836] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1561.849836] program syz-executor.2 not setting count and/or reply_len properly [ 1561.858361] loop3: detected capacity change from 0 to 4 [ 1561.870869] FAULT_INJECTION: forcing a failure. [ 1561.870869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.871725] CPU: 1 PID: 9151 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1561.872536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1561.873279] Call Trace: [ 1561.873465] [ 1561.873635] dump_stack_lvl+0xc1/0xf0 [ 1561.873922] should_fail_ex+0x4b4/0x5b0 [ 1561.874224] strncpy_from_user+0x38/0x340 [ 1561.874530] getname_flags.part.0+0x95/0x4f0 [ 1561.874869] getname_flags+0x9e/0xf0 [ 1561.875131] user_path_at_empty+0x2f/0x70 [ 1561.875434] __x64_sys_mount+0x1ed/0x310 [ 1561.875728] ? __pfx___x64_sys_mount+0x10/0x10 [ 1561.876090] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1561.876476] do_syscall_64+0x3f/0x90 [ 1561.876739] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1561.877120] RIP: 0033:0x7fcb0288504a [ 1561.877378] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.878645] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1561.879148] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1561.879643] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1561.880150] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1561.880647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1561.881146] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1561.881651] 18:50:38 executing program 5: pread64(0xffffffffffffffff, &(0x7f0000000100)=""/89, 0x59, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:50:38 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1b}}, './file0\x00'}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 1561.890509] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1561.890509] program syz-executor.6 not setting count and/or reply_len properly 18:50:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0xce, 0xc6, 0x7, "2aaf3670e582fed3d77f1c984583f95e0713b55be658f340ab21a4ce129a5b89d95244152625a69b904ea79652a3919b53694d49e1d7e7ac085dc4a77307029a7350a1e77d2ad913fb2beaa18c326abdc29935e4f471d5dcff6172eb676aa9469fa67b84559cd8633f608990c81160095942b72cd182ef768c9994d4fb1f037e62e53f2aa752434d868147a97707fd4b6e801374fef78b15699937b2ab75837c1ef2b31acf1e9f2b63b76c4e3d782743140dfcedeb63ec4157e28916079f6a619f07e9f6ef1babe19df6f475808d"}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1561.927080] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1561.927080] program syz-executor.1 not setting count and/or reply_len properly 18:50:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 80) 18:50:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/s%#\x00'}]}, 0x2f) [ 1562.098810] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1562.107799] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1562.132550] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1562.132550] program syz-executor.6 not setting count and/or reply_len properly [ 1562.151550] loop3: detected capacity change from 0 to 4 [ 1562.166642] FAULT_INJECTION: forcing a failure. [ 1562.166642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.167541] CPU: 1 PID: 9170 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1562.168119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.168689] Call Trace: [ 1562.168876] [ 1562.169045] dump_stack_lvl+0xc1/0xf0 [ 1562.169327] should_fail_ex+0x4b4/0x5b0 [ 1562.169626] strncpy_from_user+0x38/0x340 [ 1562.169933] getname_flags.part.0+0x95/0x4f0 [ 1562.170260] getname_flags+0x9e/0xf0 [ 1562.170533] user_path_at_empty+0x2f/0x70 [ 1562.170833] __x64_sys_mount+0x1ed/0x310 [ 1562.171136] ? __pfx___x64_sys_mount+0x10/0x10 [ 1562.171462] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1562.171843] do_syscall_64+0x3f/0x90 [ 1562.172110] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1562.172486] RIP: 0033:0x7fcb0288504a [ 1562.172754] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.173924] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1562.174457] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1562.174949] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1562.175441] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1562.175935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1562.176444] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1562.176956] 18:50:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 81) 18:50:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x02'}]}, 0x2f) 18:50:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r1, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x2) 18:50:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0xfe0f0000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) fsmount(r1, 0x1, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x2f) 18:50:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x9, 0x40, 0x2, 0x0, 0x1ff80000, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0xffffffff}, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x10001, 0xf2f, 0x0, 0x6, 0x0, 0xfffffffffffff372}, r1, 0x1, r0, 0x9) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:50:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsmount(r1, 0x0, 0x8a) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 18:50:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xf1, 0x2, 0x9, "2760ad6a7f2f9c2b0c4bf1d0165f340e70b6802dcfab4390f612e877cf2ce5baa8361e5d017f83bc985e869a339ebb268f6ffdfb92acfde54d1bce4ef9c10cf6af1482934dc65e03e31ce34482a60c1cabe9f8798a52ffd43620656396a5e9e709b3f69f17f36d5ee6aefbe2e10230382816b5e4b07f7877a4a212a9581f67db20a0644210a9246ad8e4439e99ca798238bcff7cea322f1a38a8c48e18a6635a6f48b7e0bde4b80ec2a696b8164a74be12898ddc0aa010021474145e44a19f2e62baf5e48bb386c306f472f381155454a4ad3a8e1467a626999afc9bea851833d7f023e34755538c664d36b9bf239e9e33"}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) [ 1577.108494] loop3: detected capacity change from 0 to 4 [ 1577.119595] EXT4-fs (loop3): Invalid log block size: 33554433 18:50:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 82) [ 1577.153468] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1577.153468] program syz-executor.6 not setting count and/or reply_len properly [ 1577.155995] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1577.168153] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1577.185475] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1577.185475] program syz-executor.1 not setting count and/or reply_len properly 18:50:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x03'}]}, 0x2f) 18:50:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000040)=""/161, 0xa1, 0xffffffffffffffff) 18:50:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r1, 0xffffffffffffffff, 0x0) 18:50:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0xffffe000, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:50:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xfffffffa, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4) 18:50:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_IO(r1, 0x2285, &(0x7f00000007c0)={0x0, 0xfffffffffffffffe, 0x1000, 0x0, @scatter={0x9, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/246, 0xf6}]}, &(0x7f0000001040)="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", &(0x7f0000000740)=""/59, 0x5, 0x33, 0x0, &(0x7f0000000780)}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7f, 0x24440) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x125) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x40, 0x3f, 0x8, 0x13, 0x0, 0x11, 0xe0092, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={&(0x7f0000000080), 0x409a035fe6155eee}, 0x404, 0x0, 0xfff, 0x4, 0x0, 0x4, 0x4, 0x0, 0xffffffff, 0x0, 0x406}, r3, 0x6, 0xffffffffffffffff, 0x8) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d2024272d254328af5b2726272d5b282c202f6465762f736723000aa9a0aa2ba5853373999175a1cb9ec853735208989cccdcb891487e"], 0x2f) 18:50:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) fsmount(r1, 0x1, 0xa) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x2f) [ 1577.344868] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1577.344868] program syz-executor.6 not setting count and/or reply_len properly [ 1577.355507] loop3: detected capacity change from 0 to 4 [ 1577.362379] FAULT_INJECTION: forcing a failure. [ 1577.362379] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.363831] CPU: 0 PID: 9204 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1577.364881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.365929] Call Trace: [ 1577.366275] [ 1577.366590] dump_stack_lvl+0xc1/0xf0 [ 1577.367118] should_fail_ex+0x4b4/0x5b0 [ 1577.367684] should_failslab+0x9/0x20 [ 1577.368238] __kmem_cache_alloc_node+0x5b/0x310 [ 1577.368944] ? ext4_init_fs_context+0x41/0xd0 [ 1577.369568] kmalloc_trace+0x26/0xc0 [ 1577.370089] ext4_init_fs_context+0x41/0xd0 [ 1577.370671] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 1577.371341] alloc_fs_context+0x571/0x9e0 [ 1577.371929] path_mount+0xa6a/0x1e40 [ 1577.372470] ? kasan_quarantine_put+0x81/0x1d0 [ 1577.373123] ? __pfx_path_mount+0x10/0x10 [ 1577.373729] ? putname+0x102/0x140 [ 1577.374257] ? kmem_cache_free+0xff/0x4a0 [ 1577.374873] ? putname+0x102/0x140 [ 1577.375394] __x64_sys_mount+0x286/0x310 [ 1577.375999] ? __pfx___x64_sys_mount+0x10/0x10 [ 1577.376719] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1577.377493] do_syscall_64+0x3f/0x90 [ 1577.378040] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1577.378767] RIP: 0033:0x7fcb0288504a [ 1577.379316] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.381801] RSP: 002b:00007fcaffdf8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1577.382863] RAX: ffffffffffffffda RBX: 0000000020000380 RCX: 00007fcb0288504a [ 1577.383841] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcaffdf9000 [ 1577.384819] RBP: 00007fcaffdf9040 R08: 00007fcaffdf9040 R09: 0000000020000000 [ 1577.385793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1577.386768] R13: 0000000020000100 R14: 00007fcaffdf9000 R15: 0000000020012c00 [ 1577.387801] [ 1577.445115] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1577.445115] program syz-executor.2 not setting count and/or reply_len properly [ 1577.460055] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1577.460055] program syz-executor.2 not setting count and/or reply_len properly [ 1577.477900] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1577.477900] program syz-executor.1 not setting count and/or reply_len properly 18:51:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x125) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x2f) 18:51:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x04'}]}, 0x2f) 18:51:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1000000000000000, 0x60003) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x00'}]}, 0x2f) 18:51:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) 18:51:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x20) 18:51:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 83) 18:51:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:51:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in=@local, 0x4e23, 0x8001, 0x4e20, 0x80, 0xa, 0x0, 0x20, 0x32, r3, r4}, {0x8, 0x1, 0x0, 0x9, 0x3, 0x20, 0xfb6, 0x2}, {0xff, 0x2, 0x8374, 0x100}, 0x6, 0x6e6bb1, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x3, 0x2, 0x51, 0x7, 0x9}}, 0xe8) [ 1590.548824] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1590.548824] program syz-executor.6 not setting count and/or reply_len properly [ 1590.551016] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1590.551016] program syz-executor.1 not setting count and/or reply_len properly [ 1590.558080] loop3: detected capacity change from 0 to 4 [ 1590.573968] EXT4-fs (loop3): Invalid log block size: 33554433 18:51:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) 18:51:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file1\x00', r1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) r2 = dup2(r0, r0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=""/51) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xbe, 0xff, @scatter={0x2, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/189, 0xbd}]}, &(0x7f0000000840)="bd6f45579f1e99136fc4ba3644eb588078a833f53c1a9f1bfb4a89fafc1ec5cfc4e7fd203b6f34f958242448f3050e1d1ff18f828cfc3f70f3a4ca901ad82b6960bab1799d65fee0a84ede09ad126e25f0f13af907e92c9545d81105d44858c51dae9131b50cf260b22c9e3646c559643a7d54a6d4ee16c9f006006b4b1695ef887ee314bf2aab47b93355614f20438ee29baaceeaf063ade9664e79773a31b6894a6f3bcccd6b44d3f50afaa02788b7f8138b594cc5dd1caaeb8f621b27", &(0x7f0000002040)=""/4096, 0x34, 0x6, 0x0, &(0x7f0000000900)}) io_setup(0x1f, &(0x7f0000000640)=0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x2f) 18:51:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2) io_setup(0x1f, &(0x7f0000000640)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86", 0xa3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) 18:51:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x5a23, &(0x7f0000000180)={0x0, 0xedf7, 0x10, 0x1, 0x38f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) 18:51:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000201000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) (fail_nth: 84) 18:51:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@:{@[+!(}'}, {0x20, '$\'-%C(\xaf[\'&\'-[(,'}, {0x20, '/dev/sg#\x05'}]}, 0x2f) 18:51:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x103001) write$binfmt_aout(r1, &(0x7f0000000000)={{}, "2a116f1626f5d60ccf", ['\x00']}, 0x129) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c653020403a7b405b2b21287d20b107da7024272d254328af5b2726272d5b28d23cd42c202f6465762f736723000a"], 0x2f) 18:51:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xb94586e7fa3f0dfe, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x400, 0x3, &(0x7f0000000500)=[{&(0x7f0000000240)="4fbc5f10d779074421c86da83e4ead573d4ae4f1da8eaff76b61049b3a5e5422dbdad9616465f1b1fdebb6e52ee388648818aa8ef1c073c8e26f278507e1cc51aea814375a960e76d6f61b45c97e7fc43dff2591aa00ca2ff04c11946f93e3270ab101a3d1e3efe35eebe8513edc3df24d8a34253cd440a0e38a467a4b136f8948fb6955c93330052212d26c94044f85a7745847b433c1feb8c080568be13e1c343ae77abb976fcaaf84822a447c3dc57e87dee7f587d0d6dab1102b43c8859f0fa04263f36c71ce695d327fd303c2a0d0cdc8335d67797a4611f80fca4319887174e28da4a736af7cb4d5", 0xeb, 0x101}, {&(0x7f0000000340)="64e5e8fe76650acbfacd48183c5bcd4afa744f41ad15c96ba6fbc0918a317942a442f27b57a44bf51fb17bfb28ecb6549490d699b46ff8f664418152aa68f340fd7c9ac0ce29ee88512f4b524103956101b2c4c0b54829a880e250185f34dda9fa7c6d01e421feb9b8f32092c90f1a66cbab7008d1e2a9d6c8a3470eb97119d7b7b3bd0687d9ac41aae19973", 0x8c, 0x10000}, {&(0x7f0000000400)="65ec1659a9ffc48cf5886f01e77553644c566d5d9710f7ab726942b438c009b5953d8370966332dac87d450232da99d665c69fc7a1249ff87eb8f7050e335a9cde5ee881524b5dbe7c2efaf30698f36818511bb35e7262b3f67592573989c5f8ab67e0bca30c161ea9084fd118e2ff8e8f9f3a652bdee956e67fa34e5b65df937f435e14bee6f42e8582245384b9f82d155500006430435e1111977cfa7e2d977d997fac42b5cb646e528991c4d4a4d8f2c74798e47a878145603e8502e6fe76b18de4876df47146e16444cadf2a192d092c5992a6cd9fd5bf45b42302c08fc9", 0xe0, 0x4}], 0x42000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x2}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x25, 0x32, 0x67, 0x6d, 0x34]}}], [{@measure}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000040)={0x3, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}}, 0x108) [ 1590.723072] sg_write: data in/out 32685/5 bytes for SCSI command 0x0-- guessing data in; [ 1590.723072] program syz-executor.1 not setting count and/or reply_len properly [ 1590.724769] ------------[ cut here ]------------ [ 1590.725157] WARNING: CPU: 1 PID: 9244 at lib/iov_iter.c:644 _copy_from_iter+0x2f1/0x1320 [ 1590.725923] Modules linked in: [ 1590.726205] CPU: 1 PID: 9244 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1590.726869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1590.727521] RIP: 0010:_copy_from_iter+0x2f1/0x1320 [ 1590.727965] Code: 92 ff ff 89 c3 e9 1f ff ff ff e8 da c6 35 ff be 88 02 00 00 48 c7 c7 00 dc 9e 84 e8 99 00 5a ff e9 13 fe ff ff e8 bf c6 35 ff <0f> 0b 45 31 f6 e9 67 ff ff ff e8 b0 c6 35 ff 31 ff 89 ee e8 e7 c1 [ 1590.729594] RSP: 0018:ffff888043b3f608 EFLAGS: 00010216 [ 1590.730071] RAX: 0000000000000eaa RBX: 0000000000000000 RCX: ffffc900007ff000 [ 1590.730695] RDX: 0000000000040000 RSI: ffffffff82162c81 RDI: 0000000000000001 [ 1590.731281] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1590.731889] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 1590.732500] R13: ffffea000116a800 R14: 0000000000001000 R15: ffff888043b3f838 [ 1590.733113] FS: 00007fd1b6ad2700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1590.733766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.734227] CR2: 0000001b2c027000 CR3: 0000000015cee000 CR4: 0000000000350ee0 [ 1590.734821] Call Trace: [ 1590.735033] [ 1590.735223] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1590.735740] ? __pfx__copy_from_iter+0x10/0x10 [ 1590.736140] ? bio_add_pc_page+0xbc/0x100 [ 1590.736505] copy_page_from_iter+0xe3/0x180 [ 1590.736887] blk_rq_map_user_iov+0xb39/0x16c0 [ 1590.740793] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1590.741208] ? __mutex_lock+0x12a1/0x1a30 [ 1590.741554] blk_rq_map_user_io+0x1d1/0x200 [ 1590.741942] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1590.742340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1590.742778] ? tick_nohz_tick_stopped+0x11/0x50 [ 1590.743164] ? __irq_work_queue_local+0xab/0x2f0 [ 1590.743560] ? irq_work_queue+0x2d/0x80 [ 1590.743921] sg_common_write.constprop.0+0xd8d/0x15f0 [ 1590.744367] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 1590.744842] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1590.745269] sg_write.part.0+0x698/0xac0 [ 1590.745613] ? __pfx_sg_write.part.0+0x10/0x10 [ 1590.746026] ? __lock_acquire+0xc29/0x64f0 [ 1590.746390] ? finish_task_switch.isra.0+0x1fe/0x830 [ 1590.746832] ? inode_security+0x105/0x140 [ 1590.747181] ? avc_policy_seqno+0x9/0x20 [ 1590.747514] ? selinux_file_permission+0x96/0x510 [ 1590.747940] sg_write+0x8d/0xe0 [ 1590.748229] vfs_write+0x2b8/0xd40 [ 1590.748544] ? __pfx_sg_write+0x10/0x10 [ 1590.748909] ? __pfx_vfs_write+0x10/0x10 [ 1590.749305] ? __fget_files+0x270/0x480 [ 1590.749759] ? __fget_light+0xe5/0x280 [ 1590.750167] ksys_write+0x12b/0x260 [ 1590.750526] ? __pfx_ksys_write+0x10/0x10 [ 1590.750963] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1590.751475] do_syscall_64+0x3f/0x90 [ 1590.751869] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1590.752383] RIP: 0033:0x7fd1b955cb19 [ 1590.752772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.754466] RSP: 002b:00007fd1b6ad2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1590.755237] RAX: ffffffffffffffda RBX: 00007fd1b966ff60 RCX: 00007fd1b955cb19 [ 1590.755936] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000003 [ 1590.756633] RBP: 00007fd1b95b6f6d R08: 0000000000000000 R09: 0000000000000000 [ 1590.757286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.757860] R13: 00007ffd6230caaf R14: 00007fd1b6ad2300 R15: 0000000000022000 [ 1590.758430] [ 1590.758624] irq event stamp: 1839 [ 1590.758925] hardirqs last enabled at (1851): [] __up_console_sem+0x78/0x80 [ 1590.759591] hardirqs last disabled at (1860): [] __up_console_sem+0x5d/0x80 [ 1590.760275] softirqs last enabled at (1768): [] irq_exit_rcu+0x93/0xc0 [ 1590.760951] softirqs last disabled at (1763): [] irq_exit_rcu+0x93/0xc0 [ 1590.761593] ---[ end trace 0000000000000000 ]--- 18:51:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000600)="81", 0x1}]) [ 1590.875430] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x20-- guessing data in; [ 1590.875430] program syz-executor.6 not setting count and/or reply_len properly [ 1590.888552] loop3: detected capacity change from 0 to 4 [ 1590.895896] EXT4-fs (loop3): Invalid log block size: 33554433 [ 1590.913529] loop7: detected capacity change from 0 to 256 [ 1590.938862] loop7: detected capacity change from 0 to 256 VM DIAGNOSIS: 18:51:00 Registers: info registers vcpu 0 RAX=00000000005c0993 RBX=0000000000000000 RCX=ffffffff844d18be RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81287c55 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c69f8 R10=ffff88806ce34fc3 R11=0000000000000001 R12=ffffffff85d35c50 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844d284f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9da1556b0 CR3=000000001869a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff825092a5 RDI=ffffffff87f2ec00 RBP=ffffffff87f2ebc0 RSP=ffff888043b3ef68 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=ffffffff87f2ebc0 R14=0000000000000010 R15=ffffffff82509290 RIP=ffffffff825092fd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd1b6ad2700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c027000 CR3=0000000015cee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000