0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200080, 0x196) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1f, 0x1, 0x81, 0x14, 0x0, 0x7642, 0x25100, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x1, 0x8}, 0x800, 0x10, 0x8000, 0x0, 0x9, 0x2, 0x2, 0x0, 0x44000000, 0x0, 0x7fffffff}, 0x0, 0x4, r2, 0xb) syz_io_uring_setup(0xeb3, &(0x7f0000000380)={0x0, 0x3fcc, 0x8, 0x2, 0x85}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) fcntl$notify(r1, 0x402, 0x3c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x410840, 0x144) [ 668.170117] No source specified 23:41:09 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/196, 0xc4}], 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}, {@minixdf}]}) 23:41:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 23:41:09 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/196, 0xc4}], 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:09 executing program 2: r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x80000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) r1 = inotify_init() openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2300, 0x0) r2 = signalfd(r1, &(0x7f0000000180)={[0x101]}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16, 0x10, r2, 0x81b79000) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x1630009be) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x14000014) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) [ 668.607627] No source specified [ 668.621626] FAULT_INJECTION: forcing a failure. [ 668.621626] name failslab, interval 1, probability 0, space 0, times 0 [ 668.622887] CPU: 0 PID: 5853 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 668.623679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 668.624468] Call Trace: [ 668.624732] [ 668.624966] dump_stack_lvl+0x8f/0xb7 [ 668.625394] should_fail_ex.cold+0x5/0xa [ 668.625821] should_failslab+0x9/0x20 [ 668.626219] __kmem_cache_alloc_node+0x5b/0x400 [ 668.626707] ? p9_client_create+0xb3/0x1050 [ 668.627159] kmalloc_trace+0x26/0x60 [ 668.627546] p9_client_create+0xb3/0x1050 [ 668.627992] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 668.628506] ? __pfx_p9_client_create+0x10/0x10 [ 668.628985] ? lock_is_held_type+0xdb/0x130 [ 668.629419] ? lockdep_init_map_type+0x21e/0x7f0 [ 668.629913] ? __raw_spin_lock_init+0x3a/0x110 [ 668.630397] v9fs_session_init+0x1e1/0x1670 [ 668.630849] ? __kmem_cache_alloc_node+0x25b/0x400 [ 668.631352] ? __pfx_lock_release+0x10/0x10 [ 668.631806] ? __pfx_v9fs_session_init+0x10/0x10 [ 668.632275] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 668.632803] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 668.633343] ? lock_is_held_type+0xdb/0x130 [ 668.633796] v9fs_mount+0xbd/0xbd0 [ 668.634155] ? __pfx_v9fs_mount+0x10/0x10 [ 668.634581] ? cap_capable+0x1da/0x240 [ 668.634987] ? __pfx_v9fs_mount+0x10/0x10 [ 668.635401] legacy_get_tree+0x109/0x220 [ 668.635809] vfs_get_tree+0x92/0x300 [ 668.636175] path_mount+0x1314/0x1e30 [ 668.636553] ? kasan_quarantine_put+0x8f/0x1f0 [ 668.637001] ? __pfx_path_mount+0x10/0x10 [ 668.637424] ? putname+0x102/0x140 [ 668.637798] __x64_sys_mount+0x286/0x310 [ 668.638198] ? __pfx___x64_sys_mount+0x10/0x10 [ 668.638655] ? syscall_enter_from_user_mode+0x21/0x50 [ 668.639168] do_syscall_64+0x3f/0x90 [ 668.639549] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 668.640061] RIP: 0033:0x7f767b249b19 [ 668.640427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.642109] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 668.642820] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 668.643478] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 668.644135] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 668.644806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.645482] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 668.646168] [ 668.673060] audit: type=1400 audit(1672789269.470:13): avc: denied { watch_reads } for pid=5854 comm="syz-executor.2" path="/syzkaller-testdir295596255/syzkaller.uqOHs1/65" dev="sda" ino=15993 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 23:41:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:41:09 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8482, 0x80) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="93c33370d98eb2131bdd16e25d196de92e194584a89e7ae3a5b399bd1e2de44dec7b3c9a9672a460b2df19ccbcac05e979d2c24719d7bb7ea93a3dcdd5193810f3467b0eeb26ca3cb5cb2a6886af8ccd0de3159d84d89e052128c0fff5020037671b88d61ee0ddbed2a95346361936e31bb66debca1b47e2a12c09c99fad4870b76f27d664b0a12643", @ANYRES16=r1, @ANYBLOB="010000000000000000008800000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003a003300d080005c139a1e1f0000000000009890d38fb15b73c39174e3821906771d00"/58], 0x64}}, 0x0) 23:41:09 executing program 5: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x40400, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x6d, 0xff, 0x20, 0x80, 0x0, 0x8, 0x801, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x1, @perf_config_ext={0x4, 0x3}, 0x8441, 0x3d23, 0xb66, 0x5, 0xfff, 0x1, 0x400, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) r1 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x210}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) io_uring_enter(r4, 0x4e3b, 0xd2e5, 0x2, &(0x7f0000000080)={[0x4]}, 0x8) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, r1, 0x8000000) pipe2(&(0x7f0000000480), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x1ca, &(0x7f0000000440)=0x6c44256f, 0x0, 0x4) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000400)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/143, 0x8f}) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x12001, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000d80)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)="3d965171a516158e17ad267ba2e725be63bb4de59f26e3f5a2364cc8458cf476e53e599ea4b3f5aa4fe0d7a13e34ccb0aba48e5ce36dbb1a81116089c9dcf7b5819fd221d762448e70b31c57e2d84f9601955d8cf84f80", 0x57}, {&(0x7f0000000680)="04a3c9e8c0fdfbb815ed9062a1ace58b1cd321290cf2269288b4", 0x1a}, {&(0x7f00000006c0)="4ec654c64f04f175f6b3ce16f799bd083c9a83c75faaa2181846f6ba6e639801411799bada159e7ac4e65c813539f9bced39e7596b85056de96d17039e359dbf4597f1a5a49c59675a5b20699a0aae5745d35b18904ce08190c645ef00aa5b74b6d6d97c88e2520a5c73d7dc2d3af0c077ef5b7d17f6292c1c54264c261626f293e67c75311e8172dc56a0bf0a31c71428", 0x91}, {&(0x7f0000000780)="34a120eda880cde09858b3476bf63142fcb439ee1ab44c73e4124596b20cbe92a5f090ed2b", 0x25}, {0xfffffffffffffffc}, {&(0x7f00000007c0)="0e063692b3e60844979f7553fbcd8589d9ef8e102efb2a2b4e7638a3f56324686f5f565fa97bc9bc71281cd9df38c26c9abb58e696a2564219d9864494d47e3b28109e328dce97c42781b22997dd4151288badb02f879a0d697f3db1b16e7767db255512d479663f8d7a1e75b827dff925951604362d639a106c40c980d24d832af31ad461ac141e353b75a48208ff9f474f8b382fb89f10", 0x98}], 0x6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x410}, 0x0, 0x4800}, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) pwrite64(r7, &(0x7f0000000140)="e31fb94c632f837274d424e12b510a6d02e26c37dcd2c2aa76c1388224a1cd5b4758ad8a8d5f03d46c7f14c51b02beef8616e28155bc7e125995a5b14c70ea6997b4d340a8824adf9d4db65d4b3db282ae88a01003167559eef71450115538", 0x5f, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x2010, r3, 0x0) 23:41:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500), 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x104, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1100000001}, @typed={0xe8, 0x6e, 0x0, 0x0, @str='@\xdf\xdfj\x10\v\x04\xdb\xb5z\xfb\x10\xd3;\xa9\x1f\x12\xd1\x8f\x7f\xf5\x9d\xc6\xdd\xe8em\x1bD9\xed\x88)\xab\x94N-\xf0\xc6\x046S\xb6,\xeb\x93,\x11\x1e\x8d\xb8\xa1X\x80\xa0\x8d9B4c:(\x81^\xf0\x82%\xc0g\x05K\xa9*\xa5H.\x95\xf4\xe9ta\xcc\xba\xa6\xd6\xcc\xa4\xb7\x89o\xee\x00\x00\x00\x00\x00\x00\xf5\xc4x\a\xbc\xecm\xd3^\xcfr\xec\xb4L\x8e\xc6\xf3.\xbf\xafk\x9c\x83L2g\\e\xf3\xe4\xa3p\xd7MyA\xf5\tK\x89\xb5\xfar{\xad\t\x96O\xb6\'\xcc\xbc\xd7\xba\xaa\n\x18MI\x01Sx\x1b\xad\xdfD\xef\xd0\xb8\x89\xa9\xe5\xb46n~\xe8&qi|\x9eg\xe9\xff\x96\x868M\xaba3\xcc\xa5\xe2\x82j\xb5#\xd9\xbd\xf9\xfe\xa6\xa7\a\x18\xb1\xb4\xff\x98/\xa5\xad\xd9\xd2c\x84\xf1\\\x825\xe8\xde\x14\x83\xaap\x80\xcc\xb3'}]}, 0x104}], 0x1}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f00000006c0)="3d9a57c4a7662d3a2107e5", 0xb}, {&(0x7f0000000700)="5ae749969148df6cbbf7352ef2d9ea46b47d12a14a30129f13519a0f61052aeed1da8ebae330889aac356682fc1e4942d8b82e1f71c0dd22708bcb094ad6b1b5115658cee0ff8b392a9e326439d83ac4d7db2dabacd3223311d0afdeb48b600bdfd9942a195d38ba1d7251df2146792bf70c9edf622fb121b9978e7f0db09ab1835703e2fc66d81c0206d0c9d0ec6f368cee7e3fab6392061dcfd08cb949788ab0760cfcc990a8491e625807688941", 0xaf}, {&(0x7f00000007c0)="0f1591e5d06eccc2c2da4401a24bc9ebc88014cab16de69a18827c4dc111f1c802cb10c2faa5fa60eb7979093a636c1b89b72f32f6915887cde413c00a0f9af09c762f991bb9", 0x46}, {&(0x7f0000000840)="5f0f3e90fe6b073e8010e5b41654381db7cb28faa2c93f35fca0e5c3c761f297293c8a5abcb10f", 0x27}, {&(0x7f0000000880)="d93ccb1202e7dc2ead1597ae8ab1648172ef4e572743ee4b717a8caf80fc56236015a0e46afc1207c93947166fb13a523de1ff195f170c35bad774f7228e5ccabe2b3c905a367bd97b2ade14fd1253", 0x4f}], 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 23:41:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:41:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) sendmmsg$inet6(r2, 0xfffffffffffffffd, 0x0, 0x5021) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) read(r1, &(0x7f0000000480)=""/148, 0x94) 23:41:22 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000002880)={0x10, 0x0, 0x0, 0x2}, 0xc) syz_usb_connect_ath9k(0x3, 0xfdef, &(0x7f0000003d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000003f80)=0xb, 0x4) 23:41:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100000054e805c66bf8f26719180000a1d8a2d200fadbd2e214e0f1423790519d2661790000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:41:22 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:22 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@xdp, 0x0, 0x80000, 0x1, {0x0, r0}}, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2b27c3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000001c0)=r1, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000200)={[{@fat=@sys_immutable}]}) 23:41:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) [ 682.183905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.185901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.194385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.195194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:41:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) [ 682.299612] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:23 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), 0xffffffffffffffff) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x104, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 23:41:23 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) [ 682.449758] FAULT_INJECTION: forcing a failure. [ 682.449758] name failslab, interval 1, probability 0, space 0, times 0 [ 682.450716] CPU: 0 PID: 5906 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 682.451275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.451840] Call Trace: [ 682.452025] [ 682.452194] dump_stack_lvl+0x8f/0xb7 [ 682.452488] should_fail_ex.cold+0x5/0xa [ 682.452788] ? p9_client_create+0x473/0x1050 [ 682.453112] should_failslab+0x9/0x20 [ 682.453414] __kmem_cache_alloc_node+0x5b/0x400 [ 682.453746] ? p9_client_create+0x473/0x1050 [ 682.454074] ? p9_client_create+0x473/0x1050 [ 682.454398] __kmalloc_node_track_caller+0x43/0xb0 [ 682.454753] kstrdup+0x3f/0x80 [ 682.454993] p9_client_create+0x473/0x1050 [ 682.455304] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 682.455669] ? __pfx_p9_client_create+0x10/0x10 [ 682.456016] ? lock_is_held_type+0xdb/0x130 [ 682.456329] ? lockdep_init_map_type+0x21e/0x7f0 [ 682.456680] ? __raw_spin_lock_init+0x3a/0x110 [ 682.457021] v9fs_session_init+0x1e1/0x1670 [ 682.457341] ? rcu_read_lock_sched_held+0x42/0x80 [ 682.457694] ? trace_rcu_dyntick+0x1a7/0x250 [ 682.458017] ? __pfx_v9fs_session_init+0x10/0x10 [ 682.458356] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 682.458715] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 682.459080] ? lock_is_held_type+0xdb/0x130 [ 682.459413] v9fs_mount+0xbd/0xbd0 [ 682.459687] ? __pfx_v9fs_mount+0x10/0x10 [ 682.460001] ? cap_capable+0x1da/0x240 [ 682.460290] ? __pfx_v9fs_mount+0x10/0x10 [ 682.460605] legacy_get_tree+0x109/0x220 [ 682.460922] vfs_get_tree+0x92/0x300 [ 682.461199] path_mount+0x1314/0x1e30 [ 682.461504] ? kasan_quarantine_put+0x8f/0x1f0 [ 682.461855] ? __pfx_path_mount+0x10/0x10 [ 682.462168] ? putname+0x102/0x140 [ 682.462461] __x64_sys_mount+0x286/0x310 [ 682.462774] ? __pfx___x64_sys_mount+0x10/0x10 [ 682.463120] ? syscall_enter_from_user_mode+0x21/0x50 [ 682.463516] do_syscall_64+0x3f/0x90 [ 682.463811] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 682.464199] RIP: 0033:0x7f767b249b19 [ 682.464475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.465691] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 682.466247] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 682.466767] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 682.467277] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 682.467785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.468305] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 682.468836] 23:41:23 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/238, 0xee}], 0x2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 682.569573] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:41:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) 23:41:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) [ 682.702136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.703426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.707092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.711458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.755820] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. [ 683.090776] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) 23:41:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 683.194923] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 683.219926] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:41:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01e}, {0x6}]}, 0x10) 23:41:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 23:41:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) syz_io_uring_setup(0x6d7b, &(0x7f0000000200)={0x0, 0x7bf6, 0x20, 0x3, 0x124, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) syz_io_uring_submit(r2, 0x0, &(0x7f0000001500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x6, 0x400, &(0x7f00000014c0)=[{&(0x7f0000000300)="49259e7ede3eaf605ab3aa8baff410ce5b0d5e8fb3b68c68a61a02831d5db7517de016f9c385f2ba2cd528c8c5cc213caa5f720d344c8f6de3095b834e80d20a224eaac4cbe2e06dc05aa205785acdcd603d7bbba4c69c396a88c45cbe10ee598717fe395a4f08a205508d875890da2e8dbcf3030fbbba451e791e28acc9efb34bf2751ba530df8f98755ade0ebc68234e42a4eeae142c9c2dff4b1146f02fa04eb89aada03b520ef1eff5379735edcd3936b83c74dff0a0f6ff8141788742619e341ac613de9871", 0xc8}, {&(0x7f0000000400)="d69d2fe565e9750373989872d9105377143359743db4", 0x16}, {&(0x7f0000000440)="37e82aa883fdc556e3477325bc564db0c80f7e896a08d532b8847ed414b6e333d56aa3c17279948ab210d573e972e69d7478cbe7c7753c80aa90d1cea10561a4c6cdec6f845d88ee4d39a599f2a9eae09970cd637a9cfcff2d756e4780467e49", 0x60}, {&(0x7f00000004c0)="c3af390bb3b11ab19b8e235f168311b117b89f9aaa7a054732c26a910c2998ed187c3f0d5ba23c1ab24938613b3a5eba6f7950732432265d49a5f1039364924e05e7f71bf0036e1d08eca0da7be01029d1f7b2da0eacc0dd1624f83c7fc191290c8d6f37db62e417511a8d0e0ba0a45aba6270e0b69aa891f8600fbda78e24fdb67a9ba31c4180d270b01e3d71924ab8240c42285da2616bd8efc5189f79d70b736e63debe1a16de7cd6e799d8179e06c5dd005045779ff419cc1c19c349e772bbd63ba6cdc30606d4d8f96ca95e5da92b91c46d26f4345397de9fec512c009ca3224113235087925fef34809dc985d617739327f8a6f44cc0a8d49be02612e78ebc9e695ab3c4d55aff4c953860d591a9429b6744ea1fe2fbc12ca13d5532710bca622b4a9e8ad3a34020f945c2b50194337fc22bb9598d9793603224c12d19e744a11938f0546308a918ff38e0f3ff310f427a6971d67940569664a65dc07eea2c99b75369798d3d539fb4e1465dca939451cbf5ec513d9e6918c6685ba846600bf0f7394674d71fb55312cc6249691c2f98c34fe531341e62253ae3a272da509a6721361a0a84b91b93b4c7b3a5743973ba7424ae4ab72c347195391469acf7b4d237e77a646d2d5085598da33a8768bb587c1f540567a508f3c08087f6cf16cda89a0b55da993d0de11284e99ed9adf69955477dc4c547cc2995b786f42d5a1438ea0a40191a0816f68463f0a49b519792d121de3199ea10e3806ba303960322d7251a54bf92cc6da7c915b5201a398106e3d5da705975a8a1c5bf12af2585f1bb6d10645ef27f407d41cb958e90938440a146ae5f9be44f2761e064f4b6af6b1bf52c8322710763b5ade7b80ed73689c6443158b1ac4fa7e4acde7a347546d2a2ad6d32060387d7ca5401c71617bfb17e142a5fa3bd7c10b8e7775eb04f50134b89c7bd033a21be3ca11bf4cc43d1037476cdf6f721a8b158137558dcb202a8aa96d608c59cd1ba437c35dd6e230f689588d28f0c5ccd3d0d2de7b1a1f101045e74be9f277517c4466552ca401bdc59f5053d6cc1b3880326808c5cf5124810d457705e5c409b2e6601ac568cb90a5a647d62aa3532e62530b9cd4a6360728d3d609427e50572e37d8cdec94c2e28c790fd1a4ea857706b5af8f51552c43c7a952a345c6dcf48a9293f8f44e9c6981918b41305b01f9b54dc5d67de7c1d4d31ed9b540b83b99b30e560c1b6f59ef94bd35fe04c661e323304f2021a2a1aa299b411e3bc2c54ec70a1296f937bc9a9c695cd66c6c09d96e809ef162ee0fd5b61cab7057ec2ab669410f1c86a5de25f938eb4fa9d374390b722e3fedc72b66f6bbac8df4684357548663a5ad22270475474a08228466405ea80acd8dd23ce2f005fcecf46662b112150d98f311bbd219ac7ae5af0d445d83dfe2a08c4a490b5447a2c2048f17ace1cb7ed3431d02e850284f906bb1589750cc49f161502846edc924cf8c61763826c7fbd5d08d2cb1bca0a5db4998e8b0e65a3fd14d59862fbd0629b53f5e8e665527edee194efffbad5d0dda8f821b49c713ee0c6847143dbd10423f52d1fb93691d83f4e0c79ceb5df030e7a85a46dca7eb05003c54cf9c0d071edb4a0de328cdafd19a82334639ca97d89ec5316a1fd8e36603c1eb900bb6533a632c5b93fde1329d584a5bf74819c0211656419a7fb8ef6f056bc210d4d7a89bb381d0f3ea64665099b0db4a93f36afec2190f3d4dd5af544b48e486943e901e1d2892bcd3cd03f8273eef5e37fae148a2e7204e33cca09c73840806bd16c248f6c5d2af50315de1a1fd40876932aba4723176a9a2c262f2d4511e4d3d62f985b02cc57e643b989f97c843912ec046564dc0423e4a09099666ffff9d3cf7a3fc8fddc0fa64f55caf6c854f075bcf1d6a00814a870e98bd30a3bd6a6370f8f2d413b0539bde30273eb36533d7c9e404f66cd2a6006df664ba68ab16ceb5bf34097365f8b1650470b8e194ff475c151cd8b3c5df74f9ee6d2f32ffae770de31d4b1e659235e4b26cec6a525e55119d41947abe3e45494ba7191b301c30ca66f37571ce81eb5d7e0eeb8a74c5b1a5820da69079e3c4171ab396724c5285642f44792a84ee5df457e8464d82f58f12fd8b768a89227c2b545bf55b054eb50454a651908f11e6a784cbcd1329623dfff5f201e2ca3a0bbad25f8ddf6928a78e14ef2998ea74ddfe3926089ff68812c274ad01a8348315cd1c46561d7a05368124cd234ab42303506f16929988abc1a6e972999b8d121e7e34e80d2ba6ce5a5b9361ef6e9f98e768ca078073c0c052c39938833fc508eafcaa7a1890039d7ac59308c472de58de3735e23a8ae5d7c88b56650f431c5eb9a7cf4452063b2b2f04524ed208024435da11cc5b4881ef9a145af0e7caa080ebfd08a07944a1668c0231ef70f74ca9c1ae56cfabf9d2cd078eca97eb1dcc155e8348830f17df4451cebc90e8f09e5d1c91c6fc5e28a5828c400bf7e34e6bff0e26e7bdfc08391301357627ee92e61d205d6df1a44fa6fc86ded485cca7e22981af86e3d128e53a3705a881a583c3be24701122f93ebaa3bcaaf913a142a827b2b3ad8d7151848d1c415292ca2a3af166d2d1146d950cc83d31627d601a7af266d000fb8a16918f68d86922695f6e3c724fcc2689fa6c3e379d0737e410e5394ba9dbccebe1920dfdb5bd1ef8a005337d26854a11e0d3a4cc4b0be95684c50ca2e730cc592a7a7314c03f52e4dd0406b3aef46ea0d7454286fe11cc4f53429952de87526018b2f55093073f04982e3c6f1c243763ee8879307007284c539d4d17c81301285710a182b6b2c40b41167d8a6303f164a417169076db8554bed01356fafee62f4dc72c807f6d471648d091d3c083c4184e668e349e770aa2acc12b566c04870cd45bd7c6edd259f78b39cd76ffae726e55ee96dfb9134f121f7787d53f33b7a535813017ebef724e3620f61c0a9bf3caf44703a009dcd91d435ca72cbb3ec66f72d3c1dc81e7b40def2c61a9ebabce0ea388cf7f5eca7b15338979e754af5a05f31313bc5c8c20d0de95c33774cfe46cd269a4c06262bec72d331b00897ceb679be61a25f1083f340ab7d86d01fdd365d1c64c19fe42c8ee71ef2284f887019a57a5af9e1a5ff12adefc39f22ce617d620d905b8f9db9a7ec9a1093909964cc7778c034ec378cbab1aac7b844daa4d9c1e2ee92ce91bb21727afc01549a765f7afdf461af2b5ad9d66f315ed78c75a3ea13d5130eb605511b6d9bc9eec610d18b9b4f290668df7f1ef5692d9ad3bb080dfa153569175bd77b3a09850bf72bd9a4d9a40559c5a0c4fa07c84299c3b81d05ac81d8023d3c2b0aa252f1d03c897fbf41748491631cb7c03608d048abcd306066f6aa0b107a46bf018ae0130cf8cf6f3ddbfd517d0700ed8f1adf9f8779888b0a6dfbea5602d7378f65876d4f24135f16f75f622f53ce8f21e99fdd19dea806454134b986e6849befd1ea86dfd87f9f7513f248310bc185cae6162512f10fc0685ed4c95524412101837d3dde9c1f9683ed6cb6608c44a740d1e3fce53a82dab1c484e5abccf5060274f52b51a0378168133a95c3c008f2b2e637f19b8484d4ce256343cbef500eff045e474cb2762e1969de4481a74fd3ff338d8b313c4eba132e562979eca4b9f3c6e6aecbe64079181241a0965810e8e313afb64b0e751a1543ab73111aebb1fb3c38f28825adf9777489cfd6aea1b813c08efa0d7e0d652824be6b020d4684d3ec6e91911b9b761ee3648730aff3fa5cd8fadbfa33dd2d58abd78f866f28f7660c6ed2db02cde19f0cebbae27ae63946f126302d8cd458d050f8fd30c128035a94b552ca80d5d542630a5235c7c577620a70a543c0c2b72c6d08deefe25efa1c685b601ab25041f1a4239c8c63312b7d34faca3b256a4631d0f393e24cfe17d9f1da7bcb9bb3403b542495689f0ca0838845150987fd54e52ab21fc151a827e4db35bf61b529ff2ec8060943de9d40d19f262ca8c91584be74f87bfe2994e9e492c426effeb3c67a481b8db6339e4f80ac0bc153a4a72367aae0d35cb7ca8ae5e4684a2dab89720e77f2d6ceeaf05be35a13c4672b0fc0cf8b8340d527ca0e54dcae550adf0aa8b5512b264b812c3ced0087424d9929958b544c7ce3072b2d03e2e4f106d3d7b6d25e049c304b6930c0a8a6318af8077963780e29f70d85888c38c162b9ac4b15cd54e15b1ae7815e0c2bdd6020fbe13cccec6e1bcd7c86c601431d7d9d122f009329bf86e6efd0ed15fc08e3daa23e5aaeed8f799e639bc19004a24aee4f84803e913323e6b0dc200078cef45973a1f982700daa7bed3bfc726e0f24ed88277367d772e42a83d6730dfb0048b07175925d03925c2d85009fc34edc05c8c86099712b2b580842d0d4bbc88fa96071d8658bfe2dc65aac3aa1c476d75c618a250f36a240a39464aa7d701cd603cfb17f589772babec61ef8f05f41a16077de592929aed005e725fbc942e168e09259991ed70b7ba513f03b1f02d4af52288d1241a8cdf5e2d5f3f00e41b3982f007beeedf97dd116b71bfd656cf99a2f5738f27eeeec47e4d898c698491b32cfe1c712743a8cc0e369616b554a7bbd6e7cbb71ff1f31739fcbc076e29ffb1e18b07a4088ac6ab946f50fe637fa84cee4e5a884dd669aa771f4849de2b2b735cfd6c2a855d0368e63e50eb437b5b6ca99742f49e45d8cc3437141649d06e21352e5b04053e170b661c7897df3dc685c1afb01b26736809f1fbf5fb07dd4be19182b320e926a65be0ea50659a9c595435a4414b214b9af939565664cbe2a098ce1e35fdf0b39e9c102f53c8b8f58a6dc37b9f9b0ae209e7bfd9c645eca8f866d4a2a8d62189d212ace2e7c0fdf5b060858df461f1366f29831d9b23fbccb0d9503f6cfb07aec88a0519aa07ed6f3a9fec5db89eefd64ec549f01a776e0c080bd025a67f8c20a712c1d0ca2a71a75f8713daeeb70c7c566b20b65959d5955d1bd0a07a551fd546cae57a7f6ee7ac484ed25ec873112e7b106e9915f3fa7dfa1b659ddec21e75574c39f7e790d2a1a741aee7c22d875aab192a84a676dc1629216ea94556c15d1cca790bff80866e1245fb16515b0d37ca1f69c50977793efe44b36bd395c6155c5fa3d835a20418177080768b0b24c239d88a4bf81275a2294899dcde60d3485c75a0f83a063bf2d392e796a0ad346e2accdec85cbb0998a59ef8da82e8b0eb1b3faa9829d0322186c8c36128a26d444c97a3210fe51caa8eaaf69cab8abaa1293b9f3dd14530433a36af78d1cdfe71c2c2c34b5441eeff3c9adcd775ae1856f1eaa1abefa98d62161e035e1b4902170da771442086beafcded90496470947d3400bc6fba1b59f2d0524e5981ae7f9ca494f834a97052f2d5db4eda1da742b8fb9c7bd048fc4aca07ad00d91cf6b0fd39d599c37441257464d43fbb68f9612016a95fb09b5bcb83c200092a606558c46456b725136daa861ff3c102ca59e5d3d36e7ebac37ce7117bec930de4117c2fcfd37eec2203cd3f9b747dfca10058383b2016eb373b8dc10ec2dfecd16ca6bc1490bcb51e83e6aa2408c1429aa5eb5b6990d947503be8c01e673ea8e5b96c28e50d2ba08331ad7e13285b769211c903902d71f3969a81660eb44f47d7ccc655aa5291f5a2ad27d0ebf854e566d2718d1dd2e217141d47795cf0166c628090224ea1c477e1dc4275d8fab0bc244cd2e439ba8a59051e7c7f00436b84ab65b6f3a6c72e4", 0x1000}], 0x4, 0x2aa0313ba4651e89, 0x0, {0x2, r3}}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x3514c1) accept(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) sendfile(r5, r6, 0x0, 0xffff) 23:41:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x754}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) 23:41:24 executing program 2: clock_gettime(0x2, &(0x7f0000000180)) clock_gettime(0x3, &(0x7f0000000000)) 23:41:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:41:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) [ 683.495549] FAULT_INJECTION: forcing a failure. [ 683.495549] name failslab, interval 1, probability 0, space 0, times 0 [ 683.496358] CPU: 0 PID: 5941 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 683.496902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.497459] Call Trace: [ 683.497644] [ 683.497811] dump_stack_lvl+0x8f/0xb7 [ 683.498107] should_fail_ex.cold+0x5/0xa [ 683.498402] ? p9_client_create+0x574/0x1050 [ 683.498721] should_failslab+0x9/0x20 [ 683.499002] __kmem_cache_alloc_node+0x5b/0x400 [ 683.499336] ? p9_client_create+0x574/0x1050 [ 683.499654] ? p9_client_create+0x574/0x1050 [ 683.499971] __kmalloc_node_track_caller+0x43/0xb0 [ 683.500324] kmemdup_nul+0x36/0xb0 [ 683.500585] p9_client_create+0x574/0x1050 [ 683.500894] ? __pfx_p9_client_create+0x10/0x10 [ 683.501235] ? lock_is_held_type+0xdb/0x130 [ 683.501553] ? lockdep_init_map_type+0x21e/0x7f0 [ 683.501897] ? __raw_spin_lock_init+0x3a/0x110 [ 683.502240] v9fs_session_init+0x1e1/0x1670 [ 683.502548] ? __kmem_cache_alloc_node+0x25b/0x400 [ 683.502895] ? __pfx_lock_release+0x10/0x10 [ 683.503206] ? __pfx_v9fs_session_init+0x10/0x10 [ 683.503535] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 683.503894] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 683.504256] ? lock_is_held_type+0xdb/0x130 [ 683.504575] v9fs_mount+0xbd/0xbd0 [ 683.504842] ? __pfx_v9fs_mount+0x10/0x10 [ 683.505137] ? cap_capable+0x1da/0x240 [ 683.505438] ? __pfx_v9fs_mount+0x10/0x10 [ 683.505735] legacy_get_tree+0x109/0x220 [ 683.506037] vfs_get_tree+0x92/0x300 [ 683.506321] path_mount+0x1314/0x1e30 [ 683.506613] ? kasan_quarantine_put+0x8f/0x1f0 [ 683.506954] ? __pfx_path_mount+0x10/0x10 [ 683.507267] ? putname+0x102/0x140 [ 683.507550] __x64_sys_mount+0x286/0x310 [ 683.507855] ? __pfx___x64_sys_mount+0x10/0x10 [ 683.508199] ? syscall_enter_from_user_mode+0x21/0x50 [ 683.508581] do_syscall_64+0x3f/0x90 [ 683.508870] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 683.509256] RIP: 0033:0x7f767b249b19 [ 683.509537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.510821] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 683.511369] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 683.511889] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 683.512399] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 683.512918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.513435] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 683.513945] [ 683.524827] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 683.534652] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:41:47 executing program 5: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002cbd3b56140738f7fa7c8953ae7000fddbdf256700000008000100330000000800c400030000000800c40006000000ced27d1af7bd3f29b9fd0a287a44b8b4a99e594d82fdd2e6d9669e46654f436e2d00a8b915c8bfcd17cd8ddded4760ce1b30d0a057b7ba1a8a0622c78f7bd7fff498c2548718c59b3fb9740c1a7b57fdd49c915ec82b323551565d65914823e511d34e9a9decc20eaa8f23f3c789b5765b9f54822646badf6ea44df80176303a71a8b1bd2b370bf980c48d7f4f26aab848547bfe817d15d6a0603937f8298233a23cb3f9c4"], 0x2c}, 0x1, 0x0, 0x0, 0x20044084}, 0x4008080) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) close(r1) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x743bc2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f5095da18c9d7e1e4fef57e50a1949dccf69115b94c6350087d4ee57d648613d34b9772bf8f9540351a546449c8076764178d3583eebe97535ad", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 23:41:47 executing program 7: pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xfc80, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pkey_free(r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000380)=0xd, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8010000000105"], 0x1b8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000380)=0xd, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8010000000105"], 0x1b8}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:41:47 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/238, 0xee}], 0x2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:41:47 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r2 = accept$unix(r1, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) write(r1, &(0x7f0000000200)='E', 0x140000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r4 = getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x50, 0x10389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x3, 0x1, 0x99, 0x0, 0x8, 0x85020, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x1f}, 0x14020, 0x9, 0x5, 0x2, 0xfff, 0x90da, 0x9, 0x0, 0xb4a80000, 0x0, 0x81}, r3, 0x4, r0, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r6, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file1\x00'}) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000000)={0x6, 0xc5}) 23:41:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r4 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) mknodat$loop(r4, &(0x7f0000000180)='./file1\x00', 0x0, 0x1) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00') r5 = syz_io_uring_setup(0x190b, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0xa1, 0x0, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000180)=0x1) r6 = getpid() ptrace$peek(0x2, r6, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x5, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sched_setscheduler(r6, 0x0, &(0x7f0000000240)=0x8000) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) 23:41:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:41:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:41:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) [ 706.739519] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 706.745842] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:41:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) [ 706.777284] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.7'. 23:41:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 706.859432] tmpfs: Unknown parameter 'fowner' [ 706.864457] FAULT_INJECTION: forcing a failure. [ 706.864457] name failslab, interval 1, probability 0, space 0, times 0 [ 706.865308] CPU: 0 PID: 5980 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 706.865897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.866476] Call Trace: [ 706.866671] [ 706.866847] dump_stack_lvl+0x8f/0xb7 [ 706.867154] should_fail_ex.cold+0x5/0xa [ 706.867463] ? parse_opts.part.0+0x8e/0x340 [ 706.867788] should_failslab+0x9/0x20 [ 706.868079] __kmem_cache_alloc_node+0x5b/0x400 [ 706.868446] ? parse_opts.part.0+0x8e/0x340 [ 706.868762] ? __x64_sys_mount+0x286/0x310 [ 706.869073] ? do_syscall_64+0x3f/0x90 [ 706.869377] ? parse_opts.part.0+0x8e/0x340 [ 706.869704] __kmalloc_node_track_caller+0x43/0xb0 [ 706.870078] kstrdup+0x3f/0x80 [ 706.870316] parse_opts.part.0+0x8e/0x340 [ 706.870627] ? __pfx_parse_opts.part.0+0x10/0x10 [ 706.870979] ? lock_is_held_type+0xdb/0x130 [ 706.871314] ? rcu_read_lock_sched_held+0x42/0x80 [ 706.871674] ? trace_rcu_dyntick+0x1a7/0x250 [ 706.872010] p9_fd_create+0x9c/0x4b0 [ 706.872281] ? __pfx_p9_fd_create+0x10/0x10 [ 706.872598] ? kasan_quarantine_put+0x8f/0x1f0 [ 706.872935] ? p9_client_create+0x7ee/0x1050 [ 706.873254] ? __kmem_cache_free+0xcf/0x410 [ 706.873573] p9_client_create+0x855/0x1050 [ 706.873893] ? __pfx_p9_client_create+0x10/0x10 [ 706.874235] ? lock_is_held_type+0xdb/0x130 [ 706.874557] ? lockdep_init_map_type+0x21e/0x7f0 [ 706.874912] ? __raw_spin_lock_init+0x3a/0x110 [ 706.875255] v9fs_session_init+0x1e1/0x1670 [ 706.875566] ? __kmem_cache_alloc_node+0x25b/0x400 [ 706.875918] ? __pfx_lock_release+0x10/0x10 [ 706.876237] ? __pfx_v9fs_session_init+0x10/0x10 [ 706.876584] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 706.876953] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 706.877317] ? lock_is_held_type+0xdb/0x130 [ 706.877653] v9fs_mount+0xbd/0xbd0 [ 706.877942] ? __pfx_v9fs_mount+0x10/0x10 [ 706.878258] ? cap_capable+0x1da/0x240 [ 706.878560] ? __pfx_v9fs_mount+0x10/0x10 [ 706.878872] legacy_get_tree+0x109/0x220 [ 706.879181] vfs_get_tree+0x92/0x300 [ 706.879589] path_mount+0x1314/0x1e30 [ 706.879897] ? kasan_quarantine_put+0x8f/0x1f0 [ 706.880240] ? __pfx_path_mount+0x10/0x10 [ 706.880550] ? putname+0x102/0x140 [ 706.880831] __x64_sys_mount+0x286/0x310 [ 706.881133] ? __pfx___x64_sys_mount+0x10/0x10 [ 706.881490] ? syscall_enter_from_user_mode+0x21/0x50 [ 706.881884] do_syscall_64+0x3f/0x90 [ 706.882173] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 706.882552] RIP: 0033:0x7f767b249b19 [ 706.882815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.884041] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.884565] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 706.885055] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 706.885569] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 706.886098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 706.886624] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 706.887177] [ 706.890484] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.7'. [ 706.910404] tmpfs: Unknown parameter '.]sÀrefer:0' [ 706.933077] tmpfs: Unknown parameter 'fowner' 23:41:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:41:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:41:47 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200201, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="004d1858c13437e1f31df67d010b2db7e2ae6c6531"]) fallocate(r0, 0x0, 0x0, 0x87ffffc) 23:41:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 23:41:47 executing program 7: r0 = syz_open_dev$loop(0x0, 0x40000000000002, 0x38d40) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x3, 0x5, 0xc6, 0x3b, 0x5, 0x15f, 0x1ea44656}, "8f50ba5b8d22b679908b5f67d23a437bceeff6412c8a120c7222669424424991a77225898b55ca6befbff3fd276bd7d165410f4b51bf5436816f782662ab3db5d5e6062bc14262802b8f1e16e79b32a69b1e8f3fbd63ce3d6d3e3b66fad7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x97e) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x0, 0x1, 0x400}) r4 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x81, 0x5, &(0x7f0000000f80)=[{&(0x7f0000000200)="f0dac707b97f2abe1a1069a2ccb44c2be7aee51c1b5703fc6195f0c20b4f8703ac7887169075f5931fb3769470f990e3a9f12227bb5c8f9fe3b4522d8a0dca2da82c0a544b6b369cc64da63118d3dbb29267ebfa2d29317802043810563dd6beb3f8fed3b4b07ef755", 0x69, 0x6bba}, {&(0x7f0000000440)="eaf70cd34a6f4be24c54d6a01904b60cff31a2eaa2ffc0911073aa5adac94cdb8ed7e145b4d43722bdeca2e4e3859e53e155abdc4e5b654ea1ede5dbb8e57b6ac125531dc80d0d74af7babe0a941136c5100a182f90c6de25c43de382dc5aa67922730fa8de89402af10a0df21e9f42d17b3d8", 0x73, 0x3}, {&(0x7f0000000e80)="4c6c2977da7d75f8cd0e2bc08153e8d24ac8a336f3337f3198bf6ea7c9df18c925d774ac145f4ac1aa8c5a74af0bf3d59b938a4093b372e16a29096879145d99bcc87f2056e41755fc57d0d8bfca3742af697d721751321baff46ef554b8174f1eb69967c9694cc273289c00b6309bb943b8", 0x72, 0x10000}, {&(0x7f0000000f00)="35345f97a88e28d265aa830c83fc50558b3382f5eaba4066ffbef034928b3bf873b57ee7c5743103c0ad11c2c1119230f8713b8b4fb3eb76e81475b9315d14f09093bd583638680ce0472fc55ce8c1ac447c7f8c9d4cb069aac640af203da6986ba7a55d10bff618663c05", 0x6b, 0x5}, {&(0x7f0000000300)="d22ce721c8ea50fe2c2a6db53d71184ba1f11df857c31842332118ce61173b5b29d5", 0x22, 0x7fff}], 0x1000000, &(0x7f00000003c0)={[], [{@permit_directio}, {@permit_directio}]}) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x880, 0x10) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:41:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 707.120651] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:41:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 23:41:47 executing program 3: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 707.152582] loop7: detected capacity change from 0 to 256 [ 707.160733] nfs4: Unknown parameter 'permit_directio' [ 707.183819] FAULT_INJECTION: forcing a failure. [ 707.183819] name failslab, interval 1, probability 0, space 0, times 0 [ 707.184742] CPU: 0 PID: 6001 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 707.185302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.185873] Call Trace: [ 707.186062] [ 707.186232] dump_stack_lvl+0x8f/0xb7 [ 707.186523] should_fail_ex.cold+0x5/0xa [ 707.186821] ? match_number+0xaf/0x1d0 [ 707.187103] should_failslab+0x9/0x20 [ 707.187388] __kmem_cache_alloc_node+0x5b/0x400 [ 707.187729] ? match_number+0xaf/0x1d0 [ 707.188030] ? match_number+0xaf/0x1d0 [ 707.188312] __kmalloc_node_track_caller+0x43/0xb0 [ 707.188668] kmemdup_nul+0x36/0xb0 [ 707.188927] match_number+0xaf/0x1d0 [ 707.189200] ? __pfx_match_number+0x10/0x10 [ 707.189512] ? parse_opts.part.0+0x8e/0x340 [ 707.189846] ? trace_kmalloc+0x2d/0xe0 [ 707.190130] ? memcpy+0x3d/0x60 [ 707.190384] parse_opts.part.0+0x1f3/0x340 [ 707.190706] ? __pfx_parse_opts.part.0+0x10/0x10 [ 707.191053] ? lock_is_held_type+0xdb/0x130 [ 707.191375] ? rcu_read_lock_sched_held+0x42/0x80 [ 707.191727] ? trace_rcu_dyntick+0x1a7/0x250 [ 707.192065] p9_fd_create+0x9c/0x4b0 [ 707.192332] ? __pfx_p9_fd_create+0x10/0x10 [ 707.192635] ? kasan_quarantine_put+0x8f/0x1f0 [ 707.192968] ? p9_client_create+0x7ee/0x1050 [ 707.193297] ? __kmem_cache_free+0xcf/0x410 [ 707.193625] p9_client_create+0x855/0x1050 [ 707.193960] ? __pfx_p9_client_create+0x10/0x10 [ 707.194319] ? lock_is_held_type+0xdb/0x130 [ 707.194649] ? lockdep_init_map_type+0x21e/0x7f0 [ 707.195018] ? __raw_spin_lock_init+0x3a/0x110 [ 707.195365] v9fs_session_init+0x1e1/0x1670 [ 707.195692] ? __kmem_cache_alloc_node+0x25b/0x400 [ 707.196049] ? __pfx_lock_release+0x10/0x10 [ 707.196368] ? __pfx_v9fs_session_init+0x10/0x10 [ 707.196709] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 707.197083] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 707.197469] ? lock_is_held_type+0xdb/0x130 [ 707.197811] v9fs_mount+0xbd/0xbd0 [ 707.198092] ? __pfx_v9fs_mount+0x10/0x10 [ 707.198404] ? cap_capable+0x1da/0x240 [ 707.198707] ? __pfx_v9fs_mount+0x10/0x10 [ 707.199014] legacy_get_tree+0x109/0x220 [ 707.199323] vfs_get_tree+0x92/0x300 [ 707.199610] path_mount+0x1314/0x1e30 [ 707.199908] ? kasan_quarantine_put+0x8f/0x1f0 [ 707.200260] ? __pfx_path_mount+0x10/0x10 [ 707.200577] ? putname+0x102/0x140 [ 707.200864] __x64_sys_mount+0x286/0x310 [ 707.201181] ? __pfx___x64_sys_mount+0x10/0x10 [ 707.201541] ? syscall_enter_from_user_mode+0x21/0x50 [ 707.201961] do_syscall_64+0x3f/0x90 [ 707.202253] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 707.202646] RIP: 0033:0x7f767b249b19 [ 707.202926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.204221] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 707.204767] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 707.205297] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 707.205827] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 707.206373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.206907] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 707.207447] [ 707.247061] 9pnet_fd: Insufficient options for proto=fd [ 707.546201] loop7: detected capacity change from 0 to 256 [ 707.547766] nfs4: Unknown parameter 'permit_directio' 23:42:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100"/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x70}, 0xa39ae3921316ec7c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f00000001c0)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 23:42:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 23:42:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 1) 23:42:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xec, 0x7f, 0x7, 0x9, 0x0, 0x400, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000640), 0x8}, 0x1, 0x96, 0x599, 0x7, 0x2a1, 0xebf, 0x772f, 0x0, 0x2, 0x0, 0xff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) msgsnd(0x0, &(0x7f0000000140)={0x3}, 0x8, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="1731cbfd87587426ad075ae9eb55a563b5b01dda", 0x14, 0x5}, {&(0x7f0000000440)="616f82e876818d3905a383e4e8e42a66a2ff8ad0795b8b035cf840ae1eac3aa15a7c3af902161c04cb1fa47b85ce63328927794cc4326ff04aa03f8bb2f21d5d0d15f87df85ed7dfd6298a0e6702455262e2429feaa9601928a0e9fa2ef5eb610ab4fcdf44543ee91bf717d0ac7b945ce81eb037bcf38816e34df4f933b1d8face723c36c8f6ffb2e9fd3246d742fb9236", 0x91, 0x8001}, {&(0x7f0000000340)="088d9401dbdc626c2488cdf41dbc7c8afd17bad21b939447cd564d911597a9f190f41dea8abbd3373093d7bfa9be15353c85c93753171af3d7a7", 0x3a}], 0x0, &(0x7f0000000580)={[{@dots}, {@dots}, {@fat=@nocase}, {@nodots}], [{@fowner_gt={'fowner>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x66, 0x65, 0x65, 0x37, 0x38, 0x35], 0x2d, [0x33, 0x31, 0x62, 0x31], 0x2d, [0x31, 0x36, 0x66, 0x39], 0x2d, [0x0, 0x5f, 0x30, 0x37], 0x2d, [0x35, 0x62, 0x38, 0x33, 0x38, 0x32, 0x35, 0x32]}}}]}) openat(r3, &(0x7f0000000600)='./file1\x00', 0x40001, 0x44) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/116}, 0xfffffd23, 0x3, 0x800) 23:42:01 executing program 3: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:01 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x0}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 23:42:01 executing program 3: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 720.635559] FAULT_INJECTION: forcing a failure. [ 720.635559] name failslab, interval 1, probability 0, space 0, times 0 [ 720.637451] CPU: 1 PID: 6023 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 720.638524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.639563] Call Trace: [ 720.639915] [ 720.640234] dump_stack_lvl+0x8f/0xb7 [ 720.640802] should_fail_ex.cold+0x5/0xa [ 720.641362] ? getname_flags.part.0+0x50/0x4f0 [ 720.641989] should_failslab+0x9/0x20 [ 720.642509] kmem_cache_alloc+0x5a/0x410 [ 720.643050] getname_flags.part.0+0x50/0x4f0 [ 720.643647] __x64_sys_mkdir+0xde/0x150 [ 720.644194] do_syscall_64+0x3f/0x90 [ 720.644706] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 720.645389] RIP: 0033:0x7fba0aae5c27 [ 720.645874] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.648116] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 720.649067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae5c27 [ 720.649983] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 720.650875] RBP: 00007fba0805c040 R08: 0000000000000000 R09: 00000000000000a8 [ 720.651771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000080 [ 720.652671] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 720.653597] 23:42:01 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 720.710845] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 720.751768] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:42:22 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:22 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x420c, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305) r1 = fork() r2 = fork() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) fork() socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x10080, 0x10c) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) finit_module(r3, 0x0, 0x0) 23:42:22 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 23:42:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100"/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x70}, 0xa39ae3921316ec7c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f00000001c0)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 23:42:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 2) 23:42:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="eab1e3772e1952c5e7c4c13d51d69d736adbca6d310800000012cb8e7c31db42e6f8e1cc2d57c210e938f06757a5091064737e2f63"], 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}}], 0x2, 0x0) execve(&(0x7f0000000340)='./file1\x00', &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[&(0x7f0000000600)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf [ 741.468355] dump_stack_lvl+0x8f/0xb7 [ 741.468790] should_fail_ex.cold+0x5/0xa [ 741.469213] ? match_number+0xaf/0x1d0 [ 741.469622] should_failslab+0x9/0x20 [ 741.470032] __kmem_cache_alloc_node+0x5b/0x400 [ 741.470530] ? match_number+0xaf/0x1d0 [ 741.470826] ? match_number+0xaf/0x1d0 [ 741.471118] __kmalloc_node_track_caller+0x43/0xb0 [ 741.471487] kmemdup_nul+0x36/0xb0 [ 741.471766] match_number+0xaf/0x1d0 [ 741.472049] ? __pfx_match_number+0x10/0x10 [ 741.472364] ? parse_opts.part.0+0x8e/0x340 [ 741.472703] ? trace_kmalloc+0x2d/0xe0 [ 741.472999] ? memcpy+0x3d/0x60 [ 741.473267] parse_opts.part.0+0x1f3/0x340 [ 741.473596] ? __pfx_parse_opts.part.0+0x10/0x10 [ 741.473965] ? lock_is_held_type+0xdb/0x130 [ 741.474304] ? rcu_read_lock_sched_held+0x42/0x80 [ 741.474676] ? trace_rcu_dyntick+0x1a7/0x250 [ 741.475025] p9_fd_create+0x9c/0x4b0 [ 741.475305] ? __pfx_p9_fd_create+0x10/0x10 [ 741.475626] ? kasan_quarantine_put+0x8f/0x1f0 [ 741.475972] ? p9_client_create+0x7ee/0x1050 [ 741.476308] ? __kmem_cache_free+0xcf/0x410 [ 741.476643] p9_client_create+0x855/0x1050 [ 741.476972] ? __pfx_p9_client_create+0x10/0x10 [ 741.477335] ? lock_is_held_type+0xdb/0x130 [ 741.477667] ? lockdep_init_map_type+0x21e/0x7f0 [ 741.478039] ? __raw_spin_lock_init+0x3a/0x110 [ 741.478404] v9fs_session_init+0x1e1/0x1670 [ 741.478732] ? __kmem_cache_alloc_node+0x25b/0x400 [ 741.479099] ? __pfx_lock_release+0x10/0x10 [ 741.479425] ? __pfx_v9fs_session_init+0x10/0x10 [ 741.479772] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 741.480156] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 741.480539] ? lock_is_held_type+0xdb/0x130 [ 741.480888] v9fs_mount+0xbd/0xbd0 [ 741.481170] ? __pfx_v9fs_mount+0x10/0x10 [ 741.481484] ? cap_capable+0x1da/0x240 [ 741.481789] ? __pfx_v9fs_mount+0x10/0x10 [ 741.482103] legacy_get_tree+0x109/0x220 [ 741.482429] vfs_get_tree+0x92/0x300 [ 741.482726] path_mount+0x1314/0x1e30 [ 741.483020] ? kasan_quarantine_put+0x8f/0x1f0 [ 741.483376] ? __pfx_path_mount+0x10/0x10 [ 741.483697] ? putname+0x102/0x140 [ 741.483985] __x64_sys_mount+0x286/0x310 [ 741.484294] ? __pfx___x64_sys_mount+0x10/0x10 [ 741.484647] ? syscall_enter_from_user_mode+0x21/0x50 [ 741.485051] do_syscall_64+0x3f/0x90 [ 741.485345] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 741.485751] RIP: 0033:0x7f767b249b19 [ 741.486029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 741.487366] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 741.487914] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 741.488448] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 741.488963] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 741.489476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.490006] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 741.490557] [ 741.498271] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:42:22 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 741.557413] 9pnet_fd: Insufficient options for proto=fd 23:42:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 3) 23:42:22 executing program 2: accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80), 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x400) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0x1, 0x0, 0x29}, {0x6, 0x80, 0x1, 0x7f}]}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x72}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{0x0, 0x0, 0x100000000}, {0x0}]) 23:42:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 23:42:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 741.702325] FAULT_INJECTION: forcing a failure. [ 741.702325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.703264] CPU: 0 PID: 6077 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 741.703853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 741.704451] Call Trace: [ 741.704658] [ 741.704849] dump_stack_lvl+0x8f/0xb7 [ 741.705183] should_fail_ex.cold+0x5/0xa [ 741.705512] strncpy_from_user+0x38/0x3e0 [ 741.705829] getname_flags.part.0+0x95/0x4f0 [ 741.706187] __x64_sys_mkdir+0xde/0x150 [ 741.706509] do_syscall_64+0x3f/0x90 [ 741.706800] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 741.707196] RIP: 0033:0x7fba0aae5c27 [ 741.707473] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 741.708749] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 741.709289] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae5c27 [ 741.709815] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 741.710359] RBP: 00007fba0805c040 R08: 0000000000000000 R09: 00000000000000a8 [ 741.710872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000080 [ 741.711392] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 741.711925] [ 741.828536] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:42:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 4) 23:42:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 23:42:37 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540), 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 5) [ 756.844552] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:42:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x8, 0x8, 0x80, 0x1, 0x0, 0x1, 0x2200, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x1}, 0x44400, 0x7ff, 0x3, 0x0, 0xfffffffffffffffc, 0x4, 0x6a0d, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r0, 0xa) fork() fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) 23:42:37 executing program 0: sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x344a, &(0x7f0000000100)={0x0, 0x847, 0x4, 0x1, 0x1bc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, 0x0, 0x0, 0xffffffffffffffff) 23:42:37 executing program 5: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:37 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010", 0x4c, 0x2800}], 0x0, &(0x7f0000010f00)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x18400, 0x2) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23:42:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 6) [ 756.898146] FAULT_INJECTION: forcing a failure. [ 756.898146] name failslab, interval 1, probability 0, space 0, times 0 [ 756.899001] CPU: 1 PID: 6110 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 756.899577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.900159] Call Trace: [ 756.900348] [ 756.900525] dump_stack_lvl+0x8f/0xb7 [ 756.900834] should_fail_ex.cold+0x5/0xa [ 756.901146] should_failslab+0x9/0x20 [ 756.901441] __kmem_cache_alloc_node+0x5b/0x400 [ 756.901790] ? p9_fd_create+0x17f/0x4b0 [ 756.902081] ? rcu_read_lock_sched_held+0x42/0x80 [ 756.902469] kmalloc_trace+0x26/0x60 [ 756.902754] p9_fd_create+0x17f/0x4b0 [ 756.903036] ? __pfx_p9_fd_create+0x10/0x10 [ 756.903350] ? kasan_quarantine_put+0x8f/0x1f0 [ 756.903698] ? p9_client_create+0x7ee/0x1050 [ 756.904034] ? __kmem_cache_free+0xcf/0x410 [ 756.904362] p9_client_create+0x855/0x1050 [ 756.904684] ? __pfx_p9_client_create+0x10/0x10 [ 756.905036] ? lock_is_held_type+0xdb/0x130 [ 756.905360] ? lockdep_init_map_type+0x21e/0x7f0 [ 756.905727] ? __raw_spin_lock_init+0x3a/0x110 [ 756.906086] v9fs_session_init+0x1e1/0x1670 [ 756.906405] ? __kmem_cache_alloc_node+0x25b/0x400 [ 756.906768] ? __pfx_lock_release+0x10/0x10 [ 756.907087] ? __pfx_v9fs_session_init+0x10/0x10 [ 756.907434] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 756.907801] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 756.908190] ? lock_is_held_type+0xdb/0x130 [ 756.908518] v9fs_mount+0xbd/0xbd0 [ 756.908798] ? __pfx_v9fs_mount+0x10/0x10 [ 756.909097] ? cap_capable+0x1da/0x240 [ 756.909402] ? __pfx_v9fs_mount+0x10/0x10 [ 756.909702] legacy_get_tree+0x109/0x220 [ 756.910010] vfs_get_tree+0x92/0x300 [ 756.910286] path_mount+0x1314/0x1e30 [ 756.910595] ? kasan_quarantine_put+0x8f/0x1f0 [ 756.910944] ? __pfx_path_mount+0x10/0x10 [ 756.911259] ? putname+0x102/0x140 [ 756.911543] __x64_sys_mount+0x286/0x310 [ 756.911860] ? __pfx___x64_sys_mount+0x10/0x10 [ 756.912218] ? syscall_enter_from_user_mode+0x21/0x50 [ 756.912627] do_syscall_64+0x3f/0x90 [ 756.912918] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 756.913303] RIP: 0033:0x7f767b249b19 [ 756.913582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.914874] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 756.915426] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 756.915957] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 756.916472] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 756.916983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.917490] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 756.918018] [ 757.006758] FAULT_INJECTION: forcing a failure. [ 757.006758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.008488] CPU: 0 PID: 6117 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 757.009514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 757.010562] Call Trace: [ 757.010903] [ 757.011208] dump_stack_lvl+0x8f/0xb7 [ 757.011739] should_fail_ex.cold+0x5/0xa [ 757.012306] _copy_from_user+0x2e/0x180 [ 757.012837] memdup_user+0x72/0xd0 [ 757.013328] strndup_user+0x78/0xe0 [ 757.013825] __x64_sys_mount+0x137/0x310 [ 757.014383] ? __pfx___x64_sys_mount+0x10/0x10 [ 757.015014] ? syscall_enter_from_user_mode+0x21/0x50 [ 757.015702] ? syscall_enter_from_user_mode+0x21/0x50 [ 757.016417] do_syscall_64+0x3f/0x90 [ 757.016943] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 757.017655] RIP: 0033:0x7fba0aae804a [ 757.018148] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.020503] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 757.021501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 757.022449] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 757.023375] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 757.024320] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 757.025256] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 757.026220] [ 757.132685] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 757.133407] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 757.133884] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 757.134405] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 757.134928] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 757.161824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.162248] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.162850] Buffer I/O error on dev sr0, logical block 0, async page read [ 757.167402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.167782] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.168402] Buffer I/O error on dev sr0, logical block 1, async page read [ 757.169792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.170196] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.170838] Buffer I/O error on dev sr0, logical block 2, async page read [ 757.173286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.173712] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.174317] Buffer I/O error on dev sr0, logical block 3, async page read [ 757.176298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.176708] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.177323] Buffer I/O error on dev sr0, logical block 4, async page read [ 757.183377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.183784] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.184408] Buffer I/O error on dev sr0, logical block 5, async page read [ 757.185748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.186179] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.186827] Buffer I/O error on dev sr0, logical block 6, async page read [ 757.188079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.188550] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.189144] Buffer I/O error on dev sr0, logical block 7, async page read [ 757.257951] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 757.258691] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 757.259189] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 757.259713] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 757.260284] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 757.261291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.261698] Buffer I/O error on dev sr0, logical block 0, async page read [ 757.262400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.262810] Buffer I/O error on dev sr0, logical block 1, async page read [ 757.264177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.264686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.265373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.265935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.266508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.267027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 23:42:51 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) write(r1, &(0x7f0000000000)="016349d8e3e369a23c6a1e006361d57d1c7cee5d0c3fa743621cc4694516282239105d4e4e56f8d103e74467d6f61d8b14287d578854d121e919fd0369a7319f4e0b7f", 0x43) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x3c, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x4, 'sed\x00', 0x31, 0x0, 0x4b}, 0x2c) 23:42:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:51 executing program 0: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x29, 0x44, 0x2, 0x8000003, 0x63, @empty, @mcast2, 0x20, 0x700, 0xfff, 0x6}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x9, 0x2540, 0x80000001}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) 23:42:51 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f00000003c0)={0x0, 0x8d5e, 0x2, 0x400, 0x255, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000100000000002e2f66626c653100e9af6921c35feed022a4338f885ff18df4f9df11acc745f520370a7e93ac9452afd2d6df6998e04094386129a19ac43084375c122d5cb4f0384ff5335071948629f4741ff87c2fd87720613062363322c031763b6b870115a296a254f3e7e21f6ee8cbc1cc67b8989f5c57e8eaa7dc82f39e253ae94210b7e0"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="0c5b6bbf1ff2d5da79accdb8c4a9439602676b21", @ANYBLOB="3fd8e4fd79edfd78d0a14173f437160092df3a730fcbfedf73216eae49a96d9b56a0dbb6b34eca8f2e2d8e23878a47099c4fc838097ba9606673e4ecacd3397c838061dcd65944bd81baaef699aead5d29bce260ed72cf0fcb1925e1bcfbe053bb3a9676cf83fd71f81662"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r4, 0x8, 0x6, 0x8}) sendfile(r1, r1, 0x0, 0x100000) 23:42:51 executing program 5: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) 23:42:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 7) 23:42:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540), 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540), 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:51 executing program 5: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 771.152918] audit: type=1400 audit(1672789371.950:14): avc: denied { read } for pid=6138 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 771.156498] FAULT_INJECTION: forcing a failure. [ 771.156498] name failslab, interval 1, probability 0, space 0, times 0 [ 771.157336] CPU: 1 PID: 6141 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 771.157903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 771.158474] Call Trace: [ 771.158675] [ 771.158862] dump_stack_lvl+0x8f/0xb7 [ 771.159191] should_fail_ex.cold+0x5/0xa [ 771.159499] should_failslab+0x9/0x20 [ 771.159785] __kmem_cache_alloc_node+0x5b/0x400 [ 771.160123] ? copy_mount_options+0x55/0x180 [ 771.160461] kmalloc_trace+0x26/0x60 [ 771.160745] copy_mount_options+0x55/0x180 [ 771.161059] __x64_sys_mount+0x1ac/0x310 [ 771.161358] ? __pfx___x64_sys_mount+0x10/0x10 [ 771.161693] ? syscall_enter_from_user_mode+0x21/0x50 [ 771.162068] ? syscall_enter_from_user_mode+0x21/0x50 [ 771.162432] do_syscall_64+0x3f/0x90 [ 771.162737] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 771.163125] RIP: 0033:0x7fba0aae804a [ 771.163404] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.164698] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 771.165244] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 771.165753] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 771.166259] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 771.166772] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 771.167286] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 771.167806] 23:42:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:52 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{0x0}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:42:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 8) 23:42:52 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) capset(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6e, 0x0, 0xffff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0xc25}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xe, r0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r4, 0x2, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x20071026, r4}, &(0x7f0000000040)={0x7fff, 0x3569, 0x5, 0x7, 0xffffffff, 0xfff}) dup3(r2, r1, 0x0) 23:42:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 23:42:52 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:42:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:42:52 executing program 0: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x2c008000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x29, 0x44, 0x2, 0x8000003, 0x63, @empty, @mcast2, 0x20, 0x700, 0xfff, 0x6}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x9, 0x2540, 0x80000001}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) [ 771.506962] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 771.539064] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure 23:43:07 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:43:07 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) capset(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6e, 0x0, 0xffff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0xc25}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xe, r0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r4, 0x2, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x20071026, r4}, &(0x7f0000000040)={0x7fff, 0x3569, 0x5, 0x7, 0xffffffff, 0xfff}) dup3(r2, r1, 0x0) 23:43:07 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{0x0}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:43:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 23:43:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 9) 23:43:07 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfffffffffffffd61, 0x0, 0x3181802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) openat(r2, &(0x7f0000000340)='./file1\x00', 0x719280, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat2(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x262000, 0x10, 0x4}, 0x18) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2, 0x10, r4, 0xd30a9000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)={{0x0, 0xea60}, {r5, r6/1000+60000}}) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x200000e, 0x4d031, 0xffffffffffffffff, 0x0) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000300)=0x6e) 23:43:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0x21}, 0x48000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x21) perf_event_open(&(0x7f0000001880)={0x2, 0x80, 0xc1, 0x2, 0x20, 0x0, 0x0, 0x1, 0x800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x48000, 0x1, 0x10001, 0x0, 0xfffffffffffffffa, 0x1f, 0x1c5, 0x0, 0xfffffff9, 0x0, 0xfffffffffffff800}, 0xffffffffffffffff, 0x10, r1, 0xa) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32=r0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x10}, 0x0, 0x0, &(0x7f0000000880)=""/4096, &(0x7f0000000240)=[0x0], 0x1, {r4}}, 0x58) fsmount(r4, 0x0, 0x78) 23:43:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:07 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{0x0}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) [ 786.419325] FAULT_INJECTION: forcing a failure. [ 786.419325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.420963] CPU: 0 PID: 6194 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 786.422046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.423152] Call Trace: [ 786.423513] [ 786.423836] dump_stack_lvl+0x8f/0xb7 [ 786.424391] should_fail_ex.cold+0x5/0xa [ 786.424980] _copy_from_user+0x2e/0x180 [ 786.425539] copy_mount_options+0x76/0x180 [ 786.426147] __x64_sys_mount+0x1ac/0x310 [ 786.426725] ? __pfx___x64_sys_mount+0x10/0x10 [ 786.427384] ? syscall_enter_from_user_mode+0x21/0x50 [ 786.428106] ? syscall_enter_from_user_mode+0x21/0x50 [ 786.428853] do_syscall_64+0x3f/0x90 [ 786.429412] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 786.430156] RIP: 0033:0x7fba0aae804a [ 786.430692] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.433162] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 786.434207] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 786.435201] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 786.436169] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 786.437140] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 786.438107] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 786.439125] 23:43:07 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:43:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:07 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) [ 786.511743] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:43:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 23:43:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 786.676743] FAULT_INJECTION: forcing a failure. [ 786.676743] name failslab, interval 1, probability 0, space 0, times 0 [ 786.678342] CPU: 0 PID: 6213 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 786.679436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.680513] Call Trace: [ 786.680873] [ 786.681203] dump_stack_lvl+0x8f/0xb7 [ 786.681771] should_fail_ex.cold+0x5/0xa [ 786.682376] should_failslab+0x9/0x20 [ 786.682941] __kmem_cache_alloc_node+0x5b/0x400 [ 786.683607] ? p9_fcall_init+0x97/0x210 [ 786.684175] ? lock_is_held_type+0xdb/0x130 [ 786.684806] ? p9_fcall_init+0x97/0x210 [ 786.685377] __kmalloc+0x46/0xc0 [ 786.685892] p9_fcall_init+0x97/0x210 [ 786.686450] p9_tag_alloc+0x16a/0x870 [ 786.687032] ? __pfx_p9_tag_alloc+0x10/0x10 [ 786.687665] ? lock_is_held_type+0xdb/0x130 [ 786.688290] ? find_held_lock+0x2c/0x110 [ 786.688883] p9_client_prepare_req+0x17b/0x4b0 [ 786.689547] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 786.690275] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 786.691014] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 786.691750] p9_client_rpc+0x1a1/0xb70 [ 786.692325] ? __pfx_p9_client_rpc+0x10/0x10 [ 786.692963] ? __pfx_p9_pollwait+0x10/0x10 [ 786.693583] ? __pfx_pipe_poll+0x10/0x10 [ 786.694193] ? p9_fd_poll+0x1e0/0x2c0 [ 786.694790] ? p9_fd_create+0x361/0x4b0 [ 786.695348] ? __pfx_p9_fd_create+0x10/0x10 [ 786.695958] ? kasan_quarantine_put+0x8f/0x1f0 [ 786.696626] ? p9_client_create+0x7ee/0x1050 [ 786.697282] p9_client_create+0xad7/0x1050 [ 786.697910] ? __pfx_p9_client_create+0x10/0x10 [ 786.698583] ? lock_is_held_type+0xdb/0x130 [ 786.699212] ? lockdep_init_map_type+0x21e/0x7f0 [ 786.699912] ? __raw_spin_lock_init+0x3a/0x110 [ 786.700582] v9fs_session_init+0x1e1/0x1670 [ 786.701199] ? __kmem_cache_alloc_node+0x25b/0x400 [ 786.701889] ? __pfx_lock_release+0x10/0x10 [ 786.702517] ? __pfx_v9fs_session_init+0x10/0x10 [ 786.703193] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 786.703911] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 786.704630] ? lock_is_held_type+0xdb/0x130 [ 786.705270] v9fs_mount+0xbd/0xbd0 [ 786.705796] ? __pfx_v9fs_mount+0x10/0x10 [ 786.706392] ? cap_capable+0x1da/0x240 [ 786.706984] ? __pfx_v9fs_mount+0x10/0x10 [ 786.707577] legacy_get_tree+0x109/0x220 [ 786.708167] vfs_get_tree+0x92/0x300 [ 786.708709] path_mount+0x1314/0x1e30 [ 786.709262] ? kasan_quarantine_put+0x8f/0x1f0 [ 786.709912] ? __pfx_path_mount+0x10/0x10 [ 786.710517] ? putname+0x102/0x140 [ 786.711067] __x64_sys_mount+0x286/0x310 [ 786.711662] ? __pfx___x64_sys_mount+0x10/0x10 [ 786.712326] ? syscall_enter_from_user_mode+0x21/0x50 [ 786.713065] do_syscall_64+0x3f/0x90 [ 786.713617] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 786.714354] RIP: 0033:0x7f767b249b19 [ 786.714901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.717303] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 786.718338] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 786.719304] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 786.720261] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 786.721221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.722170] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 786.723172] 23:43:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:43:23 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x0]}}]}) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x60a00, 0x91) 23:43:23 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:43:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 23:43:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:23 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) r2 = fsopen(&(0x7f0000000200)='devpts\x00', 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00fcba2650381f71790b86b36dd224d4001b7fabe8dfe68886000e869c541f3a5dc2a7477b697448bb90a846d478", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf250100000006000800a3aa0000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) sched_getparam(0x0, &(0x7f0000000080)) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x800) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x7, 0x8, 0x5, 0x48, 0x0, 0x9, 0x8a00, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x17}, 0x1000, 0x9, 0x8, 0x0, 0x8, 0x5, 0x200, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x61, 0xff, 0x5, 0x20, 0x0, 0x4, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x100, 0x6}, 0x1014, 0x8, 0x3a6, 0x7, 0x2, 0xb9a, 0x8, 0x0, 0x100, 0x0, 0x22}, 0x0, 0x8000004, r3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) 23:43:23 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4b62, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x73, 0x45, 0x8, 0x54, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x2}, 0x0, 0x8, 0x2, 0x7, 0x2, 0x200, 0x8000, 0x0, 0x1d7, 0x0, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r3 = syz_io_uring_setup(0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xf}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3, 0x80000000000}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) 23:43:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 10) [ 802.568179] FAULT_INJECTION: forcing a failure. [ 802.568179] name failslab, interval 1, probability 0, space 0, times 0 [ 802.569357] CPU: 0 PID: 6226 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 802.570097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 802.570829] Call Trace: [ 802.571081] [ 802.571295] dump_stack_lvl+0x8f/0xb7 [ 802.571674] should_fail_ex.cold+0x5/0xa [ 802.572063] ? getname_flags.part.0+0x50/0x4f0 [ 802.572499] should_failslab+0x9/0x20 [ 802.572867] kmem_cache_alloc+0x5a/0x410 [ 802.573250] ? asm_exc_page_fault+0x26/0x30 [ 802.573666] getname_flags.part.0+0x50/0x4f0 [ 802.574091] getname_flags+0x9e/0xf0 [ 802.574451] user_path_at_empty+0x2f/0x70 [ 802.574848] __x64_sys_mount+0x1ed/0x310 [ 802.575245] ? __pfx___x64_sys_mount+0x10/0x10 [ 802.575684] ? syscall_enter_from_user_mode+0x21/0x50 [ 802.576160] ? syscall_enter_from_user_mode+0x21/0x50 [ 802.576644] do_syscall_64+0x3f/0x90 [ 802.577006] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 802.577478] RIP: 0033:0x7fba0aae804a [ 802.577817] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 802.579413] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 802.580081] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 802.580700] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 802.581324] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 802.581947] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 802.582574] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 802.583241] 23:43:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 11) 23:43:23 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x71, 0x2, 0x0, 0x0, 0x1, 0x22060, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfc, 0xffff}, 0x9, 0x20, 0x2, 0x0, 0x3d3b27cd, 0x8000, 0x55, 0x0, 0x6, 0x0, 0x3ff}, r2, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000000)) r4 = gettid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000000300)={0x5}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) setpgid(r3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r7, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) r8 = openat(r7, 0x0, 0x1d1042, 0x100) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x20, 0x1, 0x9, 0x4, 0x0, 0xa2a, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x2100, 0x2, 0xffffffff, 0x5, 0xc0000000000, 0x4a, 0x0, 0x0, 0x6, 0x0, 0x3f}, r6, 0x7, 0xffffffffffffffff, 0x0) gettid() 23:43:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 23:43:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 802.719360] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:43:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 12) 23:43:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) [ 802.844389] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:43:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 23:43:39 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000800)={0x7, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:43:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2e1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa824}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6, 0xf4, 0x8, 0x1, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x10c10, 0xc0, 0x3f, 0x3, 0x40, 0x7fffffff, 0x9, 0x0, 0x3f, 0x0, 0x665}, r3, 0x5, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x1, 0x80, 0x40, 0x7, 0xff, 0x7, 0x0, 0xc7ed, 0x71304, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x6}, 0x804, 0xac, 0x10000, 0x9, 0xfffffffffffff3de, 0x9, 0xff, 0x0, 0x4, 0x0, 0xfffffffffffffffc}) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000380)=0xc) 23:43:39 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x22880, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x4, 0x6, 0x0, 0x3, 0x42080, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x10000, 0x2, 0x7, 0x6, 0x80000000, 0x7, 0x9, 0x0, 0x9, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@private2}, 0x0, @in=@remote}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:43:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:43:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 13) 23:43:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:39 executing program 7: mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x180000, &(0x7f0000000200)={'trans=unix,', {[{@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x0, 0x66, 0x31, 0x65, 0x64, 0x37], 0x2d, [0x66, 0x65, 0x32, 0x30], 0x2d, [0x39, 0x63, 0x38, 0x34], 0x2d, [0x62, 0x65, 0x61, 0x57], 0x2d, [0x38, 0x31, 0x39, 0x39, 0x38, 0x31, 0x32, 0x64]}}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000018c0)=[0x0, 0x0, 0x0]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) accept4(r0, 0x0, &(0x7f0000000040), 0x0) [ 818.492761] FAULT_INJECTION: forcing a failure. [ 818.492761] name failslab, interval 1, probability 0, space 0, times 0 [ 818.493599] CPU: 0 PID: 6264 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 818.494155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 818.494723] Call Trace: [ 818.494913] [ 818.495090] dump_stack_lvl+0x8f/0xb7 [ 818.495393] should_fail_ex.cold+0x5/0xa [ 818.495697] should_failslab+0x9/0x20 [ 818.495981] __kmem_cache_alloc_node+0x5b/0x400 [ 818.496327] ? alloc_fs_context+0x58/0x9d0 [ 818.496647] kmalloc_trace+0x26/0x60 [ 818.496922] alloc_fs_context+0x58/0x9d0 [ 818.497227] path_mount+0x908/0x1e30 [ 818.497511] ? __pfx_path_mount+0x10/0x10 [ 818.497826] ? putname+0x102/0x140 [ 818.498102] __x64_sys_mount+0x286/0x310 [ 818.498403] ? __pfx___x64_sys_mount+0x10/0x10 [ 818.498742] ? syscall_enter_from_user_mode+0x21/0x50 [ 818.499119] do_syscall_64+0x3f/0x90 [ 818.499423] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 818.499805] RIP: 0033:0x7fba0aae804a [ 818.500075] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 818.501333] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 818.501859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 818.502361] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 818.502855] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 818.503358] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 818.503874] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 818.504393] 23:43:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 14) 23:43:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 818.680403] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:43:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:43:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 23:43:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x0) fadvise64(r2, 0xfffffffffffffffd, 0x0, 0x4) fallocate(r2, 0x0, 0x100000000, 0x2000008800000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000100000018080000", @ANYRES32=r0, @ANYBLOB="00005f0000e36b002e2f66696c654200"]) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x18080) sendfile(r1, r3, &(0x7f00000000c0)=0x3, 0x9) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c00)}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) sendfile(r5, r4, 0x0, 0x5) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf92951747396735c9f47ad4552e7bdf4f8e7998a1266a360beb2ec1527390452139f9ab91ee250efcf3413e72a6b2688d8b6a4748ccc165bbf886573ccdd03bd93f32a866cd878ec246e06f31d4d7f7ec9836b7305ee0c1b9fa75cd6e4ca5cc2f107b654f15a2442cd9c8eaf581d093639fe35e0da49394c5ed66ad29bc2b863649e16c1951d0d3dd6f1048539e558ee1f059d91510a5acd84777ca01545635d2fb40e2f205bb11435023e47e4e2f85b6d1b56b688dd1a4304708a561d32dbaa6cd4f969e67af33773d4e9772751019dc6c2af7e2fe9d3c7eb6f1b401926603d90802f792b081957dd5ebd18410cd42b2ea05ae9a61254e4b878384b8a376fe9eba06afc1253f2224fab88feb7c426e3dfb19385afbb42cc13209b419568eeafdf505dc5ca30acc17d337e941e0badf9f9413f381fe9a315e2597426805827943f193f02a12554d434bd91708a28d9da1bf64ad64f80a7287d1e02d5d1f14bf9d89ba3badfa524694db6a651e97ea64104ad34942f36745259f4ec32fdce0bd13e693ccbe0e012e61a1fae9fc1662b99871e3812cea14d12646ccc08b0514762a475ecdbf9071377bb1ecd891c6fe32fde1d3044caf466b3a342b7541e8ed7432e94baf1d5546aff0e23f6a03c9ea5635519533e712639c27958e3a0f3684ed91cfb2e6e4e63fecc01e7053afc00c6631b0cc91b948e3a02dd2adf51b0a0c5be44bb950c0933e219131ec40d3a50403a7454dd6ecffa404d62647b4920c8025e5ffad47335dea4046416c9cd38614b276f599ed3ff7e3a5119dcaa48e5c74a9b63de6cd925f593c20d672e6a5d1385faf54a39ed4e751dcd6ebf3141b70814d3036d7ace6cb2ed46601a6355bd8fe634d17215b6118315d32c39dbdd9aedd0b9e0af664376801643866ddc16ae1446d497d2ddb988074bd27e8f837b7cd513cf8ca19494eb478d71707b5fd9462fc010f60ff8e2ca0522b31f17e5b2536922e437947231aeff47245031f21f6117b501415485853b0e90b9d578f69262e4f21a017bdae85b8e6410b38dee2d964c466deeaa8c7f68a92183437e871a706f5de617293bf96745a27f151b72b444a8fc32c99b722dd92386e6899d64e14015fabd1f7dcec3e9c331b4124bdba2aa3255c9210f68f46d19968f637f56e2f3a89eeba79ed2c9ec18c617bfd6f4eb55c9f2794bbeb812fb8ada5c3a45a2b891ccfd719b50465c3140975d68e7bde915edebf48496f31a79bf8f0066fb5bf8ceac2fb5853f37eff6ce4483169adde9d938e7c9fb2fe7763d29a5f89d0a845c7ec5a875fdd6e58eeeeceb70800ff01d9446bf3fc5d787e42582600a9f734131ca822998bca9bac897ee6e6079c569df20f9ba37817c289168234191294c74ffdd6cf8f37a7e2066755df4bad98408b7f89e7e8928398ea999a890d88d7f86ae8eddbefae3db8675868c20eca21107a37a639f3c03576df6edcdf955b1cc6f81431bfc2ad7849d47823422951a803d917ff5895fc662bc4fea2385bb1d05fcdf0af91b72b44f6db7586bd5986668aa42e3ba1bb9e870aa6758162ba3428f38b59c1b883724d0bac146dd93ed6b0e52ed08d1f771c668cf0646818df9b1e420eea1184c4bef691a38e91db3e31730c8946a19c39f1f2413375e212f5e6fb0d3c3a123c44b9868090d6bd0eba36fcb74e16ff4c09db027b423f3fcaa4a3fb151b725b919b2ad3095e4a702c8c014f2d90eb1a0c70b0ad25fdc4badc19aaa45a2f4ccf1b39ad6f7cf9f217e76d7fef5531304243180d64837b87db130634a5cff858d1c5dfb3accce69e1271a0143ed58dcde4efeb4fadcbe408ab94f300487c35b0cad47c6c075891cf624f25997b3dbc0a9082d4d8f5d19c85612fdf80e01129086720f8acba14b07ce5e343938fb23831b5156fa2d30ced65089ef2916fd832ab241a032d3246a01ad0a9530beb5437d5e885e51d296fe93f4ddc42d7adfefa303039f16ef853ca8d98835a0459d96db1106e16d4b485d77427fad17626e23cc3cf8f56b2de1edff402448ef35649c299da3ad0ffa507af498363d25f9027406ae6d765bfe0673f5749b4a1321ed9a779501bdae59904b1fa426033fcb70fb97aad1665c4a42b246aa8030d835782f7c3da4cbaebabe6e0cb8c77703e28351c1e8bcaa3f67bbd716955931b0733a7a83cc4c4c13d2b2a0e3fc5121a984851f136ef7e7ab5eb5a5563ef919b9056e66e454b6e4d932e916f14037c62b960ca3b93d91fb97cbafc39f264addc77c16c91b2ef4fb37b44a5ad4a05f26c1b8cf99a260da4c4ac5a3b655627166913a1e910d8e418da38a412b47dfa650470d2e4696995ab335d66fee70c81772deadb8716f988c5355799bd526cc5f4342a6326c91c42c7995bcb90fb5e3281813801cb1178648b2eddbd84946156bd79b7e6e1a384515dac1d0b521c1d23c2398244bff8ce8a5df3cc4bd1cca76f2950c0752cc4b8fd14d9d0763c9242d58192a70940555a16e7075705d7a0077c9ee9099093bd0aff1e06416c3cbc9eda47ad6df5764c1c6a94a6a571befcb034f936161d4e1904ce5fee944689747e6c51136ac5d93c0c425f2f27dbe91e103f08", 0x90a}], 0x1) 23:43:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:43:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 15) [ 818.793284] FAULT_INJECTION: forcing a failure. [ 818.793284] name failslab, interval 1, probability 0, space 0, times 0 [ 818.794073] CPU: 0 PID: 6293 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 818.794613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 818.795164] Call Trace: [ 818.795355] [ 818.795519] dump_stack_lvl+0x8f/0xb7 [ 818.795804] should_fail_ex.cold+0x5/0xa [ 818.796097] should_failslab+0x9/0x20 [ 818.796373] __kmem_cache_alloc_node+0x5b/0x400 [ 818.796698] ? ext4_init_fs_context+0x41/0xd0 [ 818.797011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 818.797348] kmalloc_trace+0x26/0x60 [ 818.797615] ext4_init_fs_context+0x41/0xd0 [ 818.797917] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 818.798265] alloc_fs_context+0x563/0x9d0 [ 818.798576] path_mount+0x908/0x1e30 [ 818.798855] ? __pfx_path_mount+0x10/0x10 [ 818.799154] ? putname+0x102/0x140 [ 818.799428] __x64_sys_mount+0x286/0x310 [ 818.799722] ? __pfx___x64_sys_mount+0x10/0x10 [ 818.800047] ? syscall_enter_from_user_mode+0x21/0x50 [ 818.800413] do_syscall_64+0x3f/0x90 [ 818.800687] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 818.801055] RIP: 0033:0x7fba0aae804a [ 818.801321] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 818.802528] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 818.803046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 818.803536] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 818.804020] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 818.804509] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 818.804995] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 818.805487] 23:43:39 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000680)=""/122, 0x7a}], 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001ac0)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f00000018c0)=""/255, 0xff}, {&(0x7f0000000700)=""/66, 0x42}], 0x6) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', 0x0) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x2000000, &(0x7f00000003c0)='/dev/loop') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@mcast1}) faccessat(r5, &(0x7f0000000240)='./file1\x00', 0x20) pwrite64(0xffffffffffffffff, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff0", 0x46, 0x0) lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000001a40)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001880)=ANY=[@ANYBLOB="010000e10200000018000000", @ANYRES32=r0, @ANYBLOB="f6d72799384c08d889f871cda24fbd3cd7f83d"]) [ 818.819866] No source specified [ 819.568765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.292396] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 828.708439] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 831.147687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 831.159482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 831.160985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 831.164788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 831.166830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 831.168695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 833.189401] Bluetooth: hci2: command 0x0409 tx timeout [ 835.236309] Bluetooth: hci2: command 0x041b tx timeout [ 837.284357] Bluetooth: hci2: command 0x040f tx timeout [ 839.333368] Bluetooth: hci2: command 0x0419 tx timeout [ 856.045734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.047249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.059107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 856.074539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.076012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.078490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 856.604100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.948695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:44:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 23:44:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:44:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x22880, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x4, 0x6, 0x0, 0x3, 0x42080, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x10000, 0x2, 0x7, 0x6, 0x80000000, 0x7, 0x9, 0x0, 0x9, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@private2}, 0x0, @in=@remote}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:44:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 16) 23:44:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:44:36 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) sendfile(r2, r1, &(0x7f0000000140)=0x40, 0x2) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="65cf00f89afb63f82fdb17fcbb6ff446058b15566141005773a4d33aa72035f0df06689b5bcf3e8a", 0x28}], 0x1}, 0x4050) 23:44:36 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) 23:44:36 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x0) fadvise64(r2, 0xfffffffffffffffd, 0x0, 0x4) fallocate(r2, 0x0, 0x100000000, 0x2000008800000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000100000018080000", @ANYRES32=r0, @ANYBLOB="00005f0000e36b002e2f66696c654200"]) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x18080) sendfile(r1, r3, &(0x7f00000000c0)=0x3, 0x9) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c00)}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) sendfile(r5, r4, 0x0, 0x5) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x90a}], 0x1) [ 876.196963] No source specified [ 876.202191] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nouid32}, {@journal_async_commit}]}) 23:44:37 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xff, 0x20, 0x0, 0x3f, 0x0, 0xf2, 0x4082, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x1}, 0x40000, 0x7fffffff, 0x3, 0x7, 0x5429, 0x6, 0x1, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff3000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) fcntl$getown(r1, 0x9) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x2000) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af829fc9cd7928e9c9bb32f2ec9d7450509503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796b7f2aab10988753b1a6e98428b6f85c9119c4c753966434fa603afc2d230cd7c2", @ANYRES32=r0]) 23:44:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:44:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 17) 23:44:37 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x2501, 0x7}, {0x5, 0x4}], 0xee01}, 0x18, 0x4) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00') 23:44:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) [ 876.450332] No source specified [ 876.463856] FAULT_INJECTION: forcing a failure. [ 876.463856] name failslab, interval 1, probability 0, space 0, times 0 [ 876.465498] CPU: 1 PID: 6799 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 876.466522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.467536] Call Trace: [ 876.467874] [ 876.468196] dump_stack_lvl+0x8f/0xb7 [ 876.468723] should_fail_ex.cold+0x5/0xa [ 876.469266] ? vfs_parse_fs_string+0xc4/0x150 [ 876.469855] should_failslab+0x9/0x20 [ 876.470361] __kmem_cache_alloc_node+0x5b/0x400 [ 876.470976] ? vfs_parse_fs_string+0xc4/0x150 [ 876.471579] ? vfs_parse_fs_string+0xc4/0x150 [ 876.472178] __kmalloc_node_track_caller+0x43/0xb0 [ 876.472819] kmemdup_nul+0x36/0xb0 [ 876.473353] vfs_parse_fs_string+0xc4/0x150 [ 876.474010] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 876.474780] generic_parse_monolithic+0x173/0x1f0 [ 876.475510] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 876.476309] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 876.477057] ? alloc_fs_context+0x5ac/0x9d0 [ 876.477722] path_mount+0x968/0x1e30 [ 876.478325] ? __pfx_path_mount+0x10/0x10 [ 876.478958] ? putname+0x102/0x140 [ 876.479525] __x64_sys_mount+0x286/0x310 [ 876.480161] ? __pfx___x64_sys_mount+0x10/0x10 [ 876.480858] ? syscall_enter_from_user_mode+0x21/0x50 [ 876.481593] do_syscall_64+0x3f/0x90 [ 876.482095] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 876.482794] RIP: 0033:0x7fba0aae804a [ 876.483293] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.485518] RSP: 002b:00007fba0805bfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 876.486520] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0aae804a [ 876.487422] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 876.488361] RBP: 00007fba0805c040 R08: 00007fba0805c040 R09: 0000000020000080 [ 876.489242] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 876.490163] R13: 0000000020000140 R14: 00007fba0805c000 R15: 00000000200000c0 [ 876.491090] 23:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:44:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:44:37 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x2, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x3, 0xf) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @mcast1, 0x10000}, 0x1c) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), &(0x7f0000000180)='./file1/file0\x00', 0xe, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000eb0000000000000000e1a5b5b2862fc9a536dd58873b754131d64df1c069db98343452b60a078f28e5b47cc861358d8c7f0ac780d5f4f58d7e0014c191eacaa3c647fba8d68967c7f300ea26a060390498e80ba951254cd092d555e14595045f6a280a614ddfdb881371f72e34138708cca5d20e6880e6ce0cc037833a076db88f00000000000000", @ANYRES32, @ANYBLOB="050000f6ff00000000"]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file0\x00', 0x80000, 0x4c) write(r2, &(0x7f0000000080)="01", 0x292e9) [ 877.174620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.892401] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 884.279068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.282981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.284788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.290800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.294412] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.295938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 886.372443] Bluetooth: hci2: command 0x0409 tx timeout [ 888.420304] Bluetooth: hci2: command 0x041b tx timeout [ 890.468299] Bluetooth: hci2: command 0x040f tx timeout [ 892.516312] Bluetooth: hci2: command 0x0419 tx timeout [ 908.918928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.919918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.941653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 908.963193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.964796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.969814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 909.504054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:45:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 18) 23:45:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:45:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x1f, 0xd0, 0x3f, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x8}, 0x801, 0x401, 0x2, 0x4, 0x9, 0x3, 0x2, 0x0, 0x5, 0x0, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x480440, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x4, 0x8001, 0xfff, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80000) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0x6, 0x7f, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x400, 0x400, 0x0, 0x5, 0x0, 0x100000000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) ioctl$FIONCLEX(r0, 0x5450) io_setup(0xb, &(0x7f0000000140)=0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000005c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000003c0)="1b7a1666851945cd80a5a2ac0000000000000000b2122fbfdce63a77a865f0778bd425e749feed51f1439746599f0422a9d32dcef6b20d00ce737d913518a188cb9ad737a3f10ee2333baed5899c00ab0d1cce9ff265d634b3b2996ff3a5a91a9283b3b8cbfac984eccdb937f1d200bf96b5b75d5da9e818e348b4", 0x7b, 0x8, 0x0, 0x2}]) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) close(r2) r3 = openat(r2, &(0x7f0000000480)='./file2\x00', 0x101042, 0x19b) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 23:45:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:25 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x81, 0x6, 0x4, 0x0, 0x4, 0xc88d, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x40, 0x5000000000}, 0x800, 0x800, 0x85, 0x0, 0x100000001, 0x5, 0xcfa, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x3, r0, 0xa) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x28, 0x0, "704f5992eebeaa2888e479ca552ee155f638582a91ca97213ff4064a2e4c350cdc3f9f62a4c21970c8149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) syz_io_uring_setup(0x43d7, &(0x7f00000016c0)={0x0, 0x0, 0x2, 0x2, 0x101, 0x0, r1}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file1\x00'}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x12400, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) 23:45:25 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) 23:45:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 23:45:25 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0) openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/115, 0x73}], 0x3, 0x0, 0x10000) close(0xffffffffffffffff) sendfile(r4, r1, 0x0, 0xfffffdef) [ 924.658972] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 19) [ 924.770126] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 924.776779] FAULT_INJECTION: forcing a failure. [ 924.776779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.777819] CPU: 1 PID: 7303 Comm: syz-executor.4 Not tainted 6.2.0-rc1-next-20221226 #1 [ 924.778398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.778977] Call Trace: [ 924.779158] [ 924.779328] dump_stack_lvl+0x8f/0xb7 [ 924.779626] should_fail_ex.cold+0x5/0xa [ 924.779926] _copy_to_user+0x2e/0x150 [ 924.780208] simple_read_from_buffer+0xd0/0x170 [ 924.780570] proc_fail_nth_read+0x19c/0x230 [ 924.780900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.781248] ? security_file_permission+0xb5/0xe0 [ 924.781600] vfs_read+0x257/0x940 [ 924.781864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.782210] ? __pfx_vfs_read+0x10/0x10 [ 924.782509] ? __fget_files+0x270/0x450 [ 924.782796] ksys_read+0x12b/0x260 [ 924.783073] ? __pfx_ksys_read+0x10/0x10 [ 924.783375] ? syscall_enter_from_user_mode+0x21/0x50 [ 924.783745] ? syscall_enter_from_user_mode+0x21/0x50 [ 924.784125] do_syscall_64+0x3f/0x90 [ 924.784414] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 924.784796] RIP: 0033:0x7fba0aa9969c [ 924.785065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 924.786304] RSP: 002b:00007fba0805c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.786832] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fba0aa9969c [ 924.787318] RDX: 000000000000000f RSI: 00007fba0805c1e0 RDI: 0000000000000003 [ 924.787813] RBP: 00007fba0805c1d0 R08: 0000000000000000 R09: 0000000020000080 [ 924.788345] R10: 00000000000000a8 R11: 0000000000000246 R12: 0000000000000002 [ 924.788882] R13: 00007ffe5c7d714f R14: 00007fba0805c300 R15: 0000000000022000 [ 924.789411] 23:45:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:45:39 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x19a658c2, 0xfffffffc, 0x81, 0x7fff, 0x4b4, 0x100}, {0x3f, 0x400, 0xac9, 0x3, 0x4, 0xfffffffffffffffa}], ['\x00', '\x00']}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:45:39 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) 23:45:39 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x2180) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200080, 0x196) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) finit_module(r3, &(0x7f0000000300)='/dev/vcsu#\x00', 0x3) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x410840, 0x144) 23:45:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 23:45:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file1\x00') r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xa6, 0x0, 0x29, 0x80, 0x0, 0x5, 0x580c6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100, 0x8}, 0x10, 0xffffffff, 0x9, 0x0, 0x1, 0x10001, 0x1ff, 0x0, 0xffff249c, 0x0, 0x3d}, r4, 0x10, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) r5 = gettid() getpriority(0x0, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r6, &(0x7f0000000080)="01", 0x292e9) 23:45:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) [ 938.519800] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:45:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) [ 938.581481] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 938.639271] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:45:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20860000}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x599002, 0x100}, 0x18) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 23:45:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@nouid32}]}) 23:45:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 938.735921] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:45:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 23:45:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 938.855015] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 938.871739] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="95"]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x402, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000280)="aa", 0x1}, {0x0}], 0x2, 0x5, 0xffffffff) statx(r0, &(0x7f0000000100)='./file0\x00', 0x400, 0x20, &(0x7f00000002c0)) [ 938.893441] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 939.018871] tmpfs: Unknown parameter '•' [ 939.046695] tmpfs: Unknown parameter '•' 23:45:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, 0x24010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0xfffffffffffffff7, 0x10000, 0x1, 0x0, 0x1, [0x10000, 0x9, 0x1, 0x3f]}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x129100) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=0xff) r5 = fsmount(r4, 0xc84fd6af836aafc6, 0x8a) timer_create(0x89df3bc7ec293206, &(0x7f00000002c0)={0x0, 0xf, 0x1}, &(0x7f0000000300)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r7 = accept4$unix(r4, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000209000b0018000000c1e058f8", @ANYRES32=r7, @ANYBLOB="0008000000000000b1a92cc4295cbec0"]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) bind$packet(r8, &(0x7f0000000240)={0x11, 0x6, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) 23:45:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 1) 23:45:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 23:45:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x44da0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000380), &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e25, @remote}, {0x2, 0x0, @broadcast}, 0x182, 0x0, 0x0, 0x0, 0x100, 0x0, 0x100000001, 0xb50c}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000300)=""/78, &(0x7f0000000180)=0x4e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x8, 0x7, 0x7, 0xfffffe00, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r4, 0x20) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a0006000802110000010000fda8c073dd94e80e040a00300008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000400ffffffffffff00000a00060008021100000000000a001a0008021100000000000a0006d0fa3caa71f05f882492dd3be58b8e7fcddb301beac8f5c5d629c48400726fb4ce3d8d9fbd06686edeb20e16d7c07907aae10a683dec1f6e610349f47026dc3f16bee223781258bcfb4eab6810ff4ab03cde3506b47881203e0120eef3b78944d3081d985547a5ba02bc870800000000000000d9f53022b7b070b2dfcf221f2a1437d8d5cfedb27e333e45ad1e32783a3c42293c138dd582ab0d5702ca3c8a597dc15385ae6708000000000000002c0727634327bf033df2d997ab576516e9562f498fb22e294af29ba97a8d4b46415ea98ffe8a0b41d5909c55b230a2b0c5b9260cd49da84e86c72656122c325ed2e8057c4eefad0b6c758bccfff0a12983b89448371eac3b840000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x513b00, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) 23:45:54 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:45:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 23:45:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 953.808471] FAULT_INJECTION: forcing a failure. [ 953.808471] name failslab, interval 1, probability 0, space 0, times 0 [ 953.810384] CPU: 1 PID: 7387 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 953.811540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 953.812675] Call Trace: [ 953.813106] [ 953.813447] dump_stack_lvl+0x8f/0xb7 [ 953.814066] should_fail_ex.cold+0x5/0xa [ 953.814665] ? getname_flags.part.0+0x50/0x4f0 [ 953.815353] should_failslab+0x9/0x20 [ 953.815934] kmem_cache_alloc+0x5a/0x410 [ 953.816570] getname_flags.part.0+0x50/0x4f0 [ 953.817266] __x64_sys_mkdir+0xde/0x150 [ 953.817891] do_syscall_64+0x3f/0x90 [ 953.818462] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 953.819243] RIP: 0033:0x7f5f4703bc27 [ 953.819833] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 953.822413] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 953.823552] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703bc27 [ 953.824616] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 953.825815] RBP: 00007f5f445b2040 R08: 0000000000000000 R09: 00000000000000a8 [ 953.826870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000080 [ 953.827901] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 953.828941] [ 953.846861] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 953.877113] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 953.927056] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:45:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x59}, 0x0) 23:45:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) 23:45:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x269f, &(0x7f0000000000)={0x0, 0x25c6, 0x4, 0x3, 0x7d}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x1d0000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:45:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 2) 23:45:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:54 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x4, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x78000, 0x0) readahead(r0, 0x10000, 0xa3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x11) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) clone3(&(0x7f00000005c0)={0x20000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x2e}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000780)=""/102400, 0xfffffffffffffffc, 0x0, {r3}}, 0x58) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x404000, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$LOOP_CTL_REMOVE(r6, 0x4c80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000140)=0x4) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="4100f7000000000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c) [ 954.178361] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 954.211561] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 954.217539] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 954.247470] No source specified 23:45:55 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e02000000000000006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=wfdno,\x00']) 23:45:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 3) 23:45:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:45:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) [ 954.421447] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 954.430945] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 954.431904] FAULT_INJECTION: forcing a failure. [ 954.431904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.433522] CPU: 0 PID: 7425 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 954.434057] FAULT_INJECTION: forcing a failure. [ 954.434057] name failslab, interval 1, probability 0, space 0, times 0 [ 954.434524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.434543] Call Trace: [ 954.434552] [ 954.437259] dump_stack_lvl+0x8f/0xb7 [ 954.437761] should_fail_ex.cold+0x5/0xa [ 954.438286] strncpy_from_user+0x38/0x3e0 [ 954.438813] getname_flags.part.0+0x95/0x4f0 [ 954.439385] __x64_sys_mkdir+0xde/0x150 [ 954.439900] do_syscall_64+0x3f/0x90 [ 954.440430] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 954.441101] RIP: 0033:0x7f5f4703bc27 [ 954.441607] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.444029] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 954.445066] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703bc27 [ 954.446022] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 954.446988] RBP: 00007f5f445b2040 R08: 0000000000000000 R09: 00000000000000a8 [ 954.447939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000080 [ 954.448901] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 954.449932] [ 954.450262] CPU: 1 PID: 7427 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 954.451064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.451881] Call Trace: [ 954.452155] [ 954.452399] dump_stack_lvl+0x8f/0xb7 [ 954.452817] should_fail_ex.cold+0x5/0xa [ 954.453247] should_failslab+0x9/0x20 [ 954.453647] __kmem_cache_alloc_node+0x5b/0x400 [ 954.454118] ? p9pdu_readf+0xb51/0x1ce0 [ 954.454539] ? p9pdu_readf+0xb51/0x1ce0 [ 954.454957] __kmalloc+0x46/0xc0 [ 954.455313] p9pdu_readf+0xb51/0x1ce0 [ 954.455722] ? __pfx_p9_client_rpc+0x10/0x10 [ 954.456172] ? __pfx_p9pdu_readf+0x10/0x10 [ 954.456622] ? p9_fd_poll+0x1e0/0x2c0 [ 954.457046] ? p9_fd_create+0x361/0x4b0 [ 954.457460] ? __pfx_p9_fd_create+0x10/0x10 [ 954.457898] ? kasan_quarantine_put+0x8f/0x1f0 [ 954.458389] ? p9_client_create+0x7ee/0x1050 [ 954.458846] p9_client_create+0xb4f/0x1050 [ 954.459295] ? __pfx_p9_client_create+0x10/0x10 [ 954.459767] ? lock_is_held_type+0xdb/0x130 [ 954.460220] ? lockdep_init_map_type+0x21e/0x7f0 [ 954.460715] ? __raw_spin_lock_init+0x3a/0x110 [ 954.461209] v9fs_session_init+0x1e1/0x1670 [ 954.461641] ? __kmem_cache_alloc_node+0x25b/0x400 [ 954.462154] ? __pfx_lock_release+0x10/0x10 [ 954.462604] ? __pfx_v9fs_session_init+0x10/0x10 [ 954.463088] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 954.463599] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 954.464153] ? lock_is_held_type+0xdb/0x130 [ 954.464608] v9fs_mount+0xbd/0xbd0 [ 954.464998] ? __pfx_v9fs_mount+0x10/0x10 [ 954.465423] ? cap_capable+0x1da/0x240 [ 954.465838] ? __pfx_v9fs_mount+0x10/0x10 [ 954.466263] legacy_get_tree+0x109/0x220 [ 954.466679] vfs_get_tree+0x92/0x300 [ 954.467061] path_mount+0x1314/0x1e30 [ 954.467455] ? kasan_quarantine_put+0x8f/0x1f0 [ 954.467934] ? __pfx_path_mount+0x10/0x10 [ 954.468366] ? putname+0x102/0x140 [ 954.468744] __x64_sys_mount+0x286/0x310 [ 954.469173] ? __pfx___x64_sys_mount+0x10/0x10 [ 954.469653] ? syscall_enter_from_user_mode+0x21/0x50 [ 954.470179] do_syscall_64+0x3f/0x90 [ 954.470574] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 954.471102] RIP: 0033:0x7f767b249b19 [ 954.471478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.473199] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 954.473930] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 954.474613] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 954.475304] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 954.475983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.476697] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 954.477421] [ 954.564650] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:09 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, 0x0, 0x40000, 0x1) socketpair(0x23, 0xa, 0x101, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000880)="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", 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FITHAW(r0, 0xc0045878) 23:46:09 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:46:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffc, 0x4000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00']) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) syncfs(r6) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB]) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x80000001) 23:46:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:09 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/108, 0x6c}, {0x0}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x7, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f0000000140)=""/185, 0xb9}, {&(0x7f0000000200)=""/61, 0x3d}], 0x3, &(0x7f0000002d40)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000008c0)=""/177, 0xb1}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f0000001a40)=""/131, 0x83}, {&(0x7f0000001b00)=""/153, 0x99}, {&(0x7f0000002c40)=""/216, 0xd8}], 0xa, 0x0) ioprio_get$pid(0x2, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioprio_set$pid(0x3, r3, 0x2007) sendfile(r1, r2, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x7, 0x5}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x9, 0x7, 0xfe, 0x7, 0x0, 0xc604, 0x1090, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x7ff}, 0x10923, 0x19c33ea2, 0x0, 0x4, 0x4, 0x40, 0x8, 0x0, 0xf2, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r4, 0x8) 23:46:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 4) 23:46:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) [ 968.879806] No source specified [ 968.894638] FAULT_INJECTION: forcing a failure. [ 968.894638] name failslab, interval 1, probability 0, space 0, times 0 [ 968.895784] CPU: 0 PID: 7444 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 968.896376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.896979] Call Trace: [ 968.897181] [ 968.897385] dump_stack_lvl+0x8f/0xb7 [ 968.897716] should_fail_ex.cold+0x5/0xa [ 968.898057] ? __kmem_cache_create+0x21b/0x5d0 [ 968.898443] should_failslab+0x9/0x20 [ 968.898760] kmem_cache_alloc_node+0x5d/0x420 [ 968.899138] __kmem_cache_create+0x21b/0x5d0 [ 968.899529] kmem_cache_create_usercopy+0x201/0x2f0 [ 968.899950] p9_client_create+0xc89/0x1050 [ 968.900314] ? __pfx_p9_client_create+0x10/0x10 [ 968.900708] ? lock_is_held_type+0xdb/0x130 [ 968.901076] ? lockdep_init_map_type+0x21e/0x7f0 [ 968.901488] ? __raw_spin_lock_init+0x3a/0x110 [ 968.901874] v9fs_session_init+0x1e1/0x1670 [ 968.902215] ? __kmem_cache_alloc_node+0x25b/0x400 [ 968.902602] ? __pfx_lock_release+0x10/0x10 [ 968.902938] ? __pfx_v9fs_session_init+0x10/0x10 [ 968.903325] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 968.903699] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 968.904115] ? lock_is_held_type+0xdb/0x130 [ 968.904478] v9fs_mount+0xbd/0xbd0 [ 968.904765] ? __pfx_v9fs_mount+0x10/0x10 [ 968.905099] ? cap_capable+0x1da/0x240 [ 968.905419] ? __pfx_v9fs_mount+0x10/0x10 [ 968.905751] legacy_get_tree+0x109/0x220 [ 968.906073] vfs_get_tree+0x92/0x300 [ 968.906373] path_mount+0x1314/0x1e30 [ 968.906679] ? kasan_quarantine_put+0x8f/0x1f0 [ 968.907028] ? __pfx_path_mount+0x10/0x10 [ 968.907359] ? putname+0x102/0x140 [ 968.907654] __x64_sys_mount+0x286/0x310 [ 968.907968] ? __pfx___x64_sys_mount+0x10/0x10 [ 968.908329] ? syscall_enter_from_user_mode+0x21/0x50 [ 968.908722] do_syscall_64+0x3f/0x90 [ 968.909042] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 968.909447] RIP: 0033:0x7f767b249b19 [ 968.909727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 968.911045] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 968.911615] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 968.912148] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 968.912672] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 968.913191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.913710] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 968.914262] [ 968.914605] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 968.915136] CPU: 0 PID: 7444 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 968.915726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.916378] Call Trace: [ 968.916580] [ 968.916756] dump_stack_lvl+0x8f/0xb7 [ 968.917062] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 968.917519] p9_client_create+0xc89/0x1050 [ 968.917859] ? __pfx_p9_client_create+0x10/0x10 [ 968.918218] ? lock_is_held_type+0xdb/0x130 [ 968.918544] ? lockdep_init_map_type+0x21e/0x7f0 [ 968.918912] ? __raw_spin_lock_init+0x3a/0x110 [ 968.919268] v9fs_session_init+0x1e1/0x1670 [ 968.919592] ? __kmem_cache_alloc_node+0x25b/0x400 [ 968.919967] ? __pfx_lock_release+0x10/0x10 [ 968.920299] ? __pfx_v9fs_session_init+0x10/0x10 [ 968.920656] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 968.921027] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 968.921427] ? lock_is_held_type+0xdb/0x130 [ 968.921787] v9fs_mount+0xbd/0xbd0 [ 968.922066] ? __pfx_v9fs_mount+0x10/0x10 [ 968.922386] ? cap_capable+0x1da/0x240 [ 968.922699] ? __pfx_v9fs_mount+0x10/0x10 [ 968.923022] legacy_get_tree+0x109/0x220 [ 968.923352] vfs_get_tree+0x92/0x300 [ 968.923652] path_mount+0x1314/0x1e30 [ 968.923945] ? kasan_quarantine_put+0x8f/0x1f0 [ 968.924317] ? __pfx_path_mount+0x10/0x10 [ 968.924648] ? putname+0x102/0x140 [ 968.924934] __x64_sys_mount+0x286/0x310 [ 968.925263] ? __pfx___x64_sys_mount+0x10/0x10 [ 968.925620] ? syscall_enter_from_user_mode+0x21/0x50 [ 968.926014] do_syscall_64+0x3f/0x90 [ 968.926312] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 968.926695] RIP: 0033:0x7f767b249b19 [ 968.926969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 968.928304] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 968.928859] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 968.929382] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 968.929918] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 968.930421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.930942] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 968.931480] [ 968.935841] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 968.944310] device lo entered promiscuous mode [ 968.951030] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 5) [ 969.083891] No source specified [ 969.135517] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 969.155515] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 969.166091] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:09 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/108, 0x6c}, {0x0}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x7, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f0000000140)=""/185, 0xb9}, {&(0x7f0000000200)=""/61, 0x3d}], 0x3, &(0x7f0000002d40)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000008c0)=""/177, 0xb1}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f0000001a40)=""/131, 0x83}, {&(0x7f0000001b00)=""/153, 0x99}, {&(0x7f0000002c40)=""/216, 0xd8}], 0xa, 0x0) ioprio_get$pid(0x2, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioprio_set$pid(0x3, r3, 0x2007) sendfile(r1, r2, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x7, 0x5}}, './file1/file0\x00'}) perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x9, 0x7, 0xfe, 0x7, 0x0, 0xc604, 0x1090, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x7ff}, 0x10923, 0x19c33ea2, 0x0, 0x4, 0x4, 0x40, 0x8, 0x0, 0xf2, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r4, 0x8) 23:46:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:46:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 23:46:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 969.295954] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 969.303991] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 6) 23:46:26 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x9, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:46:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_uring_setup(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) 23:46:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:46:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf4, 0x9, 0xff, 0x6, 0x0, 0x1, 0xc8000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x26, 0x2, @perf_config_ext={0x9, 0x5}, 0x40506, 0x40, 0x100, 0x7, 0x286c, 0xd17, 0x1f, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@noextend}]}}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe3, 0x2, 0x1, 0x6, 0x0, 0x8, 0x4010, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000280)}, 0x0, 0x3, 0x2, 0x7, 0x4, 0x6, 0x2, 0x0, 0xffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) 23:46:26 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x10, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x67, 0x1f, 0x80, 0x0, 0x4, 0xa3c4d, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe000000, 0x1, @perf_config_ext={0x100000000, 0x1}, 0x40881, 0xc295, 0x8, 0x6, 0x1f, 0x1ff, 0x8, 0x0, 0x7, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x1e0, 0x0, &(0x7f0000000e00), 0x0, 0x0) execveat(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x2c, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8000) 23:46:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) [ 985.808717] FAULT_INJECTION: forcing a failure. [ 985.808717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.809594] CPU: 0 PID: 7496 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 985.810154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 985.810709] Call Trace: [ 985.810898] [ 985.811065] dump_stack_lvl+0x8f/0xb7 [ 985.811370] should_fail_ex.cold+0x5/0xa [ 985.811684] _copy_from_user+0x2e/0x180 [ 985.811989] memdup_user+0x72/0xd0 [ 985.812268] strndup_user+0x78/0xe0 [ 985.812551] __x64_sys_mount+0x137/0x310 [ 985.812861] ? __pfx___x64_sys_mount+0x10/0x10 [ 985.813192] ? syscall_enter_from_user_mode+0x21/0x50 [ 985.813591] ? syscall_enter_from_user_mode+0x21/0x50 [ 985.813986] do_syscall_64+0x3f/0x90 [ 985.814277] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 985.814662] RIP: 0033:0x7f5f4703e04a [ 985.814944] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 985.816187] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 985.816745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 985.817242] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 985.817779] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 985.818268] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 985.818789] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 985.819306] [ 985.823640] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 985.830882] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, 0x0) 23:46:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 7) [ 986.031793] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) [ 986.056555] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:26 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r8, &(0x7f0000000040)=0xffffffffffffffc0, r8, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r9, &(0x7f0000000040)=0xffffffffffffffc0, r9, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000140)=[r1, r8, r2, r9, 0xffffffffffffffff, r2, r7], 0x7}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) gettid() r10 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r6, r5, r0, r10], 0x4) [ 986.092849] FAULT_INJECTION: forcing a failure. [ 986.092849] name failslab, interval 1, probability 0, space 0, times 0 [ 986.094447] CPU: 0 PID: 7512 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 986.095462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 986.096483] Call Trace: [ 986.096820] [ 986.097118] dump_stack_lvl+0x8f/0xb7 [ 986.097665] should_fail_ex.cold+0x5/0xa [ 986.098201] should_failslab+0x9/0x20 [ 986.098709] __kmem_cache_alloc_node+0x5b/0x400 [ 986.099321] ? copy_mount_options+0x55/0x180 [ 986.099927] kmalloc_trace+0x26/0x60 [ 986.100428] copy_mount_options+0x55/0x180 [ 986.100999] __x64_sys_mount+0x1ac/0x310 [ 986.101554] ? __pfx___x64_sys_mount+0x10/0x10 [ 986.102172] ? syscall_enter_from_user_mode+0x21/0x50 23:46:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)) [ 986.102863] ? syscall_enter_from_user_mode+0x21/0x50 [ 986.103697] do_syscall_64+0x3f/0x90 [ 986.104200] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 986.104885] RIP: 0033:0x7f5f4703e04a [ 986.105394] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.107671] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 986.108654] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 986.109585] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 986.110512] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 986.111425] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 986.112346] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 986.113284] 23:46:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x5b20570f, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) dup2(r2, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e, 0x20008000005) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xbc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="2c18790342edec", 0x7}, {&(0x7f0000000180)="77c36439289cd1ce47cc2dd49e1eb48c292b5f065bdb50decc0863360915b27fb5074b05f16c0029", 0x28}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c", 0x9f}], 0x3, 0x9e74, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) r5 = dup(0xffffffffffffffff) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) 23:46:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 8) [ 986.260085] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. [ 986.296104] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 986.314528] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 986.434042] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) 23:46:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e343930383135343034000000000000", 0xa8, 0x400}, {&(0x7f0000010100)="00000000000000000000000028305c8a835f4f4da440baa59e2884cb010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000", 0x2b, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000", 0x1e, 0x4100}, {0x0}, {0x0}, {0x0}, {&(0x7f0000013000)}, {0x0}, {&(0x7f0000013400)="504d4d00504d4dff", 0x8, 0x40000}, {0x0}], 0x1000810, &(0x7f0000013a00)) 23:46:45 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r8, &(0x7f0000000040)=0xffffffffffffffc0, r8, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r9, &(0x7f0000000040)=0xffffffffffffffc0, r9, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000140)=[r1, r8, r2, r9, 0xffffffffffffffff, r2, r7], 0x7}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) gettid() r10 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r6, r5, r0, r10], 0x4) 23:46:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 9) 23:46:45 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x765, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="646174e34605c0368d8dee642c00efcda7d93b77c96eb93d8cb35c0f47bf757eca2ca52bf96e53eb9df09c4923fc488560e85f5aa784d16f202571de91493b25228afde2313822c5b5e2e9f9668e004b90ae8b8c57101c990b64cb9e7455f33832686a0da28c390c38c8ab02110915f7562ce6d10100"/136]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = geteuid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) sendmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r4}}}], 0x38}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xe8420, &(0x7f0000000740)={'trans=unix,', {[{@cache_fscache}, {@posixacl}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r9}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@measure}]}}) sendmmsg$unix(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}], 0x38}}], 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2, r1}, {0x2, 0x0, r2}, {0x2, 0x5, 0xee00}], {0x4, 0x6}, [{0x8, 0x1, r4}, {0x8, 0x2, r6}, {0x8, 0xa}, {0x8, 0x1, r7}, {0x8, 0x2, r9}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x4}, {0x8, 0x6, r10}], {0x10, 0x4}, {0x20, 0x1}}, 0x8c, 0x2) 23:46:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)) [ 1004.356633] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1004.361896] FAULT_INJECTION: forcing a failure. [ 1004.361896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.363461] CPU: 0 PID: 7549 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1004.364525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.365619] Call Trace: [ 1004.365976] [ 1004.366308] dump_stack_lvl+0x8f/0xb7 [ 1004.366885] should_fail_ex.cold+0x5/0xa [ 1004.367468] _copy_from_user+0x2e/0x180 [ 1004.368018] copy_mount_options+0x76/0x180 [ 1004.368616] __x64_sys_mount+0x1ac/0x310 [ 1004.369176] ? __pfx___x64_sys_mount+0x10/0x10 [ 1004.369829] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.370537] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.371267] do_syscall_64+0x3f/0x90 [ 1004.371798] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1004.372483] RIP: 0033:0x7f5f4703e04a [ 1004.372997] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.375335] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1004.376329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 1004.377260] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 1004.378208] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 1004.379129] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 1004.380043] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 1004.380986] [ 1004.402753] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. [ 1004.407946] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1004.417564] FAULT_INJECTION: forcing a failure. [ 1004.417564] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.419299] CPU: 1 PID: 7553 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1004.420374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.421443] Call Trace: [ 1004.421799] [ 1004.422116] dump_stack_lvl+0x8f/0xb7 [ 1004.422671] should_fail_ex.cold+0x5/0xa [ 1004.423243] ? __kernfs_new_node+0xd4/0x8c0 [ 1004.423844] should_failslab+0x9/0x20 [ 1004.424375] kmem_cache_alloc+0x5a/0x410 [ 1004.424935] __kernfs_new_node+0xd4/0x8c0 [ 1004.425523] ? __pfx___kernfs_new_node+0x10/0x10 [ 1004.426209] ? perf_trace_lock+0xf0/0x560 [ 1004.426796] ? __pfx_perf_trace_lock+0x10/0x10 [ 1004.427424] ? mark_lock.part.0+0xef/0x2f70 [ 1004.428002] kernfs_create_dir_ns+0xa0/0x230 [ 1004.428631] sysfs_create_dir_ns+0x12b/0x2a0 [ 1004.429246] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1004.429933] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1004.430591] ? kobject_add_internal+0x12f/0x8e0 [ 1004.431252] ? do_raw_spin_unlock+0x53/0x220 [ 1004.431870] kobject_add_internal+0x24c/0x8e0 [ 1004.432498] kobject_init_and_add+0x105/0x160 [ 1004.433137] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1004.433847] ? up_write+0x1b0/0x520 [ 1004.434362] ? kernfs_find_ns+0x2d9/0x3e0 [ 1004.434952] sysfs_slab_add+0x178/0x220 [ 1004.435514] __kmem_cache_create+0x461/0x5d0 [ 1004.436120] kmem_cache_create_usercopy+0x201/0x2f0 [ 1004.436802] p9_client_create+0xc89/0x1050 [ 1004.437416] ? __pfx_p9_client_create+0x10/0x10 [ 1004.438099] ? lock_is_held_type+0xdb/0x130 [ 1004.438662] ? lockdep_init_map_type+0x21e/0x7f0 [ 1004.439287] ? __raw_spin_lock_init+0x3a/0x110 [ 1004.439903] v9fs_session_init+0x1e1/0x1670 [ 1004.440470] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1004.441105] ? __pfx_lock_release+0x10/0x10 [ 1004.441696] ? __pfx_v9fs_session_init+0x10/0x10 [ 1004.442326] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1004.442977] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1004.443638] ? lock_is_held_type+0xdb/0x130 [ 1004.444227] v9fs_mount+0xbd/0xbd0 [ 1004.444713] ? __pfx_v9fs_mount+0x10/0x10 [ 1004.445254] ? cap_capable+0x1da/0x240 [ 1004.445797] ? __pfx_v9fs_mount+0x10/0x10 [ 1004.446353] legacy_get_tree+0x109/0x220 [ 1004.446929] vfs_get_tree+0x92/0x300 [ 1004.447438] path_mount+0x1314/0x1e30 [ 1004.447960] ? kasan_quarantine_put+0x8f/0x1f0 [ 1004.448589] ? __pfx_path_mount+0x10/0x10 [ 1004.449141] ? putname+0x102/0x140 [ 1004.449662] __x64_sys_mount+0x286/0x310 [ 1004.450243] ? __pfx___x64_sys_mount+0x10/0x10 [ 1004.450879] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.451578] do_syscall_64+0x3f/0x90 [ 1004.452096] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1004.452788] RIP: 0033:0x7f767b249b19 [ 1004.453293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.455602] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1004.456566] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1004.457461] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1004.458361] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1004.459266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.460193] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1004.461136] [ 1004.461597] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 1004.462824] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1004.463776] CPU: 1 PID: 7553 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1004.464839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.465890] Call Trace: [ 1004.466244] [ 1004.466566] dump_stack_lvl+0x8f/0xb7 [ 1004.467118] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1004.467834] p9_client_create+0xc89/0x1050 [ 1004.468426] ? __pfx_p9_client_create+0x10/0x10 [ 1004.469080] ? lock_is_held_type+0xdb/0x130 [ 1004.469690] ? lockdep_init_map_type+0x21e/0x7f0 [ 1004.470363] ? __raw_spin_lock_init+0x3a/0x110 [ 1004.470998] v9fs_session_init+0x1e1/0x1670 [ 1004.471576] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1004.472235] ? __pfx_lock_release+0x10/0x10 [ 1004.472810] ? __pfx_v9fs_session_init+0x10/0x10 [ 1004.473472] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1004.474158] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1004.474864] ? lock_is_held_type+0xdb/0x130 [ 1004.475481] v9fs_mount+0xbd/0xbd0 [ 1004.475986] ? __pfx_v9fs_mount+0x10/0x10 [ 1004.476559] ? cap_capable+0x1da/0x240 [ 1004.477113] ? __pfx_v9fs_mount+0x10/0x10 [ 1004.477695] legacy_get_tree+0x109/0x220 [ 1004.478273] vfs_get_tree+0x92/0x300 [ 1004.478806] path_mount+0x1314/0x1e30 [ 1004.479342] ? kasan_quarantine_put+0x8f/0x1f0 [ 1004.479982] ? __pfx_path_mount+0x10/0x10 [ 1004.480574] ? putname+0x102/0x140 [ 1004.481094] __x64_sys_mount+0x286/0x310 [ 1004.481679] ? __pfx___x64_sys_mount+0x10/0x10 [ 1004.482320] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.483046] do_syscall_64+0x3f/0x90 [ 1004.483579] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1004.484292] RIP: 0033:0x7f767b249b19 [ 1004.484803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.487154] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1004.488165] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1004.489111] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1004.490070] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1004.491005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.491941] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1004.492915] 23:46:45 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x6a]}, 0x8, 0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) fstat(r1, &(0x7f0000000200)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) getsockname(r2, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000140)=0x80) 23:46:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1004.528010] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x4000, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x3}, {0x4, 0x7fff}]}, 0x14, 0x1) 23:46:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)) 23:46:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 10) [ 1004.616049] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1004.627807] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1004.638567] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none. 23:46:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1004.766556] FAULT_INJECTION: forcing a failure. [ 1004.766556] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.768044] CPU: 0 PID: 7571 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1004.769048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.770066] Call Trace: [ 1004.770405] [ 1004.770706] dump_stack_lvl+0x8f/0xb7 [ 1004.771228] should_fail_ex.cold+0x5/0xa [ 1004.771764] ? getname_flags.part.0+0x50/0x4f0 [ 1004.772366] should_failslab+0x9/0x20 [ 1004.772870] kmem_cache_alloc+0x5a/0x410 [ 1004.773399] ? asm_exc_page_fault+0x26/0x30 [ 1004.773996] getname_flags.part.0+0x50/0x4f0 [ 1004.774597] getname_flags+0x9e/0xf0 [ 1004.775106] user_path_at_empty+0x2f/0x70 [ 1004.775659] __x64_sys_mount+0x1ed/0x310 [ 1004.776205] ? __pfx___x64_sys_mount+0x10/0x10 [ 1004.776829] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.777529] ? syscall_enter_from_user_mode+0x21/0x50 [ 1004.778239] do_syscall_64+0x3f/0x90 [ 1004.778756] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1004.779444] RIP: 0033:0x7f5f4703e04a [ 1004.779935] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.782215] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1004.783187] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 1004.784079] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 1004.785006] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 1004.785927] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 1004.786828] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 1004.787763] 23:46:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) [ 1004.855554] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 1) [ 1004.884002] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002740), 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "65b9b81c796576e041a56ba1c240f26b5e0ca49226182cdd092df2bb4b5d2727c29d3f54b844d6bef82c2662f595e784f9561b574fdbf4f6d0a648e9f8ca09ef"}, 0x48, 0xfffffffffffffffd) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x0, 0x1, 0xadf, 0x0, 0xe2}}) keyctl$read(0xb, r1, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1e72251008c1fdab246c33fe298e8d00a5ea68d9e217859f899e54333776a1660869ef2b267d447014af336ff0b81830089cb9297cabffe1356ef01f54140816"}, 0x48, 0xfffffffffffffffb) keyctl$read(0x11, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x11, r3, r3) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)=',)-5\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) readv(r0, &(0x7f0000000000), 0x0) 23:46:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 11) 23:46:45 executing program 7: getpid() r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r5, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}}) open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0xa0) 23:46:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1005.029085] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:46:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:46:46 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb", 0x0, 0x1}) dup3(r0, 0xffffffffffffffff, 0x80000) 23:46:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) 23:46:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 12) 23:46:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="03f093a3f84bc6b519d538fa17f55a84bffcc2bb500239641b28", 0x1a}], 0x1) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x2, 0x2, 0x3, 0x2, 0x1000}, 0xffff, 0x10001}) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) 23:46:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1005.306151] FAULT_INJECTION: forcing a failure. [ 1005.306151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.308456] CPU: 0 PID: 7596 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1005.309776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1005.311097] Call Trace: [ 1005.311538] [ 1005.311921] dump_stack_lvl+0x8f/0xb7 [ 1005.312601] should_fail_ex.cold+0x5/0xa [ 1005.313302] strncpy_from_user+0x38/0x3e0 [ 1005.314004] getname_flags.part.0+0x95/0x4f0 [ 1005.314764] getname_flags+0x9e/0xf0 [ 1005.315409] user_path_at_empty+0x2f/0x70 [ 1005.316130] __x64_sys_mount+0x1ed/0x310 [ 1005.316829] ? __pfx___x64_sys_mount+0x10/0x10 [ 1005.317633] ? syscall_enter_from_user_mode+0x21/0x50 [ 1005.318370] ? syscall_enter_from_user_mode+0x21/0x50 [ 1005.319046] do_syscall_64+0x3f/0x90 [ 1005.319584] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1005.320285] RIP: 0033:0x7f5f4703e04a [ 1005.320790] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1005.323136] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1005.324149] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 1005.325091] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 1005.326024] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 1005.326962] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 1005.327907] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 1005.328868] [ 1005.360318] 9pnet_fd: Insufficient options for proto=fd [ 1005.528779] 9pnet_fd: Insufficient options for proto=fd [ 1006.948314] Bluetooth: hci2: command 0x0406 tx timeout 23:47:03 executing program 0: syz_mount_image$iso9660(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', 0x0, 0x2, &(0x7f0000002900)=[{&(0x7f0000001840)="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", 0xf82, 0x7f}, {&(0x7f0000002840)='W', 0x1}], 0x6080, &(0x7f0000000000)=ANY=[@ANYBLOB="343b7ed6a47b419cc2569611d3a79b005db1f8181c8957d67f9cc4faf159e718944b571387626255698b79b810787bd1c2623d4f0c4dc339ca594b2f881c0ff350a3411d71d32786918b6657dd19697a7025f73988ca671e1a574589d6f386eccbbe59b31458bb265c46f68507000000d38c6f1f8c507bad40dac776fd5ff13a19b53c39eb8d72ec20e3e60052f757c0ccf740279a9b75da0ea99dcf898740d52a0621a58120b8cf05fb605d50ccab287b9e1c58900cdf6127ee1bb70891b3ba89b23dd2afb219036692075aca7c6da8dbdfead662bbdddb8e4ebdb9a52d69980b616a8b2390a8b6a864b3840098edfd509debd54d8d955100"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) futimesat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}) 23:47:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 23:47:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:03 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000025c0)={{0x10b, 0x0, 0x9, 0x2eb, 0x2ce}, "41e1d29615b8bd663139c0d94831170f20beff29f8c54c7ea279ce3edc0dda22d4afe777d67624303e26bc40e0d0d725ad0554a7c4db805c7c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x659) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2d5c3125407eba16d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f22665394658341ba90e0786a9b87b289d1a1b06c1f2ac2916954b6df8b25cd71d7f317e97e4bc1efaabfb88f70c7448788981a709cb85aac2e30c7c0d92d4cdc5cfa89b93887d6d23df6ac4b4c77740d5237dcf81fe6af42665aed0e72cfe1c67cffae014d7d3c9596cf6a2e670e35f5799d4c0d4ac99896a0680942c6e7f0fc902581e130ef1f71e48cb8eb98672efd9df25e14590d3348730e1"], 0x28}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) getpid() recvmmsg(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/73, 0x49}, {&(0x7f0000001680)=""/187, 0xbb}, {&(0x7f0000000180)=""/3, 0x3}], 0x8, &(0x7f00000017c0)=""/214, 0xd6}, 0x10000}, {{&(0x7f00000018c0)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/150, 0x96}, {&(0x7f0000001a00)=""/239, 0xef}, {&(0x7f0000000200)}, {&(0x7f0000001c00)=""/68, 0x44}, {&(0x7f0000001c80)=""/12, 0xc}], 0x5, &(0x7f0000001d40)=""/162, 0xa2}, 0x8000}, {{&(0x7f0000001e00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e80)=""/6, 0x6}], 0x1}, 0x3}, {{&(0x7f0000001f00)=@hci, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)=""/212, 0xd4}, {&(0x7f0000002080)=""/216, 0xd8}, {0x0}], 0x3}, 0xac1d}], 0x4, 0x102, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) 23:47:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 13) 23:47:03 executing program 7: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000001700)=""/201) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1271, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_io_uring_setup(0x2245, &(0x7f0000000300)={0x0, 0x7905, 0x10, 0x1, 0x2fc}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d0a000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000380)) mbind(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000200)=0x7, 0x3ff, 0x7) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0xe65) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x2) syz_io_uring_setup(0x48e9, &(0x7f0000000100)={0x0, 0x80c95a, 0x0, 0x1, 0x162}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 23:47:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x306, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:03 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(r0, 0xffffffffffffffff, 0x80000) [ 1022.668369] EXT4-fs: 5 callbacks suppressed [ 1022.668385] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1022.676071] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1022.688834] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1022.700278] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1022.721051] FAULT_INJECTION: forcing a failure. [ 1022.721051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.722654] CPU: 1 PID: 7630 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1022.723708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1022.724755] Call Trace: [ 1022.725103] [ 1022.725414] dump_stack_lvl+0x8f/0xb7 [ 1022.725937] should_fail_ex.cold+0x5/0xa [ 1022.726473] strncpy_from_user+0x38/0x3e0 [ 1022.727021] getname_flags.part.0+0x95/0x4f0 [ 1022.727622] getname_flags+0x9e/0xf0 [ 1022.728128] user_path_at_empty+0x2f/0x70 [ 1022.728685] __x64_sys_mount+0x1ed/0x310 [ 1022.729225] ? __pfx___x64_sys_mount+0x10/0x10 [ 1022.729843] ? syscall_enter_from_user_mode+0x21/0x50 [ 1022.730519] ? syscall_enter_from_user_mode+0x21/0x50 [ 1022.731198] do_syscall_64+0x3f/0x90 [ 1022.731719] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1022.732422] RIP: 0033:0x7f5f4703e04a [ 1022.732905] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1022.735121] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1022.736069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 1022.736980] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 1022.737884] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 1022.738765] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 1022.739650] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 1022.740559] [ 1022.821143] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1022.846495] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x40, 0x20, 0x4, 0x0, 0x7c, 0x4c10, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp, 0x308, 0x401, 0x2, 0x6, 0x7ff, 0x121f, 0x4, 0x0, 0xfffffffd, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000004c0)) r4 = epoll_create(0x101) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x3d}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r2, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:47:17 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 23:47:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x500, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 23:47:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 14) 23:47:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = signalfd(r0, &(0x7f0000000040)={[0x9]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="01004b2541429e7969bfa10a", @ANYRES32=r0, @ANYBLOB='\v\b\x00\x00\x00\x00\x00\x00./file1/file0\x00']) 23:47:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:17 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8041, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00', {0x4}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001180)={0x0, "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"}) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f0000000700)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1037.097798] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1037.113314] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1037.121434] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1037.131948] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1037.138400] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 15) 23:47:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x600, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1037.222849] FAULT_INJECTION: forcing a failure. [ 1037.222849] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.223709] CPU: 1 PID: 7666 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1037.224264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.224830] Call Trace: [ 1037.225023] [ 1037.225192] dump_stack_lvl+0x8f/0xb7 [ 1037.225489] should_fail_ex.cold+0x5/0xa [ 1037.225792] should_failslab+0x9/0x20 [ 1037.226257] __kmem_cache_alloc_node+0x5b/0x400 [ 1037.226774] ? ext4_init_fs_context+0x41/0xd0 [ 1037.227100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1037.227448] kmalloc_trace+0x26/0x60 [ 1037.227727] ext4_init_fs_context+0x41/0xd0 [ 1037.228035] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 1037.228393] alloc_fs_context+0x563/0x9d0 [ 1037.228701] path_mount+0x908/0x1e30 [ 1037.228986] ? __pfx_path_mount+0x10/0x10 [ 1037.229293] ? putname+0x102/0x140 [ 1037.229571] __x64_sys_mount+0x286/0x310 [ 1037.229864] ? __pfx___x64_sys_mount+0x10/0x10 [ 1037.230250] ? syscall_enter_from_user_mode+0x21/0x50 [ 1037.230627] do_syscall_64+0x3f/0x90 [ 1037.230908] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1037.231287] RIP: 0033:0x7f5f4703e04a [ 1037.231551] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.232816] RSP: 002b:00007f5f445b1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1037.233344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f4703e04a [ 1037.233861] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 1037.234372] RBP: 00007f5f445b2040 R08: 00007f5f445b2040 R09: 0000000020000080 [ 1037.234878] R10: 00000000000000a8 R11: 0000000000000206 R12: 0000000020000080 [ 1037.235380] R13: 0000000020000140 R14: 00007f5f445b2000 R15: 00000000200000c0 [ 1037.235923] [ 1037.315027] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1037.327136] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1038.022498] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 1038.031013] Bluetooth: hci0: Opcode 0x c03 failed: -4 23:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:33 executing program 0: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44191}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xee}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4a, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) 23:47:33 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) accept(0xffffffffffffffff, &(0x7f0000000480)=@nfc_llcp, &(0x7f0000000600)=0x80) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 23:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x603, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 16) 23:47:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 23:47:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x3ff, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x60) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7f, 0x4, 0x1, 0xff, 0x0, 0x93, 0x19, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x81, 0x2}, 0x8000, 0x9, 0x4800000, 0x6, 0x2, 0xe962, 0xffff, 0x0, 0x9, 0x0, 0x800}, 0x0, 0x9, r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r0, 0x0, 0xfffffdef) 23:47:33 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1052.947476] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1052.952893] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1052.958484] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1052.967371] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1052.980793] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 17) 23:47:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 23:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1053.146671] syz-executor.7 uses obsolete (PF_INET,SOCK_PACKET) [ 1053.178024] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1053.200782] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1053.213696] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1053.260315] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1053.268569] FAULT_INJECTION: forcing a failure. [ 1053.268569] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.270074] CPU: 0 PID: 7715 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1053.271135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.272196] Call Trace: [ 1053.272552] 23:47:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 18) [ 1053.272861] dump_stack_lvl+0x8f/0xb7 [ 1053.273567] should_fail_ex.cold+0x5/0xa [ 1053.274116] ? __kernfs_new_node+0xd4/0x8c0 [ 1053.274720] should_failslab+0x9/0x20 [ 1053.275233] kmem_cache_alloc+0x5a/0x410 [ 1053.275782] ? kernfs_add_one+0x175/0x4f0 [ 1053.276344] __kernfs_new_node+0xd4/0x8c0 [ 1053.276903] ? __pfx___kernfs_new_node+0x10/0x10 [ 1053.277544] ? kernfs_add_one+0x17a/0x4f0 [ 1053.278109] kernfs_new_node+0x97/0x120 [ 1053.278661] __kernfs_create_file+0x55/0x350 [ 1053.279255] sysfs_add_file_mode_ns+0x21c/0x440 [ 1053.279878] ? __pfx_slab_attr_store+0x10/0x10 [ 1053.280488] internal_create_group+0x322/0xb20 [ 1053.281111] ? __pfx_internal_create_group+0x10/0x10 [ 1053.281770] ? up_write+0x1b0/0x520 [ 1053.282297] sysfs_slab_add+0x18e/0x220 [ 1053.282834] __kmem_cache_create+0x461/0x5d0 [ 1053.283436] kmem_cache_create_usercopy+0x201/0x2f0 [ 1053.284095] p9_client_create+0xc89/0x1050 [ 1053.284687] ? __pfx_p9_client_create+0x10/0x10 [ 1053.285306] ? lock_is_held_type+0xdb/0x130 [ 1053.285887] ? lockdep_init_map_type+0x21e/0x7f0 [ 1053.286549] ? __raw_spin_lock_init+0x3a/0x110 [ 1053.287170] v9fs_session_init+0x1e1/0x1670 [ 1053.287743] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1053.288409] ? __pfx_lock_release+0x10/0x10 [ 1053.288993] ? __pfx_v9fs_session_init+0x10/0x10 [ 1053.289616] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1053.290295] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1053.290981] ? lock_is_held_type+0xdb/0x130 [ 1053.291571] v9fs_mount+0xbd/0xbd0 [ 1053.292052] ? __pfx_v9fs_mount+0x10/0x10 [ 1053.292597] ? cap_capable+0x1da/0x240 [ 1053.293139] ? __pfx_v9fs_mount+0x10/0x10 [ 1053.293697] legacy_get_tree+0x109/0x220 [ 1053.294269] vfs_get_tree+0x92/0x300 [ 1053.294775] path_mount+0x1314/0x1e30 [ 1053.295291] ? kasan_quarantine_put+0x8f/0x1f0 [ 1053.295902] ? __pfx_path_mount+0x10/0x10 [ 1053.296470] ? putname+0x102/0x140 [ 1053.296974] __x64_sys_mount+0x286/0x310 [ 1053.297514] ? __pfx___x64_sys_mount+0x10/0x10 [ 1053.298127] ? syscall_enter_from_user_mode+0x21/0x50 [ 1053.298820] do_syscall_64+0x3f/0x90 [ 1053.299344] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1053.300032] RIP: 0033:0x7f767b249b19 [ 1053.300517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.302759] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1053.303727] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1053.304635] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1053.305524] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1053.306433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.307342] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1053.308286] 23:47:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8a4, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1053.314642] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1053.353340] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1053.354302] CPU: 0 PID: 7715 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1053.355311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.356310] Call Trace: [ 1053.356642] [ 1053.356945] dump_stack_lvl+0x8f/0xb7 [ 1053.357464] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1053.358171] p9_client_create+0xc89/0x1050 [ 1053.358772] ? __pfx_p9_client_create+0x10/0x10 [ 1053.359382] ? lock_is_held_type+0xdb/0x130 [ 1053.359940] ? lockdep_init_map_type+0x21e/0x7f0 [ 1053.360573] ? __raw_spin_lock_init+0x3a/0x110 [ 1053.361190] v9fs_session_init+0x1e1/0x1670 [ 1053.361758] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1053.362410] ? __pfx_lock_release+0x10/0x10 [ 1053.362987] ? __pfx_v9fs_session_init+0x10/0x10 [ 1053.363605] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1053.364267] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1053.364937] ? lock_is_held_type+0xdb/0x130 [ 1053.365526] v9fs_mount+0xbd/0xbd0 [ 1053.366022] ? __pfx_v9fs_mount+0x10/0x10 [ 1053.366585] ? cap_capable+0x1da/0x240 [ 1053.367126] ? __pfx_v9fs_mount+0x10/0x10 [ 1053.367680] legacy_get_tree+0x109/0x220 [ 1053.368234] vfs_get_tree+0x92/0x300 [ 1053.368741] path_mount+0x1314/0x1e30 [ 1053.369261] ? kasan_quarantine_put+0x8f/0x1f0 [ 1053.369866] ? __pfx_path_mount+0x10/0x10 [ 1053.370447] ? putname+0x102/0x140 [ 1053.370948] __x64_sys_mount+0x286/0x310 [ 1053.371493] ? __pfx___x64_sys_mount+0x10/0x10 [ 1053.372118] ? syscall_enter_from_user_mode+0x21/0x50 [ 1053.372825] do_syscall_64+0x3f/0x90 [ 1053.373336] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1053.374026] RIP: 0033:0x7f767b249b19 [ 1053.374525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.376770] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1053.377729] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1053.378650] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1053.379543] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1053.380459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.381370] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1053.382320] 23:47:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) (fail_nth: 19) 23:47:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1053.668446] FAULT_INJECTION: forcing a failure. [ 1053.668446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.669770] CPU: 1 PID: 7728 Comm: syz-executor.3 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1053.670644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.671504] Call Trace: [ 1053.671794] [ 1053.672053] dump_stack_lvl+0x8f/0xb7 [ 1053.672506] should_fail_ex.cold+0x5/0xa [ 1053.672974] _copy_to_user+0x2e/0x150 [ 1053.673399] simple_read_from_buffer+0xd0/0x170 [ 1053.673935] proc_fail_nth_read+0x19c/0x230 [ 1053.674445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.674980] ? security_file_permission+0xb5/0xe0 [ 1053.675536] vfs_read+0x257/0x940 [ 1053.675941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.676480] ? __pfx_vfs_read+0x10/0x10 [ 1053.676940] ? __fget_files+0x270/0x450 [ 1053.677407] ksys_read+0x12b/0x260 [ 1053.677818] ? __pfx_ksys_read+0x10/0x10 [ 1053.678292] ? syscall_enter_from_user_mode+0x21/0x50 [ 1053.678863] ? syscall_enter_from_user_mode+0x21/0x50 [ 1053.679452] do_syscall_64+0x3f/0x90 [ 1053.679884] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1053.680487] RIP: 0033:0x7f5f46fef69c [ 1053.680917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1053.682793] RSP: 002b:00007f5f445b2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1053.683601] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5f46fef69c [ 1053.684368] RDX: 000000000000000f RSI: 00007f5f445b21e0 RDI: 0000000000000003 [ 1053.685140] RBP: 00007f5f445b21d0 R08: 0000000000000000 R09: 0000000020000080 [ 1053.685901] R10: 00000000000000a8 R11: 0000000000000246 R12: 0000000000000002 [ 1053.686687] R13: 00007fff9f6e131f R14: 00007f5f445b2300 R15: 0000000000022000 [ 1053.687492] 23:47:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) 23:47:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x900, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:50 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100fc0000009ca79f09fbbbe5ac001800000000", @ANYRES32]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0431"], 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x3, 0x6, 0x9, 0x0, 0x7fffffff, 0x100, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x1}, 0x1040c, 0x895, 0x4714, 0x4, 0x40000000, 0x2, 0x84f, 0x0, 0x5, 0x0, 0x18e4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) eventfd2(0xae, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40091) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:47:50 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="000066bf6336a496a50711400000000081a84257b66766626589"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="0c5b6bbf1ff2d5da79accdb8c4a9439602676b21", @ANYBLOB]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 23:47:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:50 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) (fail_nth: 1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:47:50 executing program 7: ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000200), 0x0, 0x722593f8}, {&(0x7f0000000300)="4a772ae9993de871536802e868f817a3abe152b576f24ef872dd6d132f7f7e5a1b17f726fddf08d52ccb62996bf2110da6bda9bf51b01bd23eab7dd24c8c514c914c1333f31115f4b478e51efa72ad4a792bf2825bc1d5c3bc83e064aa3c6ea51c12", 0x62, 0x49d18dd2}], 0x800000, &(0x7f0000000380)={[{'\x00'}, {'.!$/\''}, {'&+(*'}], [{@obj_user={'obj_user', 0x3d, '+/('}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x65, 0x31, 0x53, 0x0, 0x39, 0x64], 0x2d, [0x62, 0x64, 0x63, 0x39], 0x2d, [0x66, 0x61, 0x39, 0x61], 0x2d, [0x62, 0x65, 0x61, 0x34], 0x2d, [0x3, 0x64, 0x36, 0x65, 0x31, 0x36, 0x35, 0x66]}}}]}) openat(r1, &(0x7f0000000400)='./file0\x00', 0x8200, 0x8) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x1, 0x1, 0x5, 0xefcd, 0x6}) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x108) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x9) [ 1069.825752] EXT4-fs: 8 callbacks suppressed [ 1069.825767] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1069.831072] Bluetooth: hci2: unexpected event 0x31 length: 7 > 6 [ 1069.839620] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1069.844739] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1069.848765] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1069.854445] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1069.874539] FAULT_INJECTION: forcing a failure. [ 1069.874539] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:47:50 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000140)={0x11, 0xe7, 0x0, 0x1, 0x5, 0x6, @random="a4d54c462c12"}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$KDSETLED(r0, 0x4b32, 0x1f) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x1000}, 0x4) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000000c0)) [ 1069.875656] CPU: 1 PID: 7756 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1069.876426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.877008] Call Trace: [ 1069.877204] [ 1069.877378] dump_stack_lvl+0x8f/0xb7 [ 1069.877687] should_fail_ex.cold+0x5/0xa [ 1069.877997] _copy_from_user+0x2e/0x180 [ 1069.878297] user_termios_to_kernel_termios+0x22/0x30 [ 1069.878692] set_termios.part.0+0x174/0x3f0 [ 1069.879011] ? __pfx_set_termios.part.0+0x10/0x10 [ 1069.879372] ? lock_acquire.part.0+0x12e/0x340 [ 1069.879725] ? tty_ldisc_ref_wait+0x26/0x90 [ 1069.880045] ? rcu_read_lock_sched_held+0x42/0x80 [ 1069.880419] ? trace_lock_acquire+0x14c/0x1c0 [ 1069.880772] ? vt_ioctl+0x52b/0x2ca0 [ 1069.881072] tty_mode_ioctl+0xa28/0xdb0 [ 1069.881375] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1069.881714] ? __ldsem_down_read_nested+0xc9/0x7c0 [ 1069.882098] ? __ldsem_down_read_nested+0xda/0x7c0 [ 1069.882490] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1069.882951] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1069.883425] n_tty_ioctl_helper+0x4c/0x2d0 [ 1069.883710] n_tty_ioctl+0x4f/0x370 [ 1069.883979] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1069.884277] tty_ioctl+0x842/0x16d0 [ 1069.884548] ? __pfx_tty_ioctl+0x10/0x10 [ 1069.884830] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1069.885250] ? __pfx_lock_release+0x10/0x10 [ 1069.885555] ? trace_lock_acquire+0x14c/0x1c0 [ 1069.885865] ? __pfx___fget_files+0x10/0x10 [ 1069.886172] ? lock_acquire+0x32/0xc0 [ 1069.886471] ? selinux_file_ioctl+0xb5/0x260 [ 1069.886790] ? __pfx_tty_ioctl+0x10/0x10 [ 1069.887085] __x64_sys_ioctl+0x19e/0x210 [ 1069.887383] do_syscall_64+0x3f/0x90 [ 1069.887663] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1069.888033] RIP: 0033:0x7fbd265cfb19 [ 1069.888295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.889407] RSP: 002b:00007fbd23b24188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.889933] RAX: ffffffffffffffda RBX: 00007fbd266e3020 RCX: 00007fbd265cfb19 [ 1069.890424] RDX: 0000000020000800 RSI: 00000000402c542b RDI: 0000000000000003 [ 1069.890917] RBP: 00007fbd23b241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.891400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.891911] R13: 00007ffeb8f90a7f R14: 00007fbd23b24300 R15: 0000000000022000 [ 1069.892423] 23:47:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1069.989478] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1070.001902] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) [ 1070.102118] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1070.107921] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1070.147910] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:47:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:47:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1070.278088] FAULT_INJECTION: forcing a failure. [ 1070.278088] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.279604] CPU: 0 PID: 7781 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1070.280612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1070.281621] Call Trace: [ 1070.281957] [ 1070.282256] dump_stack_lvl+0x8f/0xb7 [ 1070.282785] should_fail_ex.cold+0x5/0xa [ 1070.283327] ? __kernfs_new_node+0xd4/0x8c0 [ 1070.283895] should_failslab+0x9/0x20 [ 1070.284398] kmem_cache_alloc+0x5a/0x410 [ 1070.284941] __kernfs_new_node+0xd4/0x8c0 [ 1070.285485] ? lock_release+0x3b6/0x750 [ 1070.286005] ? __pfx___kernfs_new_node+0x10/0x10 [ 1070.286625] ? __pfx_lock_release+0x10/0x10 [ 1070.287185] ? lock_acquire+0x32/0xc0 [ 1070.287707] ? up_write+0x1b0/0x520 [ 1070.288213] kernfs_new_node+0x97/0x120 [ 1070.288753] __kernfs_create_file+0x55/0x350 [ 1070.289333] sysfs_add_file_mode_ns+0x21c/0x440 [ 1070.289967] ? __pfx_slab_attr_store+0x10/0x10 [ 1070.290587] internal_create_group+0x322/0xb20 [ 1070.291192] ? __pfx_internal_create_group+0x10/0x10 [ 1070.291845] ? up_write+0x1b0/0x520 [ 1070.292353] sysfs_slab_add+0x18e/0x220 [ 1070.292889] __kmem_cache_create+0x461/0x5d0 [ 1070.293477] kmem_cache_create_usercopy+0x201/0x2f0 [ 1070.294127] p9_client_create+0xc89/0x1050 [ 1070.294703] ? __pfx_p9_client_create+0x10/0x10 [ 1070.295310] ? lock_is_held_type+0xdb/0x130 [ 1070.295867] ? lockdep_init_map_type+0x21e/0x7f0 [ 1070.296502] ? __raw_spin_lock_init+0x3a/0x110 [ 1070.297115] v9fs_session_init+0x1e1/0x1670 [ 1070.297689] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1070.298351] ? __pfx_lock_release+0x10/0x10 [ 1070.298953] ? __pfx_v9fs_session_init+0x10/0x10 [ 1070.299583] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1070.300264] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1070.300952] ? lock_is_held_type+0xdb/0x130 [ 1070.301560] v9fs_mount+0xbd/0xbd0 [ 1070.302052] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.302618] ? cap_capable+0x1da/0x240 [ 1070.303156] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.303724] legacy_get_tree+0x109/0x220 23:47:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1070.304286] vfs_get_tree+0x92/0x300 [ 1070.304984] path_mount+0x1314/0x1e30 [ 1070.305499] ? kasan_quarantine_put+0x8f/0x1f0 [ 1070.306122] ? __pfx_path_mount+0x10/0x10 [ 1070.306721] ? putname+0x102/0x140 [ 1070.307231] __x64_sys_mount+0x286/0x310 [ 1070.307792] ? __pfx___x64_sys_mount+0x10/0x10 [ 1070.308414] ? syscall_enter_from_user_mode+0x21/0x50 [ 1070.309117] do_syscall_64+0x3f/0x90 [ 1070.309639] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1070.310331] RIP: 0033:0x7f767b249b19 [ 1070.310838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1070.313120] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1070.314094] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1070.315013] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1070.315920] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1070.316827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.317740] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1070.318704] 23:47:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1070.460487] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1070.461002] CPU: 1 PID: 7781 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1070.461530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1070.462048] Call Trace: [ 1070.462223] [ 1070.462383] dump_stack_lvl+0x8f/0xb7 [ 1070.462666] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1070.463029] p9_client_create+0xc89/0x1050 [ 1070.463324] ? __pfx_p9_client_create+0x10/0x10 [ 1070.463637] ? lock_is_held_type+0xdb/0x130 [ 1070.463928] ? lockdep_init_map_type+0x21e/0x7f0 [ 1070.464250] ? __raw_spin_lock_init+0x3a/0x110 [ 1070.464564] v9fs_session_init+0x1e1/0x1670 [ 1070.464853] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1070.465181] ? __pfx_lock_release+0x10/0x10 [ 1070.465475] ? __pfx_v9fs_session_init+0x10/0x10 [ 1070.465795] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1070.466134] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1070.466490] ? lock_is_held_type+0xdb/0x130 [ 1070.466794] v9fs_mount+0xbd/0xbd0 [ 1070.467045] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.467324] ? cap_capable+0x1da/0x240 [ 1070.467599] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.467880] legacy_get_tree+0x109/0x220 [ 1070.468164] vfs_get_tree+0x92/0x300 [ 1070.468424] path_mount+0x1314/0x1e30 [ 1070.468687] ? kasan_quarantine_put+0x8f/0x1f0 [ 1070.468997] ? __pfx_path_mount+0x10/0x10 [ 1070.469283] ? putname+0x102/0x140 [ 1070.469538] __x64_sys_mount+0x286/0x310 [ 1070.469818] ? __pfx___x64_sys_mount+0x10/0x10 [ 1070.470129] ? syscall_enter_from_user_mode+0x21/0x50 [ 1070.470490] do_syscall_64+0x3f/0x90 [ 1070.470750] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1070.471094] RIP: 0033:0x7f767b249b19 [ 1070.471345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1070.472457] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1070.472934] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1070.473381] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1070.473830] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1070.474276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.474735] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1070.475202] 23:48:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 23:48:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000000040)="20000000b45b0e7ae4976cb482", 0xd, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400", 0x2e, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e031cd625c17921db87344a32a82185660fb17b7b73f5719f6d19966d0d9f4852f46ef5ffce13d48723879e22ff599c6b13e890438da8c52a2ab765a6872a7be16b8edc6e09c771550d47664ed2d594c20eac8cd3232c9f5c50a077a052d74cad907031fe09d0c97d078544815b2198963c546f398b651e9b1992f1e9435b63535cf6a2f3725258de3e72027767f76701ee3b24983c9921fb66d6a0c4b386ec28fa2"]) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)=':\'@\x00') 23:48:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xbe7, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1004, &(0x7f0000000180)='ramfs\x00') unshare(0x20000200) unshare(0x28020080) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 23:48:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x1, 0x2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x2, 0x0, @local, @mcast2, 0x80, 0xf, 0xe0, 0x101}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x19, r2, 0x1, 0x5, 0x6, @random="ed50ee035269"}, 0x14) syz_open_dev$vcsa(&(0x7f0000000340), 0x81, 0x460080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c040) 23:48:06 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) (fail_nth: 2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1070.613947] Bluetooth: hci2: unexpected event 0x31 length: 7 > 6 [ 1085.436794] EXT4-fs: 11 callbacks suppressed [ 1085.436817] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.448898] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.456659] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.462962] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.469370] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.484101] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.500491] FAULT_INJECTION: forcing a failure. [ 1085.500491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.502110] CPU: 0 PID: 7822 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1085.503195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.504239] Call Trace: [ 1085.504593] [ 1085.504904] dump_stack_lvl+0x8f/0xb7 [ 1085.505451] should_fail_ex.cold+0x5/0xa [ 1085.506014] _copy_to_user+0x2e/0x150 [ 1085.506535] simple_read_from_buffer+0xd0/0x170 [ 1085.507194] proc_fail_nth_read+0x19c/0x230 [ 1085.507783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.508431] ? security_file_permission+0xb5/0xe0 [ 1085.509095] vfs_read+0x257/0x940 [ 1085.509586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.510241] ? __pfx_vfs_read+0x10/0x10 [ 1085.510814] ? __fget_files+0x270/0x450 [ 1085.511387] ksys_read+0x12b/0x260 [ 1085.511891] ? __pfx_ksys_read+0x10/0x10 [ 1085.512453] ? syscall_enter_from_user_mode+0x21/0x50 [ 1085.513145] ? syscall_enter_from_user_mode+0x21/0x50 [ 1085.513841] do_syscall_64+0x3f/0x90 [ 1085.514359] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1085.515062] RIP: 0033:0x7fbd2658269c [ 1085.515557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1085.517800] RSP: 002b:00007fbd23b24170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1085.518802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd2658269c [ 1085.519705] RDX: 000000000000000f RSI: 00007fbd23b241e0 RDI: 0000000000000004 [ 1085.520607] RBP: 00007fbd23b241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.521504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.522415] R13: 00007ffeb8f90a7f R14: 00007fbd23b24300 R15: 0000000000022000 [ 1085.523352] 23:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 23:48:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1500, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x94000, 0xe3) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) syncfs(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) r3 = getpid() setpriority(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB]) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) [ 1085.697527] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:06 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1085.726844] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.751483] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1085.753857] FAULT_INJECTION: forcing a failure. [ 1085.753857] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.755806] CPU: 1 PID: 7830 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1085.756961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.758113] Call Trace: [ 1085.758491] [ 1085.758861] dump_stack_lvl+0x8f/0xb7 [ 1085.759441] should_fail_ex.cold+0x5/0xa [ 1085.760042] ? __kernfs_new_node+0xd4/0x8c0 [ 1085.760693] should_failslab+0x9/0x20 [ 1085.761266] kmem_cache_alloc+0x5a/0x410 [ 1085.761891] __kernfs_new_node+0xd4/0x8c0 [ 1085.762517] ? lock_release+0x3b6/0x750 [ 1085.763125] ? __pfx___kernfs_new_node+0x10/0x10 [ 1085.763826] ? __pfx_lock_release+0x10/0x10 [ 1085.764456] ? lock_acquire+0x32/0xc0 [ 1085.765054] ? up_write+0x1b0/0x520 [ 1085.765636] kernfs_new_node+0x97/0x120 [ 1085.766273] __kernfs_create_file+0x55/0x350 [ 1085.766951] sysfs_add_file_mode_ns+0x21c/0x440 [ 1085.767650] ? __pfx_slab_attr_store+0x10/0x10 [ 1085.768366] internal_create_group+0x322/0xb20 [ 1085.769065] ? __pfx_internal_create_group+0x10/0x10 [ 1085.769827] ? up_write+0x1b0/0x520 [ 1085.770411] sysfs_slab_add+0x18e/0x220 [ 1085.771053] __kmem_cache_create+0x461/0x5d0 [ 1085.771736] kmem_cache_create_usercopy+0x201/0x2f0 [ 1085.772484] p9_client_create+0xc89/0x1050 [ 1085.773153] ? __pfx_p9_client_create+0x10/0x10 [ 1085.773858] ? lock_is_held_type+0xdb/0x130 [ 1085.774524] ? lockdep_init_map_type+0x21e/0x7f0 [ 1085.775289] ? __raw_spin_lock_init+0x3a/0x110 [ 1085.776012] v9fs_session_init+0x1e1/0x1670 [ 1085.776665] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1085.777302] ? __pfx_lock_release+0x10/0x10 [ 1085.777868] ? __pfx_v9fs_session_init+0x10/0x10 [ 1085.778476] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1085.779212] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1085.779883] ? lock_is_held_type+0xdb/0x130 [ 1085.780469] v9fs_mount+0xbd/0xbd0 [ 1085.780937] ? __pfx_v9fs_mount+0x10/0x10 [ 1085.781476] ? cap_capable+0x1da/0x240 [ 1085.782001] ? __pfx_v9fs_mount+0x10/0x10 [ 1085.782535] legacy_get_tree+0x109/0x220 [ 1085.783106] vfs_get_tree+0x92/0x300 [ 1085.783608] path_mount+0x1314/0x1e30 [ 1085.784117] ? kasan_quarantine_put+0x8f/0x1f0 [ 1085.784722] ? __pfx_path_mount+0x10/0x10 [ 1085.785278] ? putname+0x102/0x140 [ 1085.785767] __x64_sys_mount+0x286/0x310 [ 1085.786301] ? __pfx___x64_sys_mount+0x10/0x10 [ 1085.786911] ? syscall_enter_from_user_mode+0x21/0x50 [ 1085.787589] do_syscall_64+0x3f/0x90 [ 1085.788090] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1085.788754] RIP: 0033:0x7f767b249b19 [ 1085.789226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.791417] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1085.792366] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1085.793243] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1085.794113] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1085.795005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.795879] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1085.796763] [ 1085.806659] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1085.965626] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1085.966825] CPU: 1 PID: 7830 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1085.967831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.968834] Call Trace: [ 1085.969169] [ 1085.969471] dump_stack_lvl+0x8f/0xb7 [ 1085.969991] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1085.970695] p9_client_create+0xc89/0x1050 [ 1085.971265] ? __pfx_p9_client_create+0x10/0x10 [ 1085.971871] ? lock_is_held_type+0xdb/0x130 [ 1085.972432] ? lockdep_init_map_type+0x21e/0x7f0 [ 1085.973057] ? __raw_spin_lock_init+0x3a/0x110 [ 1085.973667] v9fs_session_init+0x1e1/0x1670 [ 1085.974229] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1085.974867] ? __pfx_lock_release+0x10/0x10 [ 1085.975436] ? __pfx_v9fs_session_init+0x10/0x10 [ 1085.976039] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1085.976686] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1085.977343] ? lock_is_held_type+0xdb/0x130 [ 1085.977925] v9fs_mount+0xbd/0xbd0 [ 1085.978406] ? __pfx_v9fs_mount+0x10/0x10 [ 1085.978962] ? cap_capable+0x1da/0x240 [ 1085.979486] ? __pfx_v9fs_mount+0x10/0x10 [ 1085.980022] legacy_get_tree+0x109/0x220 [ 1085.980565] vfs_get_tree+0x92/0x300 [ 1085.981061] path_mount+0x1314/0x1e30 [ 1085.981572] ? kasan_quarantine_put+0x8f/0x1f0 [ 1085.982176] ? __pfx_path_mount+0x10/0x10 [ 1085.982732] ? putname+0x102/0x140 [ 1085.983223] __x64_sys_mount+0x286/0x310 [ 1085.983761] ? __pfx___x64_sys_mount+0x10/0x10 [ 1085.984363] ? syscall_enter_from_user_mode+0x21/0x50 [ 1085.985040] do_syscall_64+0x3f/0x90 [ 1085.985545] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1085.986216] RIP: 0033:0x7f767b249b19 [ 1085.986700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.988880] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1085.989822] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1085.990724] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1085.991596] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1085.992474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.993346] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1085.994254] 23:48:25 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:48:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 23:48:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x900, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:25 executing program 7: openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x20003, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) epoll_create(0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) pwritev(r1, &(0x7f0000000080), 0x0, 0x8000002, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x125842, 0x104) 23:48:25 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000004c0)={'syztnl0\x00', 0x0}) 23:48:25 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r3 = inotify_init1(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = dup2(r3, r2) r5 = getpid() ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000200)={0x30, 0x0, 0x7}) socket$unix(0x1, 0x5, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) splice(r2, &(0x7f0000000140)=0x5, 0xffffffffffffffff, &(0x7f0000000180), 0x100, 0x6) dup3(r4, 0xffffffffffffffff, 0x0) open(0x0, 0x10000, 0x80) r6 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) symlinkat(&(0x7f0000000000)='./file0\x00', r6, 0x0) 23:48:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1104.990514] EXT4-fs: 6 callbacks suppressed [ 1104.990536] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.004519] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.010348] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.023035] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.029091] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.037945] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40040, 0xc0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000240), &(0x7f00000007c0)=ANY=[@ANYBLOB="00fba303db6a29c4a81801ce5258dacbcffd6145f7b49931b6caa5839608a877748a19b2f4d480ad2645552e2b0d80f29c59918240cd074c1860b848e9d146aecb740c020bb1061d9c6a3c26549be9c0624ede5c50031d8e1c4696988c7fbefe28cfdafcae2d22e4ee561f78e3163cf7af9848ee77e9ab174c2c1ff6e39128b595997876bcbd82fe431ad974de2bb307d24f5d0fed28406d1c5fd5eff2368480ebda444520c05b0a49de9e784a35fa994008a218f889fb676e91a94ae79e65bf0ae6742bffdf14f0d0b72ab8d941a621c521eeb30e55833f"], 0xa3, 0x3) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)="9d4eb0800dfc111848d82befd945b3499f54211e39b2e2298905e10a02c4a07a25ddccf441ed9530472f1d515380fb45f1182501c2f8a294def928d04d940fd52cdf3cecbf8e3282353d32719f6182c42c38f8589b23b12d42d3def79d80b7de3ebbd7e47e5a892ed13aff09d61b03f0e16da1d9089b125e4c8cae0b00cc70a89e173d8a04550869005bd9d4d7c782ee60e76c8e8c4f96e1dbace3a924d1f5fe219c6f4c6492fab1614469d0a0a2946ad69a232923ffaf3307cb5dfa825f8da27ad26b51ab8346bb30be1528db8028bdffc41a7748c731411335296de5909108b585c88125b2001d5917ef82", 0xec}, {&(0x7f00000002c0)="8140a141d2fd2a9afab0d43aef8cf0af323842ceb90313fe004bef813454c4fcc67e99d328aa5399b628d37f8f62b0bff99e28129c96af65780e944cf0226084577ae69cbb6cac5f449726ffbf55dd92397739ef87839fabdc6b52ad86f5045d42cb56ec984a67628429829d5dac7aa8fecc65a4b2be57cc51ef9ebbddeba0c2caf7eaefad692bfd933c01db896065fbebc038c2d08547326ba89131f14995ac0de5c96850143e43ca2c5712a061056b31c98cd1a74d", 0xb6}, {&(0x7f0000000380)="abc40594a00deeb1f0dae951f9c65a42d4b08e7d505e9c71408a9a99cb61e6c56a63647782748f126f39fca14913e52d8e2a79f63e9077b8bf9ea3f25482e3b21676da9ce7b0b3a43d82c786ab663eaff5b6b12230630cdf37e59329df6aeb8cd543fa38b980ce2728232401b57a4ce0f568e660f94d329554792bfeaa5c0f21f0750f3f60c2712a255c8dc244c06fe31492f94a95535abd32a7296b19fd", 0x9e}, {&(0x7f0000000440)="b7ab891276ea47fb068ea22cbb5347b93b9a30c281f0fa907bd7f9955c7fab5d557176a260c34753ed83dd65a0815657d0a9bda18c1ae7a8c4df309aff5c44c35a532e095cabed03e53984c928db1164d1627f85586bd8ec21b627de47c179085fc9b101e4c99769c2e56ccafe231b718abca31458ec2d6cc8be67ab82f42b7dd3ba6498544f7edee163a335ddc03351196e6544f31d2e2aadc301f7517ce68968fe51bec0", 0xa5}, {&(0x7f0000000500)="2b2c3041eb64be5ff920fe6eddaed540acce2b18a6189ff35f8752c4c4cee2795a0fb7288e9ef358323d7d97462249fa9474cf84fb367d9e0b90c1e0210b31596ff074c6db9e225719e3f5d0f2cb26afeedeb27445dec9fb0414f1224cd59b5e737a2796b4f7c351e0a6387ac1a9228acabf92b62abc9e373b70eef4be476f9464a3814d2e13a87edce5d32762596270668a1a8dca1890eaa4c1cb1d25e394ce", 0xa0}, {&(0x7f00000005c0)="dcfa44f36bc31aa90c9b962227f26dbc237404476412585883e39a372fd9ba008f41cbeafba5bc752baae396fc0e74a3c4975012ba2c67a843d622e3175b752893a816312d585c1bca933f", 0x4b}], 0x6, 0x7fffffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcdf5, 0x10, 0x0, 0x396}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000780)={'syz0', "c67aae3a2702900f66caed23aebadc1f01"}, 0x15) 23:48:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) 23:48:25 executing program 7: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{r0}, "b13118457d29ff611c0b091372794ac164c94c342e385ac546e98e97d6036a98a7c225c035a3d0834e38a4a9edbdf5bd1d87901e4ffdc7bf749609a51c81568160725a84152905cad110391e6e214cab3d395df15313f9b9b9285b07c422b556d863feb52195c2479e638d9440fb2dfd951fb105be70c97dea4dafc9f95684273e9bc4bae7443e36deacfc9b67a482235c010010fe85e1cb4c70416606bd6c30ef342c7774e6f02aa01bcf72526e0ae07d6b493f7ae8391b3802f836a4049229e5da2b4fad29722561e15586489aa2bacd1fb63a07adcd937a93f569c184739bceb82f3a9ac0155ad440145a05598b08fcf76445dbc2a47dbda90eb6bc21b59d5b3a17734de564ff94d1b7ae1b4efb9df98d070b3e3cc46417288acd50594fbec0cd9772b513623f09308f93c9dff87c71445bf3769177b714cf99ed5505ac9fb319a53cf8aeb167a8288f709bdfcbe628277048d7ea2bd5d0fe3f5df50d61ce31ab2b1cc6a0625d8cc2b5354fece7e62ddc40c0f4515ee327ee928b4572a56ac2738c87271efa9282dbf4e3117077b816b1b7a39cf767d9b80cc73ddaa3a41f14e3da49cd875653f62c98685de03b738767e9f179dee9ff4ea80b77a119a025f240af49922129ac5cbb0b57132a57c6b11e6011ddaf177371c673c85a33e4b83e7c080babcbb4e6085398b8d3bf2fe97e43b227ef61a26340fabd776190526c42a99a44067c033bfc292ae98aaa17dae40cf83d0ba3b874f893d7fb6ccd1111404c2853821d91035060c43d474197a96594da02105c8a58b541f070553f5b85da5c47ca0cfaf8cb1e13f7711dcb5ce5a4f20338ca7f877e43a4ebc099c2597d18416cee71d74c47e0da12b1d640cfc6977de059552166a9471a5a8c38b9858fa8539c7564c4d4ad1bcb977f483b2fc2f25291db85efdd6e288b80106568f1d72a7135cdcca2c138eaf12a355e264ee25972d42e5dc640107b52345c8a123713d7851c0a863b268863db3c4c72cf163545a3466eb95c9f14f90c8505ad9851956175d848561be5f6206e62da6cdd5641ba3e8d06918d96015749ba9f7540ef1e1eabba260ee08b427e106d0fe56b70d0d78be8152d40983b3df55fceed1dd4fdb50f5ba6677ec819564d1a20950e88df31f6862f004fb00b9645c985c1badc656294cf75c226b75f99ca9cf5c9e147577d3fa1238db078b6742dcab392d269b820bb65511e2e7f1b50fb52060f945f530a1f4caa2a353b63706ba8620a26fe90932eef956db7616fd9d6ae236b3135f6d404461307dc7be97db5b8ec85f5dae3db978f8a8936578697b7fb1cf0314f19fe9bb90db7f7779236294e2043bff5808e858f9bcec024cdd33187834872f964f01746115ce51f4d76f56781be1739d9a9d12b6d8cb4ee21efeeef97752450684618197540bdf59d02e7ab3c7e11fd6b2494885a8de8e18d2eefb1177fb0b37785079c3405f8e0daea8a880f298691621087d47b3756edf4f7484c73f944e3851b162139557ff13ae0c91575537ac7c75c390232fab536b85f2ffd9c44f1a45ba814bcbfd66489f75a5641fd851c4d89001883a89f91eb74df9f16555da9ad4ec518f971f4d6a377af27f7bfd420a69f9f3273cfc8bc388bc334a8efa3a1cf64246e3000f2f81017b1ca460462c6b710521bcf520dffa79afd7427d5b8e1db7fd5dfd0590a11b59b2a827895de49ae675a6b892ae4033f586c48da256113868cfe6edfe4bc35696be72dbdc03cce02a2b88c8dabd530933b180d75afbceeda2b2c3bacb15d6a2217ad70ff54ff66fc7bd97ce6e61801f5df8f2d1d0963cdf356def8c2e621cef85ddf624b3c2ab6c48afda211236f2b8043b526d6fade40bcd70656f68ed7d76ae7007c4dfa0b4bda45fbf45f77553a7512a842a48252a9bb8105e93f94bf91b68e0219cf73dd3410c206633bcb9f61a70808c7662769f6ed2515e92eb0e937cd29693f6e047232a6625e21be60efbcf0fac5c9478cce5d00d7952561731f79c8cfd08dba69aa800732f9f4e3f227a957a9e14dbf10e5aa1e344ff43e5c0386b61cc7c727b9a72299fb3a3a30ee88892c06967d8987293d9cb887a716b4601f67b0c315abe54b60a41abaee034c9c1ea44342955029f272c4d6a6fe9f9487501a10f1d1fafaa597d1b6c3bbc536e8b4f0b9cfa98cef854f80fb1693899dde90942c09de4e61c9584d82db6d9391a6459bcc8e67e594af231bb4a143b36d098f78f7391ca79512171a65a932c48242c5f85ad5f013c31f5cb3215e15699f354ad878f9547f23934f15e0158e44cd7ca11ee57db3314e2490ab96caa39741c3803b919290d68fadfb58feadea646507d62cc472b6b2674856b8c2797f5a14e0e1f7d0c3db3e9a0796245c1098575c28553127ffce2afe5b4edcaf47b5b3ba57b0a1b100224a452d33331f4dd39ddeeeeefb95bbde1c856255705f1333ab24c52b01db2d8d3d5ea7d0dc3bebfb77de7098ab2ae56c054e871bc4c988ebeff544ac35550d899ab3efa98217f27551ad942fea178518a6b2dc8016a6959314cf489d4f1b3c473e6a3934b7db669fbd6da11de80175e303af754fe44cf0ba5150c610b083f94b282263b1c5d3412eef899e9dca9104afcc6483ed4346a056e321ec64dda6cad44513291bd78d9d44fb82a12a2a67a5175de3f087a6f3d8d874659c75fefe47c9f05b05e81ba839dcc7076c44c3f1b8688bb4d06ad25f54a3783b3c72bd2c41c0b1beb2229cb4b6d8f7af4f55f3a013685d9144c3172945502c17eedfe43441ce4107326b11e3128280521cfeb9a979664ab43b1b5949087b848615bb1865d429e28fb709b7ce80d2949be1b525c6a5751a0cbba8a772614d6e965738687bb79fd6afcf8e4dbdbd6cde169f9b5616a2cd997f5d0eded20b31d255344a4bb2deacd14ed5767b50e0c5829c5974a4e698c6ce68a8d5ec3f837c531d8d08ceac1620c94f0f19699f3af407ed6e6b53f3194a741a9427886cd2e0c377dab8adbc62ffa972fb54a30701668ccbd6dc1eac4f57c4cb63aa16ee2026e2d91236573345f378273b3e0982606c691aab37418c662d5e9f7f219dbdeced4ad096e53bfd0e5ffd9ecceacf7b911926bb0135cc931d5583d01a6643fac920782cfa27cdedf4938bf1e15aa32db88a1ea9b80dc461e8721d6598de01dc86a9c344d257904b3a50f6f7af941907336ce18b5c417f8a1b87912ae56fcb304edae7747cd986e9a1e31021a2df04b80ab8aa97ec895f684ae29d31feab3d9473702635c7404d5639ed12c7b3912d2ca5a80fc0442fe00690fb3134a345d58f848cea48c85a50d173d62476388411d83afa5bc4b63833b3181b6f506bd4e2f28a29e94b9aa4c0617cb3fd64c4173e7ae1248e57a6c4cf32d408b285f211fb389b1636d56926f75af38dc2fdff1a857d8dde9483f6fb37cc1749a2ed77208afa3db2bc302b5cba3bd88e4fc15045f5deecdb76e96d617640acdbc3818b103070d1753b1320dedb97676268adecf1f4e13fc4a21957248f730451767c78874d7b052cefba1fb60b0c2bd8ce234eb3863bb84db13088964948b3c505c66282f46eaaaca71efe1a6ec04acc45434d81238109458a36ca70799951fe7455e4b9094a0837cf9877d0bda1368ce9d09d108e5017f4c3433480eac7bc83a14ee20cda35a7292e247b5c94b430728ae93e5a1355621927ccfeee20f5478ee2df1edff77225a890b3fc1fb4eb52eecb3edeb8919f5f683f89e7f0bb632f16325a72a3ea4aacb479c2a2f177aedfa65787fb6e61dbfe1eb38f490d0c9020c2f66ad3eb5a09fae1fc218bc4a84dede098b207e1c0c4ee44a02b9b7f4fd3854ca9e4e8d9b1c8bfaf5250a11b1dd93f564dbed52e1732d65e4011ef3e8a2bef2c2dcc5703df1408219db54faf58d5677d79b2ba820aaee86f479af16043713a89774e44eb707228021e4815c39458a8b163d1b131fe8587d167a953cbad8b15cd9d60aa917ceda28172845e985d6d2dddf055af88e7c1d426e088a53c32a51454f182ae9fec15fadb38959ac4cb2417b27b51e3fb130da189b58b66fbe6b03cc19d7059098b61304a8ea4a584d7c2d957b084be2397022bcf407d3c5c87fecdf01fc9ea1c4d050f869e06c93546f45141dde5eb9fcf8ff2bb74bdf182f807a911dafacdd0fee668e9667cea9adf806644382eefe4c4940356a6b35abe78c0695c310486e9d34bedd7903acf5ce0cb8682b16efc275493ed4e07f915714ef2e2f2db3fd0d067b3490d33aa37e7997eb8b1292ce7dd806df39ca494b1877b6f1e096bf0d3457c4761a4a072f6ac9c1b00894bc8943aca5c4e9eec8ca98c0340336b32efe2e2a2d0fbc3e487872f6215ed7e7a89519e72bbb1449acaa9ed0b62bfa35968ddfd03edeec4e0003fb1485d7ee277403535daa562ab0cc12ce40c7fea1c79ddd4d76abeba49a7b3a5d5bc307d8105eaf27c8b94a7ba8058141e1e29c04ead943ec86da039fb67b74dfafdbe8ab7c0bcda786c65f9d2c9d287b4fc0378f390c0f2c5d577b921dff0198637287a34fa1855e02661ff8fb5646a0b8f260e4924570ee657e93d9409a2d20ea9caaf349b0fbc188933b42d61772b8abf0fe1b9dd2411e67100476611aaea8c202d983979d7ae32ac66d1fc9c7db74478ba40ae1bfc1841e67b4fefbe305959d46950b7bb73d193096a8c01d03bf145802168aa6e34a145028a0ca0ef8ea7c7664396802a081dfa14792e3bd4d4c6125a52411b4bd18d31b37adc4ef9ea7901c272e0385513ebe8acec5c355fd260822382e6f531bc2ca6a702a881f32184c03cb4314eee2b0fd25df28f21f2fb7e5260d1fd1ae2af7b6f692d161a3fdef0728c4b06b0a45c1c258a42c71a830df37fa011127c396f5cc68e67403268649753d913b6f34473bc05d376016ead46ecff3673ea17a55322e14256ab8d345ae841cd697ebecee37aa6e883b97d1145fe590d77bacefe852c0a1d99b952342bac717f1151bf9fc8c3e17664bbbc24032ce394c93e733446a8ad18144f3779871796c4dfff78dd0ae1dcd5e9d1f5a218efd1193ec581bb415ca4dff7421d3ba097d21107a41a186a5bf5d9efd8139904fff5b9483572c0fbd985ad5e8662e60cbb5f9013036a4732ae0e9fa61781e3aa71f570e17c4c28295867300d91fda8557ffd9e230c31bdc5f7f703f6a1940d9dae88016f20643dd00db1a258b573a97a2ae1684e5077a4344eed2a1b72b0e4e8ccfcd54bee5f19815a20127806a71ac3be3cdc1ef48abd6ea4366bf0124cf39548a4d2c33030d0194b26c38dc0a822521ba830b3f5ef0198d0ae76e9102ce64878076a8eb72b530cabe846227e21355f40fc17982e7b8bd8fe986f176b8225bbdfa975f704e27f918e98592f869bad3e89640c0ffe388c8927ce0e18a4049be392a7bdd22823cfebf138c6137eda987527999cc87360907859e6d89324a394672b57e2f2c0813e2a51cdf62156e9bd84911f235182af4a6e2d86ec7e5b23e09d503419d1c21f6660749589ef96d6b23c04465ec09838bff9bc62d2bc0e6138999bff1e07cd7b655f0bfa810f969022b46414cc98f04b6d5bca222bd1948a476f8c8534a9699c4931650168076a6b9b5ee98f6eb58444720569060d6fae657a7b45e1bfc3132547e9154c391372066e7856855904121e5be0eba81853afb2a3a1a57c7a2dced79f7d073adb8c044f0bd6ba0552713f5b887032352a0e3c022e28dfe00d2a1467eae79f8cffb049d4e7bd0eb8bc2b"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x5, 0x0, 'queue1\x00', 0x9}) write(r0, &(0x7f0000000040)="27000000000000000000006689c5", 0xe) 23:48:25 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) close_range(r0, r0, 0x0) ioctl(r0, 0x9, &(0x7f0000000200)="e15373c96cc81c657310e48b7c7d069ff0b28de4d688a8aacf1328e57f4aab6aef8e31be03b9aef85942b19db1eb64a4d2b78b4f1d8682961ca53b4f9ddd673068c4d226f8c22d1f3d54cd381dc6b0e1c963a5f657f483fd2684c566ec72795b7eca9eec8dc65fcba5eef1") r2 = dup2(r0, r0) r3 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x282802, 0x8c) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r4}, {0x2, 0x6, 0xee00}, {0x2, 0x3, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x5, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x1}}, 0x4c, 0x1) setxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v2={0x2000000, [{0x8000, 0x1000}, {0x3f, 0x4000000}]}, 0x14, 0x0) r5 = open$dir(&(0x7f0000000500)='./file0/file0\x00', 0x10000, 0x3) r6 = openat(r5, &(0x7f0000000540)='./file0\x00', 0x80000, 0x100) llistxattr(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)=""/4096, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000015c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x20, 0x0, 0x6, 0x6}, 0x9) r7 = perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x4, 0x3, 0x3f, 0x1f, 0x0, 0x3ff, 0x20010, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x8000, 0x5}, 0x410, 0x7, 0xff, 0x2, 0x0, 0x3, 0x1, 0x0, 0x100, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x3) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001680), 0x3e7280, 0x0) r9 = syz_mount_image$ext4(&(0x7f00000016c0)='ext3\x00', &(0x7f0000001700)='./file0/file0\x00', 0x2, 0x4, &(0x7f0000002980)=[{&(0x7f0000001740)="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", 0x1000, 0xfc5}, {&(0x7f0000002740)="8ec7a950157b2964f74fc76c4499deb12d18646df397119a4001b103c2d1732877c453d1a5198ca87149f429b2ce9a6ab0d811d412917949e95b9db218ec7dc6f2ba3dafa9fe4078449b09356d1c08594e2661127af1ec6c271a11f6050d8479e61879a9e66d8d50428d08d3fa803e43830becd31e69a7fd2f102380fa67069db3fc9425636b35f3db5e50071362ed6e51b47e3e4986b99fe0003b1cd324f0d5f6260f563d58bb", 0xa7, 0x4}, {&(0x7f0000002800)="bdddcef5cab4205940a0693c5f90128d178bdd3bc4be45c9b7a926e5bc15283d01dcb735e715b708d23df09a3ae0c8dbe485a7a07cb3f1263aabbabe489449caaf390caa583bda9bbe9f22c91bd2891ccc6f92d168c633b85ab4629bfd98330e34db86b34b9dfd14beb265286370f7d89a45b891f9bcc9057f35d2f70baed7e4a241fe53593ff2a8c7ba48dc021037498d0d54633e66b158becfb73b396f3de21de92b60f478562c2aa999543cdde30d8d3530a83b488c2f913ecddcfb2e4eef7d272ef27aa0098575610a1dcf1ff2bb0609df318a39bbcd1d5e6b001708801cfc", 0xe1, 0x100000001}, {&(0x7f0000002900)="63652de0753895aa79ad8af840449f8f1575c768325403734ed635e415dc1cfaf5f1c56580d9cdf953a6beb8aa415a5ef3a392456aca8566152a87254d70c88f6993eda810ca78fcf2f6fa749b2d66dca1bc24fd60935934f25e8a513c50e1cef138ef219c620b549a5b7d92b5", 0x6d, 0x800}], 0x2000, &(0x7f0000002a00)={[{@mblk_io_submit}, {@sb}, {@nobarrier}], [{@pcr={'pcr', 0x3d, 0x2}}, {@smackfsroot={'smackfsroot', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_type={'obj_type', 0x3d, '+%]{$!/})#%][-,'}}, {@fsmagic}]}) r10 = accept$inet(r3, &(0x7f0000002ac0)={0x2, 0x0, @local}, &(0x7f0000002b00)=0x10) poll(&(0x7f0000002b40)=[{r8, 0xc130}, {0xffffffffffffffff, 0x400}, {r3, 0x228a}, {r9, 0x80}, {r10, 0x4500}, {r7, 0x4180}, {r5, 0x2000}, {r6, 0x4060}], 0x8, 0x8) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000002b80)) [ 1105.250956] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.258862] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.270332] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1105.279784] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:41 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b2f, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:48:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:41 executing program 7: io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) io_setup(0x9, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}]) io_destroy(r0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r3, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x1010, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x6, r7, &(0x7f0000000040)="38b96f893aa827db0182f4abd5165b6b3063b851c04718f5633b79fbe63d858af60ca5b149987392ad4a4514abba0e4a4551457fb9b26e3852c894f5f3fac5c0e4aa0af246c6b3df2018366331165231a09114d645277e1a7b2cfa17b0b61781be83c4343f48d3ba795d0d94a9a48f4c0e0fe52257618dda267b936d415b2cc68270346c86d81454789326b98bd2d1bf29f2333e4efd869aa1280e8c8b90a5b9a101fe6456c58a97c47a5ed07b38ee066ba1cc3181fec03468565cec56c026af6ff96bd9cf0ecc96b86aecb541cd088d1268adfab0d69d103c4082933caa358710ed", 0xe2, 0x0, 0x0, 0x1, r3}]) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000240), &(0x7f0000000300)=ANY=[@ANYBLOB="00fb590505190888812885879106a0da815ae666bb63b33e21577ecdce163d51b21c64a3570158a1a0acbf5c4f9d3f07fbfcf01abafe43adcb7117327cdefe9f33b53f8cca9f9fc89bf9ff"], 0x59, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x9) 23:48:41 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000eff000/0x4000)=nil, 0xd000) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0xffff9f2d, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x2, 0x0, 0xd, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x67f5, 0x1}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r0, 0x2) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2a001, 0x0) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1c8002, 0x22, 0x4}, 0x18) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x1, 0x46, 0x8, 0x7f, 0x0, 0x8001, 0xa300, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x3, 0x10000, 0x0, 0x5, 0xc5f, 0xada, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x10, r2, 0x8) shmctl$IPC_RMID(r4, 0x0) 23:48:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1120.380507] EXT4-fs: 4 callbacks suppressed [ 1120.380530] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 23:48:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x747700, 0x2) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x3000000c}) dup2(r3, r0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) r6 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000500)={0x0, r5, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7]) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) [ 1120.398012] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1120.411570] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1120.422497] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa408, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1500, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1120.462658] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1120.481488] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1120.519680] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = eventfd2(0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x1, 0x8) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x8000, 0xffffffffffffffff, 0x0, 0x0, 0x9}, &(0x7f0000000300)) io_destroy(0x0) io_setup(0x1f, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1ffffffffffffd46, &(0x7f00000000c0)) sync() [ 1120.539425] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000012c0)='pagemap\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x200000}], 0x1, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000001180)=@sha1={0x1, "a9328a7cc640b4057e2789c040fca7bf88dec8c8"}, 0x15, 0x6) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='pagemap\x00', &(0x7f00000000c0)='pagemap\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) readahead(r5, 0x5, 0xae4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001500)={{r1}, r4, 0x2, @inherit={0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000600000000000000ae04000000000000050000000000160020080000000000000400000000000000040000000000000007000000000000000300000000000000ff0700000000000005000033810a38f89a2e31c3bd8e2c00000000000600000000000000060000000000000001000000"]}, @name="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"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) close(r6) 23:48:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 23:48:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe70b, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1120.576890] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1120.583945] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1120.695578] FAULT_INJECTION: forcing a failure. [ 1120.695578] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.696642] CPU: 1 PID: 7949 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1120.697363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.698119] Call Trace: [ 1120.698313] [ 1120.698484] dump_stack_lvl+0x8f/0xb7 [ 1120.698883] should_fail_ex.cold+0x5/0xa [ 1120.699225] ? __kernfs_new_node+0xd4/0x8c0 [ 1120.699558] should_failslab+0x9/0x20 [ 1120.699846] kmem_cache_alloc+0x5a/0x410 [ 1120.700162] __kernfs_new_node+0xd4/0x8c0 [ 1120.700480] ? lock_release+0x3b6/0x750 [ 1120.700791] ? __pfx___kernfs_new_node+0x10/0x10 [ 1120.701143] ? __pfx_lock_release+0x10/0x10 [ 1120.701465] ? lock_acquire+0x32/0xc0 [ 1120.701763] ? up_write+0x1b0/0x520 [ 1120.702050] kernfs_new_node+0x97/0x120 [ 1120.702447] __kernfs_create_file+0x55/0x350 [ 1120.702875] sysfs_add_file_mode_ns+0x21c/0x440 [ 1120.703282] ? __pfx_slab_attr_store+0x10/0x10 [ 1120.703747] internal_create_group+0x322/0xb20 [ 1120.704170] ? __pfx_internal_create_group+0x10/0x10 [ 1120.704598] ? up_write+0x1b0/0x520 [ 1120.704955] sysfs_slab_add+0x18e/0x220 [ 1120.705342] __kmem_cache_create+0x461/0x5d0 [ 1120.705732] kmem_cache_create_usercopy+0x201/0x2f0 [ 1120.706197] p9_client_create+0xc89/0x1050 [ 1120.706540] ? __pfx_p9_client_create+0x10/0x10 [ 1120.706981] ? lock_is_held_type+0xdb/0x130 [ 1120.707322] ? lockdep_init_map_type+0x21e/0x7f0 [ 1120.707842] ? __raw_spin_lock_init+0x3a/0x110 [ 1120.708211] v9fs_session_init+0x1e1/0x1670 [ 1120.708617] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1120.709018] ? __pfx_lock_release+0x10/0x10 [ 1120.709411] ? __pfx_v9fs_session_init+0x10/0x10 [ 1120.709785] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1120.710213] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1120.710737] ? lock_is_held_type+0xdb/0x130 [ 1120.711124] v9fs_mount+0xbd/0xbd0 [ 1120.711496] ? __pfx_v9fs_mount+0x10/0x10 [ 1120.711820] ? cap_capable+0x1da/0x240 [ 1120.712215] ? __pfx_v9fs_mount+0x10/0x10 [ 1120.712597] legacy_get_tree+0x109/0x220 [ 1120.712952] vfs_get_tree+0x92/0x300 [ 1120.713322] path_mount+0x1314/0x1e30 [ 1120.713669] ? kasan_quarantine_put+0x8f/0x1f0 [ 1120.714121] ? __pfx_path_mount+0x10/0x10 [ 1120.714472] ? putname+0x102/0x140 [ 1120.714885] __x64_sys_mount+0x286/0x310 [ 1120.715200] ? __pfx___x64_sys_mount+0x10/0x10 [ 1120.715544] ? syscall_enter_from_user_mode+0x21/0x50 [ 1120.715935] do_syscall_64+0x3f/0x90 [ 1120.716359] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1120.716750] RIP: 0033:0x7f767b249b19 [ 1120.717133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.718495] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.719050] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1120.719565] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1120.720077] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1120.720595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.721107] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1120.721637] [ 1120.783885] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1120.784910] CPU: 0 PID: 7949 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1120.785942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.786977] Call Trace: [ 1120.787333] [ 1120.787645] dump_stack_lvl+0x8f/0xb7 [ 1120.788182] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1120.788896] p9_client_create+0xc89/0x1050 [ 1120.789455] ? __pfx_p9_client_create+0x10/0x10 [ 1120.790079] ? lock_is_held_type+0xdb/0x130 [ 1120.790633] ? lockdep_init_map_type+0x21e/0x7f0 [ 1120.791295] ? __raw_spin_lock_init+0x3a/0x110 [ 1120.791886] v9fs_session_init+0x1e1/0x1670 [ 1120.792462] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1120.793107] ? __pfx_lock_release+0x10/0x10 [ 1120.793657] ? __pfx_v9fs_session_init+0x10/0x10 [ 1120.794286] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1120.794916] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1120.795652] ? lock_is_held_type+0xdb/0x130 [ 1120.796251] v9fs_mount+0xbd/0xbd0 [ 1120.796714] ? __pfx_v9fs_mount+0x10/0x10 [ 1120.797272] ? cap_capable+0x1da/0x240 [ 1120.797778] ? __pfx_v9fs_mount+0x10/0x10 [ 1120.798332] legacy_get_tree+0x109/0x220 [ 1120.798862] vfs_get_tree+0x92/0x300 [ 1120.799396] path_mount+0x1314/0x1e30 [ 1120.799916] ? kasan_quarantine_put+0x8f/0x1f0 [ 1120.800496] ? __pfx_path_mount+0x10/0x10 [ 1120.801066] ? putname+0x102/0x140 [ 1120.801572] __x64_sys_mount+0x286/0x310 [ 1120.802126] ? __pfx___x64_sys_mount+0x10/0x10 [ 1120.802750] ? syscall_enter_from_user_mode+0x21/0x50 [ 1120.803455] do_syscall_64+0x3f/0x90 [ 1120.803971] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1120.804670] RIP: 0033:0x7f767b249b19 [ 1120.805158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.807438] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1120.808416] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1120.809343] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1120.810266] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1120.811212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.812134] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1120.813188] 23:48:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 7: pipe2(0x0, 0x84000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x428, 0x0, 0x0, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x40, 0x4, 0x6, 0x20, 0x0, 0x401, 0xb400, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000400), 0x9}, 0x10, 0xfff, 0x8, 0x0, 0x2, 0x7, 0x7f, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="20002abd7000fddbdfbc4ffc48c2bd891db46411bda88260d7f59d25190000002800011f08000300020000001400020076657468305f746f5f6261746164760008"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x110, 0xffffffffffffffff, 0x71a47aa0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0], 0x28}}, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) recvmmsg(r2, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(r1, &(0x7f00000003c0)='./file1\x00', 0x400, 0x61) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd2(0x5, 0x80000) mount(&(0x7f00000004c0)=@sg0, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)='f2fs\x00', 0x10000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) 23:48:55 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b30, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:48:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 23:48:55 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd(r1, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r4 = inotify_init1(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000380)='bond_slave_1\x00', 0x0) dup2(r4, r3) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x0, @local}}) close(0xffffffffffffffff) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000200)={0x7, 0x0, 0x7}) ptrace$getsig(0x4202, 0x0, 0x1, &(0x7f0000000300)) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x1000, 0xffff, 0x6}) [ 1134.776745] EXT4-fs: 6 callbacks suppressed [ 1134.776767] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.787443] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.798982] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.805054] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.810642] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.817358] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1134.828514] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYBLOB="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"], 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) 23:48:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:48:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) [ 1135.037609] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1135.064539] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1135.080605] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:48:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b31, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:49:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:10 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) pipe2(0x0, 0x80800) perf_event_open(0x0, r0, 0xd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480a82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, 0xda, 0x7) fcntl$setlease(r1, 0x400, 0x2) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x9, 0xe5, 0x69, 0x0, 0x7, 0x8, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x101}, 0x2020, 0x95c7, 0x3, 0x8, 0xec, 0x8, 0x9, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x6, r3, 0x2) syz_io_uring_setup(0x7579, &(0x7f0000000300)={0x0, 0xc186, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0xb000)=nil, 0x0, &(0x7f00000004c0)) 23:49:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 23:49:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x20}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)=ANY=[@ANYBLOB="015a000035f0a3b34bb7c76fb9b787cb6f4fda383440ce69f50d62ec382a85", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x2000c0d5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r4, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x64, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x35}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_O_TEI={0x8, 0x9, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x405}, 0x24040800) 23:49:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe0ffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x1f, 0x410180) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) chdir(&(0x7f0000000000)='./file0\x00') dup3(r0, r2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000001d000100000000000000000804000000"], 0x14}], 0x1}, 0x0) 23:49:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1150.052933] EXT4-fs: 5 callbacks suppressed [ 1150.052958] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.072468] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.081433] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.098964] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.106650] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.118736] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1150.246181] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.251931] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 23:49:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1150.330729] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1150.350399] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:11 executing program 7: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000340)=""/242) r0 = msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, &(0x7f0000000200)={0x2, "57747577482d9f521ac0a34384d1d08216e59463d96f4657002f055c7df665f9252465aa9bd43dbee166ee35bf7d304b4243f05a949308000000e202197a2542b7253863b04efbd24f4e3b50f7ae053789ff335a90257584c76c1e2487cc9e1000000000000000000000000000000000aced67afbdb5e7f063a34ca82c64abd286d6faf38c9e3f44146829c0f619742d953fa592e40d4aaad1b142d2dc071d720b46035f255740b5dd0e6dcade4e1e9f6ed77fc9ec0a45a9e2b9fef96baa31ce5e08a102d7f88035fbc54a26fe86e92b50b9cf1f7f24721c5b00"/232}, 0xf0, 0x0) msgrcv(r1, &(0x7f0000000440)={0x0, ""/58}, 0x42, 0x0, 0x1400) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/247) r2 = msgget$private(0x0, 0x40) msgrcv(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000008322c7d1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0xdd, 0x3, 0x1800) 23:49:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10b, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:11 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1, 0x10, r1, 0x8000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'team_slave_1\x00'}) syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}, 0x7) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000100), 0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x800454dd, 0x0) 23:49:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 23:49:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1e5, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000000180), 0x10, &(0x7f0000000300)={[{'net/bnep\x00'}, {}, {'*'}, {'\x00'}, {'\\-}/%:$'}, {'net/bnep\x00'}, {'\x00'}, {'\x00'}], [{@context={'context', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, ':,&\x97)'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '*'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000001c0)=0x10000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x4a880) readahead(r3, 0x3, 0x5d3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}}, 0xff) 23:49:29 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b32, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:49:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close(r0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 23:49:29 executing program 0: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x1, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc91, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x100000000, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000af512d27109ca88ed2aa4f13f886cedb4cb8d7c40aee86ae969bc3a473258a4d2c1c821c13e0b23096fa3288989ae294eebbdc6667c011ff8cc91f76be12edc6b41742358df5829b467d850a080000003152822bf5477d051b479878f201715a4f8b24653453fe86a697959a1dee9e100e5dea0018ddccb779fe9a231da5b588742fbefd739ed2eecc617a65dc2b3fb8e98f2e299109db6d090c94b4c5a03bcd2e1751125b37a6e452027fb9d617a043742d461fbf2f44b57b77317cae395fbb1742d2083afbc3e46f96be52ec875a614ec14794b8a4488b25919d5e1264d9b1441045425d453775095f637be24943e600"/259], 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0xe0, @any, 0x6}}}, 0xb) write(r0, &(0x7f0000000080)="01", 0x292e9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000080)={@msf, 0x1, 0x0, 0x0}) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000, 0x5) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x284, r5, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbb41}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xfc00, 0x0, 0xbf, 0x7, 0xb87c, 0x7f, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0xb53, 0x716, 0x8, 0xec, 0x0, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xae38}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b0, 0x11d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x9, 0x2, 0x7c25, 0x7ff, 0x9, 0xfb0]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x36, 0x0, 0x24, 0x3, 0x1b, 0x16, 0x6, 0x12, 0x36, 0x60, 0x2, 0x6, 0x1, 0x16, 0x6c, 0x18, 0x1, 0x30, 0x30, 0xc, 0xc33bb57a01bd7a5a, 0x5a, 0xc, 0x48, 0x6, 0x18, 0x1b, 0x4, 0x30]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x2}, {0x2, 0x9}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff, 0x1ff, 0x8, 0xbc6, 0x1f, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x3, 0x7ff, 0x2, 0x1ff, 0x1, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1a, 0x0, 0x60, 0x36, 0x48, 0x48, 0xb, 0x12, 0x2, 0x1, 0xb]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7795, 0xff30, 0xdfe, 0x900, 0xddc, 0x4000, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x1a}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x7}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x10}, 0x4000) [ 1168.784290] EXT4-fs: 6 callbacks suppressed [ 1168.784314] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1168.798398] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1168.802597] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1168.810821] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1168.816797] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1168.822451] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 23:49:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10301, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x137, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80800) sendfile(r0, r2, &(0x7f0000000180)=0x4, 0x1) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x7096c0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) sendmmsg$unix(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r5}}}], 0x38}}], 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) write$P9_RSTATu(r3, &(0x7f0000000200)={0x4c, 0x7d, 0x2, {{0x0, 0x36, 0x6, 0xf1, {0x2, 0x3, 0x7}, 0x40000000, 0xce, 0x4, 0x7, 0x0, '', 0x2, '\\.', 0x1, '\x00'}, 0x1, '\x00', 0xee00, r5, r7}}, 0x4c) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "7dd1a7303891abadfb5a0b4c6a8b345c"}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) [ 1169.060089] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1169.067034] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1169.071092] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1169.084381] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1169.118647] FAULT_INJECTION: forcing a failure. [ 1169.118647] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.120361] CPU: 1 PID: 8117 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1169.121363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.122385] Call Trace: [ 1169.122731] [ 1169.123031] dump_stack_lvl+0x8f/0xb7 [ 1169.123549] should_fail_ex.cold+0x5/0xa [ 1169.124098] ? __kernfs_new_node+0xd4/0x8c0 [ 1169.124719] should_failslab+0x9/0x20 [ 1169.125349] kmem_cache_alloc+0x5a/0x410 [ 1169.125900] __kernfs_new_node+0xd4/0x8c0 [ 1169.126447] ? lock_release+0x3b6/0x750 [ 1169.126966] ? __pfx___kernfs_new_node+0x10/0x10 [ 1169.127584] ? __pfx_lock_release+0x10/0x10 [ 1169.128172] ? lock_acquire+0x32/0xc0 [ 1169.128714] ? up_write+0x1b0/0x520 [ 1169.129243] kernfs_new_node+0x97/0x120 [ 1169.129810] __kernfs_create_file+0x55/0x350 [ 1169.130411] sysfs_add_file_mode_ns+0x21c/0x440 [ 1169.131045] ? __pfx_slab_attr_store+0x10/0x10 [ 1169.131679] internal_create_group+0x322/0xb20 [ 1169.132323] ? __pfx_internal_create_group+0x10/0x10 [ 1169.133015] ? up_write+0x1b0/0x520 [ 1169.133546] sysfs_slab_add+0x18e/0x220 [ 1169.134107] __kmem_cache_create+0x461/0x5d0 [ 1169.134718] kmem_cache_create_usercopy+0x201/0x2f0 [ 1169.135397] p9_client_create+0xc89/0x1050 [ 1169.135995] ? __pfx_p9_client_create+0x10/0x10 [ 1169.136633] ? lock_is_held_type+0xdb/0x130 [ 1169.137222] ? lockdep_init_map_type+0x21e/0x7f0 [ 1169.137869] ? __raw_spin_lock_init+0x3a/0x110 [ 1169.138507] v9fs_session_init+0x1e1/0x1670 [ 1169.139092] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1169.139778] ? __pfx_lock_release+0x10/0x10 [ 1169.140366] ? __pfx_v9fs_session_init+0x10/0x10 [ 1169.140996] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1169.141675] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1169.142369] ? lock_is_held_type+0xdb/0x130 [ 1169.142972] v9fs_mount+0xbd/0xbd0 [ 1169.143471] ? __pfx_v9fs_mount+0x10/0x10 [ 1169.144039] ? cap_capable+0x1da/0x240 [ 1169.144584] ? __pfx_v9fs_mount+0x10/0x10 [ 1169.145148] legacy_get_tree+0x109/0x220 [ 1169.145708] vfs_get_tree+0x92/0x300 [ 1169.146221] path_mount+0x1314/0x1e30 [ 1169.146751] ? kasan_quarantine_put+0x8f/0x1f0 [ 1169.147374] ? __pfx_path_mount+0x10/0x10 [ 1169.147960] ? putname+0x102/0x140 [ 1169.148471] __x64_sys_mount+0x286/0x310 [ 1169.149029] ? __pfx___x64_sys_mount+0x10/0x10 [ 1169.149655] ? rcu_read_lock_sched_held+0x42/0x80 [ 1169.150314] do_syscall_64+0x3f/0x90 [ 1169.150833] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1169.151536] RIP: 0033:0x7f767b249b19 [ 1169.152048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.154332] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.155313] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1169.156246] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1169.157157] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1169.158083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.159007] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1169.159972] [ 1169.182753] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1169.183928] CPU: 0 PID: 8117 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1169.184969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.186027] Call Trace: [ 1169.186373] [ 1169.186683] dump_stack_lvl+0x8f/0xb7 [ 1169.187228] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1169.187971] p9_client_create+0xc89/0x1050 [ 1169.188567] ? __pfx_p9_client_create+0x10/0x10 [ 1169.189199] ? lock_is_held_type+0xdb/0x130 [ 1169.189792] ? lockdep_init_map_type+0x21e/0x7f0 [ 1169.190444] ? __raw_spin_lock_init+0x3a/0x110 [ 1169.191076] v9fs_session_init+0x1e1/0x1670 [ 1169.191665] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1169.192337] ? __pfx_lock_release+0x10/0x10 [ 1169.192922] ? __pfx_v9fs_session_init+0x10/0x10 [ 1169.193545] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1169.194224] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1169.194916] ? lock_is_held_type+0xdb/0x130 [ 1169.195522] v9fs_mount+0xbd/0xbd0 [ 1169.196022] ? __pfx_v9fs_mount+0x10/0x10 [ 1169.196578] ? cap_capable+0x1da/0x240 [ 1169.197116] ? __pfx_v9fs_mount+0x10/0x10 [ 1169.197677] legacy_get_tree+0x109/0x220 [ 1169.198238] vfs_get_tree+0x92/0x300 [ 1169.198748] path_mount+0x1314/0x1e30 [ 1169.199274] ? kasan_quarantine_put+0x8f/0x1f0 [ 1169.199927] ? __pfx_path_mount+0x10/0x10 [ 1169.200494] ? putname+0x102/0x140 [ 1169.200999] __x64_sys_mount+0x286/0x310 [ 1169.201552] ? __pfx___x64_sys_mount+0x10/0x10 [ 1169.202182] ? rcu_read_lock_sched_held+0x42/0x80 [ 1169.202837] do_syscall_64+0x3f/0x90 [ 1169.203361] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1169.204066] RIP: 0033:0x7f767b249b19 [ 1169.204568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.206834] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.207823] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1169.208741] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1169.209646] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1169.210574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.211477] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1169.212428] 23:49:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x500, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1186.475618] EXT4-fs: 10 callbacks suppressed [ 1186.475635] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000) syz_io_uring_setup(0x2120, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 23:49:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x600, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close(r0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 23:49:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 23:49:47 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b33, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:49:47 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000001780)='./file1\x00', 0x0, 0x1, &(0x7f0000002bc0)=[{0x0}], 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0x191000, 0x100}, 0x18) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/109, 0x6d}], 0x3, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) openat(r0, &(0x7f0000000000)='./file1\x00', 0x440c0, 0x59) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) fsync(r2) [ 1186.489825] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.493895] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.499754] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1186.571598] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.589137] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.597467] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.604444] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) [ 1186.613628] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1186.620344] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:49:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6030000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20940ae}}, './file0\x00'}) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x81}, 0x1, 0x7, 0x4, 0x0, 0x11, 'syz1\x00', "528ff4dd3e92cf688db31a97867f5d1db751fbd441cb54d3d5850c1a8c68d538", "bf6d141f1e55a2e644fd91bc4aed6c424a6d03d98dff4175ced6bb7a753e165a", [{0x79a2, 0x6, {0x0, 0x81}}, {0x9, 0x4, {0x3, 0x200}}, {0x7, 0xf34, {0x3, 0x5}}, {0x1, 0x7f00, {0x2, 0x16}}, {0xdb, 0x4, {0x3, 0x20}}, {0x2, 0x81, {0x6, 0x7}}, {0x5e, 0x59b9, {0x2, 0x9}}, {0x2, 0x5, {0x3, 0x80}}, {0x6, 0x8, {0x3, 0x4}}, {0xc856, 0x8, {0x2, 0x8}}, {0x9, 0x4fa2, {0x3, 0x4}}, {0x4, 0x5, {0x2, 0x5}}, {0x1, 0x6, {0x1, 0x2}}, {0x6, 0x8, {0x3, 0x8}}, {0xf5c, 0x80, {0x3, 0x9}}, {0x7, 0x2, {0x1, 0x4}}, {0x1ff, 0x0, {0x1, 0x3}}, {0x4, 0x7, {0x1, 0x1f2}}, {0x1e50, 0x765, {0x2, 0x2}}, {0x3, 0x2, {0x2, 0x3ff}}, {0x4, 0x4, {0x2, 0x1f}}, {0x2, 0x3, {0x0, 0x8}}, {0xffff, 0x6, {0x3, 0x7fffffff}}, {0xd08, 0x7fff, {0x1, 0x20000000}}, {0xffff, 0x8, {0x3, 0x2}}, {0x1, 0x9e, {0x3, 0x6a}}, {0x7, 0x40, {0x3, 0xcc}}, {0x2, 0x5, {0x3, 0x6}}, {0x20, 0x674e, {0x0, 0xfffffff7}}, {0x400, 0x9, {0x1, 0xfff}}, {0x401, 0x2d, {0x0, 0x2}}, {0x3ff, 0x2, {0x2, 0x8000}}, {0x1, 0xfffc, {0x0, 0x3}}, {0x2, 0x5, {0x2, 0x3097}}, {0x200, 0x1, {0x3, 0x9c7}}, {0x6ec0, 0x10, {0x3, 0x81}}, {0x6, 0x3, {0x2, 0xffff}}, {0x400, 0xa5, {0x3, 0x5}}, {0x1f, 0x3, {0x1, 0x1}}, {0x72ce, 0x8, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x7, 0x5, 0x8, 0x7, 0x16, 'syz0\x00', "da737b9fac5ec87d2e636bcb8352390a0f595fb8441863da4fdc5d1e684a4be7", "c797bc571f43ea360d8220d6d10bbc97501904e3e1c47b06395e559737e0dc1b", [{0x7, 0x7e, {0x2, 0x61}}, {0x1, 0x1, {0x3, 0x1000}}, {0xfc7, 0x7fff, {0x2, 0x7}}, {0x6, 0x400, {0x0, 0x1ff}}, {0x6, 0x1ff, {0x1, 0x8}}, {0x7fff, 0x3, {0x1, 0x14d6a197}}, {0xca, 0x7ff, {0x1, 0x7fff}}, {0x0, 0x7ff, {0x1, 0xffff}}, {0x2, 0x7, {0x0, 0xffffffff}}, {0x7, 0x80, {0x0, 0x5}}, {0x7fff, 0x4, {0x0, 0xfffffffd}}, {0x4, 0x4, {0x0, 0x10001}}, {0x636a, 0x6, {0x0, 0x7}}, {0x8, 0x0, {0x2}}, {0xe000, 0xfffa, {0x1, 0x6}}, {0x7, 0x7ff, {0x3, 0x3}}, {0x1f, 0x9, {0x1, 0x88f8}}, {0x3, 0x107b, {0x0, 0xfffffff9}}, {0x3, 0x7, {0x2, 0x10001}}, {0x4, 0xff, {0x2, 0x3}}, {0x3ff, 0x4, {0x0, 0xde9}}, {0xf1e2, 0x3ff, {0x1, 0x7}}, {0x2, 0x8, {0x3}}, {0x5, 0x100, {0x0, 0x10000}}, {0xcb90, 0x3ff, {0x0, 0x9}}, {0x3, 0x8, {0x0, 0x8}}, {0xb2e, 0xc1, {0x0, 0xdf}}, {0x7ff, 0x8, {0x0, 0x8}}, {0x8, 0x20, {0x1, 0x5}}, {0x6, 0xd4c1, {0x0, 0x6}}, {0x6, 0x76d0, {0x0, 0x5fd}}, {0xc1b, 0xd6, {0x1, 0x6}}, {0x7, 0x6d, {0x1, 0x5}}, {0x9, 0xca, {0x2, 0x5}}, {0x0, 0x4, {0x0, 0x7}}, {0x8, 0xffff, {0x0, 0x6}}, {0x1ff, 0x1, {0x1, 0x7fffffff}}, {0x4, 0x9, {0x3, 0x8}}, {0x8, 0x5, {0x0, 0x7}}, {0x6, 0x50, {0x2, 0x9}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x40800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='/$/^\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) 23:49:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:49:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0x7, @esp_ip4_spec={@loopback, @empty, 0x6, 0x9}, @sctp_ip4_spec={@rand_addr=0x64010101, @multicast1, 0x4e21, 0x4e21}, 0x297, 0x6c, 0xe1f, 0x2, 0xfffffffffffffffe}}}) openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x200, 0x20) sendfile(0xffffffffffffffff, r2, &(0x7f0000000380)=0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x2000c041) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x2000c051) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x2, 0x0, 0x4) [ 1186.820001] FAULT_INJECTION: forcing a failure. [ 1186.820001] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.821757] CPU: 1 PID: 8184 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1186.822895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.824056] Call Trace: [ 1186.824442] [ 1186.824783] dump_stack_lvl+0x8f/0xb7 [ 1186.825380] should_fail_ex.cold+0x5/0xa [ 1186.825986] ? __kernfs_new_node+0xd4/0x8c0 [ 1186.826655] should_failslab+0x9/0x20 [ 1186.827222] kmem_cache_alloc+0x5a/0x410 [ 1186.827824] __kernfs_new_node+0xd4/0x8c0 [ 1186.828461] ? lock_release+0x3b6/0x750 [ 1186.829046] ? __pfx___kernfs_new_node+0x10/0x10 [ 1186.829738] ? __pfx_lock_release+0x10/0x10 [ 1186.830363] ? lock_acquire+0x32/0xc0 [ 1186.830959] ? up_write+0x1b0/0x520 [ 1186.831521] kernfs_new_node+0x97/0x120 [ 1186.832154] __kernfs_create_file+0x55/0x350 [ 1186.832823] sysfs_add_file_mode_ns+0x21c/0x440 [ 1186.833543] ? __pfx_slab_attr_store+0x10/0x10 [ 1186.834242] internal_create_group+0x322/0xb20 [ 1186.834955] ? __pfx_internal_create_group+0x10/0x10 [ 1186.835687] ? up_write+0x1b0/0x520 [ 1186.836291] sysfs_slab_add+0x18e/0x220 [ 1186.836924] __kmem_cache_create+0x461/0x5d0 [ 1186.837617] kmem_cache_create_usercopy+0x201/0x2f0 [ 1186.838386] p9_client_create+0xc89/0x1050 [ 1186.839046] ? __pfx_p9_client_create+0x10/0x10 [ 1186.839769] ? lock_is_held_type+0xdb/0x130 [ 1186.840447] ? lockdep_init_map_type+0x21e/0x7f0 [ 1186.841159] ? __raw_spin_lock_init+0x3a/0x110 [ 1186.841885] v9fs_session_init+0x1e1/0x1670 [ 1186.842524] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1186.843242] ? __pfx_lock_release+0x10/0x10 [ 1186.843868] ? __pfx_v9fs_session_init+0x10/0x10 [ 1186.844586] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1186.845319] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1186.846083] ? lock_is_held_type+0xdb/0x130 [ 1186.846730] v9fs_mount+0xbd/0xbd0 [ 1186.847292] ? __pfx_v9fs_mount+0x10/0x10 [ 1186.847900] ? cap_capable+0x1da/0x240 [ 1186.848511] ? __pfx_v9fs_mount+0x10/0x10 [ 1186.849143] legacy_get_tree+0x109/0x220 [ 1186.849771] vfs_get_tree+0x92/0x300 [ 1186.850347] path_mount+0x1314/0x1e30 [ 1186.850940] ? kasan_quarantine_put+0x8f/0x1f0 [ 1186.851631] ? __pfx_path_mount+0x10/0x10 [ 1186.852281] ? putname+0x102/0x140 [ 1186.852844] __x64_sys_mount+0x286/0x310 [ 1186.853461] ? __pfx___x64_sys_mount+0x10/0x10 [ 1186.854157] ? syscall_enter_from_user_mode+0x21/0x50 [ 1186.854920] do_syscall_64+0x3f/0x90 [ 1186.855485] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1186.856274] RIP: 0033:0x7f767b249b19 [ 1186.856810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.859387] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1186.860482] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1186.861493] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1186.862530] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1186.863562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.864562] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1186.865586] [ 1186.872155] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1186.873286] CPU: 1 PID: 8184 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1186.874410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.875580] Call Trace: [ 1186.875970] [ 1186.876307] dump_stack_lvl+0x8f/0xb7 [ 1186.876893] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1186.877683] p9_client_create+0xc89/0x1050 [ 1186.878320] ? __pfx_p9_client_create+0x10/0x10 [ 1186.879024] ? lock_is_held_type+0xdb/0x130 [ 1186.879658] ? lockdep_init_map_type+0x21e/0x7f0 [ 1186.880383] ? __raw_spin_lock_init+0x3a/0x110 [ 1186.881065] v9fs_session_init+0x1e1/0x1670 [ 1186.881661] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1186.882353] ? __pfx_lock_release+0x10/0x10 [ 1186.882961] ? __pfx_v9fs_session_init+0x10/0x10 [ 1186.883635] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1186.884351] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1186.885074] ? lock_is_held_type+0xdb/0x130 [ 1186.885703] v9fs_mount+0xbd/0xbd0 [ 1186.886230] ? __pfx_v9fs_mount+0x10/0x10 [ 1186.886813] ? cap_capable+0x1da/0x240 [ 1186.887393] ? __pfx_v9fs_mount+0x10/0x10 [ 1186.888002] legacy_get_tree+0x109/0x220 [ 1186.888574] vfs_get_tree+0x92/0x300 [ 1186.889141] path_mount+0x1314/0x1e30 [ 1186.889707] ? kasan_quarantine_put+0x8f/0x1f0 [ 1186.890362] ? __pfx_path_mount+0x10/0x10 [ 1186.890978] ? putname+0x102/0x140 [ 1186.891523] __x64_sys_mount+0x286/0x310 [ 1186.892135] ? __pfx___x64_sys_mount+0x10/0x10 [ 1186.892794] ? syscall_enter_from_user_mode+0x21/0x50 [ 1186.893542] do_syscall_64+0x3f/0x90 [ 1186.894088] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1186.894807] RIP: 0033:0x7f767b249b19 [ 1186.895331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.897773] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1186.898804] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1186.899779] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1186.900771] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1186.901732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.902689] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1186.903694] [ 1187.112067] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1187.157839] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:50:02 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b34, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:50:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xb58a, 0x100000001, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x21) mount(&(0x7f0000000a80)=ANY=[@ANYBLOB="44000000004350231cbad124612b8f19f518648f09eca175b317c8ea8dba12366d9faec7ba62f91b46641a6e4d06447b8723d8c721e94d97d6c18cffff836c4fd768b902db05f1c1e26633c296e55f331f2ce9d1e8b711145ad3b3ce085536984eff5b21cd8c6b6852ca8400000c2932fa3099cad2a04dc44eb25709fd9dc655d48b9045a73f083fc73ffd2622703084c04f5731918490c8e482080a580e92b4ce85b7d07798f81d603b4682f973ff9b8661d2b1598400a7b572bb26978a20af5b2500000000005e69c574e29cce30d99e7d583670ae3e18ea940d6e5a40fd2591fb210a4508a98ba605cf3969b50da095002000"/255], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x255, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="0c5b6bbf1ff2d5da79accdb8c4a9439602676b21", @ANYBLOB]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x100000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x2, 0xffffffffffffffff, 0x6}) connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, 0x0, 0x6}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 23:50:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x8, 0x20, 0x7f, 0x0, 0x1, 0x2821, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x20, 0xfffffffffffffc01}, 0x0, 0x2, 0x4, 0x8, 0xff, 0xfffffff7, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/225, 0xe1) 23:50:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x900, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 23:50:02 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001240)=[{&(0x7f0000000080)}], 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="fe246e6f726f636b2c657569", @ANYRESDEC=0xee00, @ANYBLOB=',hash,fsuuid=dP438971-6513-762a-7609-10d7bd6R,\x00']) [ 1202.156519] EXT4-fs: 6 callbacks suppressed [ 1202.156545] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.171319] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.181405] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:02 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) sendfile(r1, r2, 0x0, 0x10000027f) 23:50:02 executing program 7: syz_mount_image$vfat(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) openat(r1, &(0x7f0000000000)='./file0\x00', 0x800, 0x4) [ 1202.191762] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.199086] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.206583] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 23:50:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1202.442976] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.447863] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.459642] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1202.464332] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:03 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "27ec7be1f3c358007c519c78d71bf652920bb6", 0x0, 0x34}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x4, 0x1010, 0x7f, 0xf31, 0xc, "05f191bfc40d2796"}) getpid() ioctl(r0, 0x6, &(0x7f0000000100)="fce8097f0a86e0e124") 23:50:03 executing program 2: r0 = syz_io_uring_setup(0x14fb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0xe000)=nil, 0xe000}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000200)='\x00', 0x6) fcntl$setlease(r4, 0x400, 0x2) openat(r3, &(0x7f0000000240)='./file0\x00', 0x20000, 0x1) syz_io_uring_setup(0x1db7, &(0x7f0000000140)={0x0, 0x74f6, 0x0, 0x2, 0x34d, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x800000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x80040, 0x6, 0x8}, 0x18) r6 = openat(r5, &(0x7f0000000340)='./file0\x00', 0x408000, 0x100) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x4) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f00000003c0)={0x2f41, 0x10001}) 23:50:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000000180)=ANY=[]) 23:50:20 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b35, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1219.366106] EXT4-fs: 2 callbacks suppressed [ 1219.366120] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 23:50:20 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x7, 0xfcac}) ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 23:50:20 executing program 7: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1a, r0, 0x1, 0x1, 0x6, @broadcast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={r1, @dev={0xac, 0x14, 0x14, 0x3c}, @empty}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', r1, 0x8, 0x80, 0x1f, 0xf5, {{0xb, 0x4, 0x1, 0x37, 0x2c, 0x64, 0x0, 0x60, 0x4, 0x0, @remote, @local, {[@ssrr={0x89, 0x17, 0x3f, [@private=0xa010100, @private=0xa010102, @loopback, @local, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x7800, 0x3ff, 0xffb, {{0x2b, 0x4, 0x3, 0x2e, 0xac, 0x68, 0x0, 0x6, 0x21, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x1, [{@remote, 0x1}, {@private=0xa010102, 0x8001}, {@rand_addr=0x64010101, 0x5}]}, @end, @rr={0x7, 0x1f, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_addr={0x44, 0x3c, 0x61, 0x1, 0xf, [{@remote, 0x56f}, {@multicast2, 0x9}, {@remote, 0x5}, {@local, 0x4}, {@broadcast, 0x65}, {@empty, 0x80000001}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0xb9, [@multicast1, @multicast2, @broadcast, @broadcast, @empty]}, @rr={0x7, 0x7, 0x6f, [@multicast1]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x210, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20004040}, 0x88d0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000980), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/36, 0x24}, {&(0x7f0000000b40)=""/35, 0x23}], 0x3}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/2, 0x2}, {&(0x7f0000000cc0)=""/91, 0x5b}], 0x3, &(0x7f0000000d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/115, 0x73}, {&(0x7f0000000f00)=""/75, 0x4b}], 0x2, &(0x7f0000000fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001140)=""/194, 0xc2}, {&(0x7f0000001240)=""/210, 0xd2}, {&(0x7f0000001340)=""/127, 0x7f}, {&(0x7f00000013c0)=""/14, 0xe}, {&(0x7f0000001400)=""/3, 0x3}], 0x5}}], 0x4, 0x2000, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x150, r13, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r14 = dup3(r9, r11, 0x80000) [ 1219.384054] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode sendmmsg$inet6(r14, &(0x7f0000002a40)=[{{&(0x7f0000001840)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000001880)="fafdd21e4601b52455d5323c8439ae18f5", 0x11}, {&(0x7f00000018c0)="835bcc739a8cfff5653e2e6c3b8cbcd588c2127fbb74a6ace86c180d796c4635fa2976f4cb4b7c898005dc0d76ec60cf9e500e98c0bfe545ce6887cba0b59bd19cff13e9ac42e4bf1418ecdd947798f894bb2f31437bceb4d41b783046a4fd51aea46c5a777936838871aef5b017cc1f84891d46ae252f8d1512c0f4598f4fff524b08631a1ec266824bffc2d44f9f62a167e31441bd62a5dfa54cd5177499b11177ccac0028efa04c2e93fb16c5bbfc5b5b30760bfe34e99721eae85cde512f491542b10ab5ae44a6f137f89edb", 0xce}, {&(0x7f00000019c0)="7e9e47ec70e4367984aef527590416b1c2718f1540e461c3420fdeca38baf73fde4cdad6c16c5153da8a89c103c84b00b15025e91c6c933fac31d1f2c35502f46040b509c8c5ab5371871da22ff7e1f255a45d33751e47bcf199fb8598e6b6aabc68a4a7df06852ecd008d08c8e73fcdbb56edd1c420d4eaca268ca262b74a5c84d7f41a251f2f1a687c356d07b5730e75069836d32d59ccd8150fc7021741dda8f5658ba56e43fedbd3ab4ba4934aa4260cd55ad067666eb3e6389d117e61e575b30a69c20e0640a2948375ddd603021f518951641752382b65153aa368789b3923e8752ecf5bf6d5e0a3724e69911a7d09aa82eba0dcecf634b3d5598ee035ba6a05041d426b8f40fc0c29fc27eba4b24cd59846dca8613c82da4acadf86f0b786db79ae688bdfa795afc9f5e360a8bb733c82b15578f5fbad7be9385b1c8741e4769c59a71f4a0eac7171c915274d0b59372f899293d9b234c4a681715d883262edc3fe52a14383c882858042f0c3b81d26903d1aa94a8edffa8bdbe72d4083e0acc30300a40e99e21b1014313ba529f87180191a856e48d4b7c12add3d3520f5c10ddc8016c6e5e58f7c0d38126b549dc0b0082eef49dae94a97ab73329ab3becd95401536cef67f87ee39e31a60f85e5f4d4d81221f2d7f29fb0dd66abe325094051f18ec6db15cacba38f4161c08939a62abb158cda4cb90ba3e6dee1b37c4b7d0b178b6eeadeb8e432459e12b3d1e8424c783c5b68e03d15cc95ec85387c68e92fbecbb4dae129a4fe37cf0fdbd648603694fb5b972a2ac7584f13ebcd9327f3bb69bec9ae0e3095a3b67a432c9f3ee2b4a9d4e1182064b4ceae869a6eb5346a814c00c1788a75c1eab972320f9c1772da75f16e4526193bb3f7882cf1092f3e7fd8e6e83d417a1fd5327e7de90a9c9c82f974050406bd5de6516259be6de013a46c56ef6f56576e7b90bd092d97d28362b243c0760e06b2762c4e2cfd3f8449fb68d5cbd4968f2137eea41eef1a19091b5140000f48321eaa6833f9e37ed79856d7d9c8a9b62ec31b080e4e0c4cb87683379e5c483c123aed279d2bf116d1f3fd0efaf33a04f16344e891214270d1f873818e769d5e5899fc1863f56df48874633cec4674b1278af32cc61e7a51117f2aa4e25e7b3c44d3db85c172a20a6d9b5d3c5458a9a1514fadf160cbcc584b46bdc9287e3cf93b862e91c9d5f9ccef70c6eb52c8f0e8e2f4774d68d1bf3c0eb8c84bc22499962f127fd3188daa6d43b2696323fbd79022a889ea0203d434d14a53c768469315001d95870ae29c3074522704fe24efdb1dd9ef38d6331f51e0e8bcdd99f202bba0cf759179303f4c6402689cd67bfd0e366eb6953879becf98982ba60d7ea9d44f3cdfaab2bc4ce9d64939259229ae30f93361be1296897a96e939ff2ebe55e5324160fedb604d686d864e94940caa9123d31e7e4e5275cd21d276ec0398a1debe6c1a88023c5d3f5a25f9d6fe6dee95dd4c282dbe737b53f95d5c855edf1e6750d86869d8a93383a17370a96bbd7435f7f8532ce791fbebb0885662b92e9562bd05368ce3143817d5566e3928134ce5dd7ddbcca48db7d20f2bf90336cbb93e0ebf9a63c2915e28153e778400ad05b34b2d5a3ee2e453f2dd8a4754becb25f2577af7add5dfa6fc288cb402911644c3aaa3d41fda2771cb23390c0bf60645448fec8875d344e843bc6224bd9f027c787d9b78f7c378dc46cf4e8869fb1b921639ea663ec22972edfe1871028e3ac023e4146f4e28abc6d9766932ad3aa6206b9eef94c417d104798e4b4580ee8e14bd53add22e0808f82febd04882551a1ab1439a0f5cab3b81fa172d4b4cb7e82f210fe64ace96e1566638757739e70da610b477a46c27a1f252ec4025364e08854d3a7bd076a7e4f5fc0a24ab1ef5b3f98670e51ff058e8b8cddfbd975165f33386c601edc7ae25950a0058e7ecbfc571a58fd9864fb2127230567268d549ab8cd0c8f1ec50724ce26f973fd359e28bd95a9726a32ba194feb19e2ab69bad687c7742057c6869a227f232d655dc70ce0f8059d9359df5c3e4514bea146ed4e6ff38490729e1478270f70c84bdf6d228a8ab9aed7e91757de62ff928b1ac55d2bbb4cec3d47842965e543841efd959115fc04189ab7a30c4dc3b2bad6e30d21a814e357e286b072722e5623b28ef72e149c57cd93f5b6e37556c22546d1efe521841100a3f37d659fb2a9232c348cb51bc6e5ddf810d7ad3cb3cbf719b0963954eaf541635c702a11c894c164f43e493fdc78eab7abbe6f54d538248c93f2ba0452d698f535e42dea5daa046999aea17c1e1e2d089f003fb64ef300a2fd64a9e6b4ee1a7f744b33d666b8db2f7b7a46812dda9216bb509a5d083d317e94f1756b1d142fa439abdad70bf39f49d6fca42cb298c78825f7c91ba0d58a11f7dffcdb3dcfe3595ea2bada5f38d34ed5b3a8e14fde7d36afc8295ba86357408be93e7ebe3c8f51c5185c960b3aa408d60777bc5133fc661ba47e99286d0ec4470efade4fa6425997591a28fff7437b96437176f013abde3fbafff6aef4786e8b7f1ff59b750f5c102c43a8e24aaaace683a9078523b863901515937f933034551838b859082cd2db9b941ad4195f22ec5af93f0dd9ee8ea4d98072aaad491a72dd20951417560c972c4df253923cacb2e49365198c768dc0e89d4c8cd07eb9351731948d1c82daf20d15a619d54a74416e3f0af1fc696142ef6a58052bbb2e945c039a54d5989a803a9ffa1dab88e36eef300ed22b652eaac73666b506cd1460352fdc9912b7a40308501abca56308dcf43617333a6847547fc9dde0c65e60a3706b75eddffc423dd49650551c608cdeb4a6d32830a7c10cde6748afeee50ec3ad8e3f31718bc2edb5c7febd55d36c8c54eef2e4ec3a9b39f498603dbe988a68e4b364fa818549f3b8e20f66764057dcae09aaaf4a4cf873670aa5a875d5c57143af65537261ffe7b97bfad603b22ec9e62d34bd71a3e375e7e958cd8ff0422f0e030e2265bb753e174caec8ce5fd712a0f2bdece2aa4bc27ba1a3b479d90e9c970618771a306a0b25884ff6b0fdb346eb32f8796a1593b29f4ac97111effb0a7ac22aff3360c5d26d0033edc78fb06dde9cdf133e8c4358f08f743242371cd528f482e46a219b13d7b29411b97066c301b24dfbc61b56a442be9f0ebc48616d86daeb064ebadc9387563095bbf6dadbe9f1995080f5b892d8319f8d869bf57d541fc3e857d5e06de6b6733c4e38bc0a67da41d7f8fab0b9b6d167d34767cb4b892f2cc2c745993df3cff798110d6e3d11c6024378b735111d148b72bdb7cc411a2dc8e73e9b1211d0fd16e04c7daccde900009950d87da36652a368e5c8f93dc4c47cdbffcb3a3d8f10e84f110a8686a184f321ce44fb303e0dfba3413deb5632968d33fc3eba78052383ee5f25c091469f8c3c2f7dc08021b907e326e452cb7ea38c00a63df02e46ba1ee2d033dc5604bad003eec1049f52dfabe036e2018d8d73b0f66a4a236fa6e2e2076eefe901698e0e0f5bf8e184b0243f648f73a57ef4953f6a7ea10d63bae9d874583189cfad90cce76faffccbfde05c5b51e98a37df84456ee81b76f232d24f4b156a09e5ae62f2ef4e8680a8a34d6b7a096398f13a4473548e9dfdb80ad18e0c365044bf81a062662a0f9a1807d0afbef771b0dea887b4e240baf509a86d69a7d34a9680e7ee55f88e00a8f17919ad05c55a405a5c2831722412c5336b640ff93b51554d2bb7a969169b042fd5ef4da7e89b736b39067e75a71837b4124d7471e399199a60dc46d880f5b22283abcbf9c325970340abf3fe9d2f6579fb1b900b9654ae38f8b361fea38ab3d8179e88aed31362ea5912dc35bf64001ceb01a779400df4a2804b6093a1b60d9e114a975ce07c8b81078205283fc604070c001aef6142b991b1ec0faa801153adad835be963543b0492d7900047358269cc30cd24eb015668d3be9784fa2c746781a6049183314032da31465d10e999575b385e25eb70269aa4883f3a6fe4414077a9df4b5597bdca9a6ca7b12007a2226f37666ab4d24d99cf41d735d7f84dcd3b48faf043c8c8ea9fabd6acce6f6d8ea8ec56fb3d8165a8349d002a6cd4cc7c04d2375660069cdf7d587971afafd9f8fecd885eb456d884323c49f62cdc2a54c89dbf3228b0da33c728c3847492068320998b187670f28004414543d61ad3cbcc9e8475d48f9172fd758e60c9dec742e800ed99b95a99036f4d33ab79bb943e29e6a5e9b62c6426390d7e5cd15c2e12c29538f781a10ed22093be35a6ff4625c014e441d3b40e38343dedb6e770409967cc662c1c40ab40be62db7fc14cd4d44977110406ed8fe4dc84b501cf1e9c1b4a64ad73816d32a9c0e840a255f26d4a7c9a9cee9891ef1b30e4f2bddb7d48fc2a4f1e387cde676b5b675416611dd3a003cc93b7533f092c1d15afc0514eea7fa08b94105a4cae764c929a24334e1711dc1366605fd573a0eca8f28fc76a8dd74e93df6da7a5c61e80e0bea48049c8e0c9ad8b80d06434800be61e89b122e6d3c23245927cbf30c2211c2151851c847f9ccd9e5172b7ca4fa935b369569c4d3e2fdc97bfc62addbd29a6dea4fcce0e9c3235a7d5352cc5d209eec2dbc3b170a68b9e588982cfc6c4037fe5fe51847eb2be8d8efc1c19a44f7e14915b640b79414150207a9582ec07eb963b91409a485737f07b393f7f2a04529b979be3c268c0d6f0f15211fb8f0f2f3c1757b8dcbcad65e1c08eef0dee3a2bc51180685af97a4b9689fe315222a008408e73cf2f2af67f8539828db8e3f943ec679c4ce3869fd1d1f07eb9aaa8dcebb599a9ecc5b56c26a51d17429a7f88a793efab0ecca673493a3852d0856f18282ce2617409ab04802ede34056470608b2791dfab236c3818301840521efe04c2e31cf681fff0211bbd22885b44a9d06df8c9efc1f2ab2c6bf3c9dcd3d85ffeecaa60203e221952106632f8c663095b15a3178e54d5c60c69bb945c2c0db1f70e53e5efb7ed0639444bd081395c038eedc604599057079e4c4aa5056c0f99a990c357687637d645dfc5c6f50a27f4ea7c79f7056f08dd3157258a3493d8839a5286461156770192a77cdaa77e7621c91dad98e9b3e7ee7f439ed94230fedf0fcee9fab87fae7fba8f30d75db23f8a57ddf5f676e30fc892c3e5b156c238f8a25b1e6b29e820b8cf17e3d5f66b488f8460a1b768c789e000d1d4189e8475443f70e835459d7b17230de628d1e3bfa09ffc1be9bedfbc05d5549f665a136dd0cbc8df3df2fc7fc36f04abe86c7f5c4a1c1971a46d446c7f90adb0cd7cd509bbf562071dfc3ed8038740d25328b147784ca7de39288bcbf967e5f0d4d99d8c818a3bd44798d71cb590baf53c65c0608ebdde2cdd96129dc0c86b8add4d406a1e25ab0e18897615d7a46ceb9b18bc365f43df442cad05c475062177858d1fe8e51e915b1ef3d37da51066fffbbf6059ab8d8815610ac2c71e8d31ff055c77453a244802abea6d3299ad0dd29af65bd54e5d2360455ec3f9f0c10bafaa6de09f4675ed188637112c6600823e1ef1d5ed3d4b3df3ba4feb51e18ec00835e7f1fb57bec077f86f44843746e2926308ab73b0700582689e9f96f663ba97e45a24055fa9e08b8eb8ed09b3855a8d21f412f76613b82f7c8ad5831e9541f429a116273835d1b31b9132fad9a536cac810175491638951b32bc9e54b4cc1792423ad215fa1788940ad3236d07a96c425", 0x1000}], 0x3, &(0x7f0000002a00)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r7, @in_args={0x2}}, './file0\x00'}) fcntl$setlease(r15, 0x400, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000002b80)={'ip6tnl0\x00', &(0x7f0000002b00)={'ip6_vti0\x00', r0, 0x29, 0x6, 0x7f, 0x7fffffff, 0x13, @local, @mcast2, 0x20, 0x1074f, 0x5, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002bc0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000002cc0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r12, 0x89f5, &(0x7f0000002d80)={'ip6gre0\x00', &(0x7f0000002d00)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x1, 0x7, 0x41, @private0, @mcast1, 0x80, 0x1, 0x4, 0x200}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000003000)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x1d4, r13, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x1d4}}, 0x1) [ 1219.391775] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.421085] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.427541] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.447088] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb01, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) dup2(r0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f000000a940)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002c001107000000000000000008000000ffffffff"], 0x28}], 0x1}, 0x0) 23:50:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) 23:50:20 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x10002c86, &(0x7f00000005c0)={0x0, 0x4eea, 0x0, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) getpid() r2 = dup3(r1, r1, 0x0) syz_io_uring_setup(0x49ee, &(0x7f0000000080)={0x0, 0xa929, 0x10, 0x1, 0x214, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105982, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, 0x0, 0x0) [ 1219.623705] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.636594] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.650348] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.656313] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1219.668074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 23:50:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb63, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1219.714368] FAULT_INJECTION: forcing a failure. [ 1219.714368] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.715957] CPU: 1 PID: 8287 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1219.716986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.718008] Call Trace: [ 1219.718358] [ 1219.718657] dump_stack_lvl+0x8f/0xb7 [ 1219.719178] should_fail_ex.cold+0x5/0xa [ 1219.719714] ? __kernfs_new_node+0xd4/0x8c0 [ 1219.720303] should_failslab+0x9/0x20 [ 1219.720835] kmem_cache_alloc+0x5a/0x410 [ 1219.721379] __kernfs_new_node+0xd4/0x8c0 [ 1219.721936] ? lock_release+0x3b6/0x750 [ 1219.722464] ? __pfx___kernfs_new_node+0x10/0x10 [ 1219.723086] ? __pfx_lock_release+0x10/0x10 [ 1219.723648] ? lock_acquire+0x32/0xc0 [ 1219.724182] ? up_write+0x1b0/0x520 [ 1219.724701] kernfs_new_node+0x97/0x120 [ 1219.725260] __kernfs_create_file+0x55/0x350 [ 1219.725840] sysfs_add_file_mode_ns+0x21c/0x440 [ 1219.726454] ? __pfx_slab_attr_store+0x10/0x10 [ 1219.727060] internal_create_group+0x322/0xb20 [ 1219.727684] ? __pfx_internal_create_group+0x10/0x10 [ 1219.728368] ? up_write+0x1b0/0x520 [ 1219.728893] sysfs_slab_add+0x18e/0x220 [ 1219.729433] __kmem_cache_create+0x461/0x5d0 [ 1219.730030] kmem_cache_create_usercopy+0x201/0x2f0 [ 1219.730707] p9_client_create+0xc89/0x1050 [ 1219.731291] ? __pfx_p9_client_create+0x10/0x10 [ 1219.731913] ? lock_is_held_type+0xdb/0x130 [ 1219.732509] ? lockdep_init_map_type+0x21e/0x7f0 [ 1219.733147] ? __raw_spin_lock_init+0x3a/0x110 [ 1219.733774] v9fs_session_init+0x1e1/0x1670 [ 1219.734360] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1219.735005] ? __pfx_lock_release+0x10/0x10 [ 1219.735595] ? __pfx_v9fs_session_init+0x10/0x10 [ 1219.736216] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1219.736892] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1219.737576] ? lock_is_held_type+0xdb/0x130 [ 1219.738173] v9fs_mount+0xbd/0xbd0 [ 1219.738666] ? __pfx_v9fs_mount+0x10/0x10 [ 1219.739229] ? cap_capable+0x1da/0x240 [ 1219.739750] ? __pfx_v9fs_mount+0x10/0x10 [ 1219.740306] legacy_get_tree+0x109/0x220 [ 1219.740878] vfs_get_tree+0x92/0x300 [ 1219.741385] path_mount+0x1314/0x1e30 [ 1219.741905] ? kasan_quarantine_put+0x8f/0x1f0 [ 1219.742522] ? __pfx_path_mount+0x10/0x10 [ 1219.743087] ? putname+0x102/0x140 [ 1219.743588] __x64_sys_mount+0x286/0x310 [ 1219.744131] ? __pfx___x64_sys_mount+0x10/0x10 [ 1219.744757] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.745478] do_syscall_64+0x3f/0x90 [ 1219.746018] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1219.746724] RIP: 0033:0x7f767b249b19 [ 1219.747228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.749564] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1219.750557] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1219.751456] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1219.752371] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1219.753260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.754153] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1219.755080] 23:50:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1219.816823] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1219.818036] CPU: 1 PID: 8287 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1219.819051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.820089] Call Trace: [ 1219.820434] [ 1219.820736] dump_stack_lvl+0x8f/0xb7 [ 1219.821278] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1219.821974] p9_client_create+0xc89/0x1050 [ 1219.822567] ? __pfx_p9_client_create+0x10/0x10 [ 1219.823181] ? lock_is_held_type+0xdb/0x130 [ 1219.823758] ? lockdep_init_map_type+0x21e/0x7f0 [ 1219.824408] ? __raw_spin_lock_init+0x3a/0x110 [ 1219.825029] v9fs_session_init+0x1e1/0x1670 [ 1219.825594] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1219.826246] ? __pfx_lock_release+0x10/0x10 [ 1219.826816] ? __pfx_v9fs_session_init+0x10/0x10 [ 1219.827425] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1219.828093] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1219.828769] ? lock_is_held_type+0xdb/0x130 [ 1219.829373] v9fs_mount+0xbd/0xbd0 [ 1219.829857] ? __pfx_v9fs_mount+0x10/0x10 [ 1219.830407] ? cap_capable+0x1da/0x240 [ 1219.830941] ? __pfx_v9fs_mount+0x10/0x10 [ 1219.831489] legacy_get_tree+0x109/0x220 [ 1219.832031] vfs_get_tree+0x92/0x300 [ 1219.832544] path_mount+0x1314/0x1e30 [ 1219.833070] ? kasan_quarantine_put+0x8f/0x1f0 [ 1219.833682] ? __pfx_path_mount+0x10/0x10 [ 1219.834242] ? putname+0x102/0x140 [ 1219.834745] __x64_sys_mount+0x286/0x310 [ 1219.835300] ? __pfx___x64_sys_mount+0x10/0x10 [ 1219.835918] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.836629] do_syscall_64+0x3f/0x90 [ 1219.837138] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1219.837821] RIP: 0033:0x7f767b249b19 [ 1219.838311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.840553] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1219.841523] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1219.842434] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1219.843327] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1219.844216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.845120] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1219.846049] 23:50:35 executing program 7: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) gettid() ioprio_set$pid(0x1, 0x0, 0x2004) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = getpgid(0x0) r3 = getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000080)={r0, r1, 0xffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) wait4(r4, &(0x7f0000000040), 0x4, &(0x7f0000000140)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) keyctl$join(0x1, &(0x7f0000002540)={'syz', 0x0}) sync() 23:50:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1500, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b36, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:50:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, &(0x7f0000000000)=0x3, 0xed35) 23:50:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) 23:50:35 executing program 0: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xf6, {0xf6, 0xd, "a101a8314fcb332ec1750d84f3f381af37c7275a91157a257f19d3b4cbd886d23688dd9fbc8bfc5beb8f96ca1f7cf1ae7a7b8ffb5662ae85be54f3483d56cba6d7e49961603e0cb34e561d38cf84a1104f52c553fc4f0704a7fedc2e6d348a5b9a71125e52b6db46c2d1eac396efc4b5bbced2b9fd6fedbc70819696d69ceb8987d8c7e7b05247dcddd44e58058e024b810b9e8061fb97352b30fff14c96cccb5ec4ab948d2f05e97ce1008e1091b94ba5d2baac16b743711d35ffa23c6d2a92288f3ec95a05f3edc42f3763dcf603bdce83ba4387162d3f825e72e8a64699fc7c25100761cb241e00c1a328e5121173a5cd1acb"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x14, 0x74, "22e7d6cad91a42a65e0bb543c969374df72d5c6e77d2ced3cc8e61b315ea064c931f7e6ea6393a3a281a29408dacd150a18999aa6529b4377c9e3a6bb90ee2a9e6b1517a29617a83b2ecf9b15fb2b5a8bf2a1c05e1ab4c074820933dd75ad3328aa1982f3c93af934f433d1e82c304e75363670c"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x8000000) unshare(0x20200) unshare(0x2040500) 23:50:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 23:50:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x40, 0x1f, 0x2, 0xdd, 0x0, 0x8001, 0x90000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0000001, 0x2, @perf_config_ext={0x9, 0x9}, 0x6040, 0x5a0000000000000, 0x8, 0x6, 0x81, 0x400, 0x3, 0x0, 0x7ff, 0x0, 0x2}, 0x0, 0xd, r1, 0x2) [ 1234.578319] EXT4-fs: 8 callbacks suppressed [ 1234.578333] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.585824] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.589633] FAULT_INJECTION: forcing a failure. [ 1234.589633] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.591378] CPU: 0 PID: 8325 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1234.592496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.593655] Call Trace: [ 1234.594014] [ 1234.594338] dump_stack_lvl+0x8f/0xb7 [ 1234.594742] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.594891] should_fail_ex.cold+0x5/0xa [ 1234.595974] ? __kernfs_new_node+0xd4/0x8c0 [ 1234.596601] should_failslab+0x9/0x20 [ 1234.597149] kmem_cache_alloc+0x5a/0x410 [ 1234.597735] __kernfs_new_node+0xd4/0x8c0 [ 1234.598332] ? lock_release+0x3b6/0x750 [ 1234.598896] ? __pfx___kernfs_new_node+0x10/0x10 [ 1234.599580] ? __pfx_lock_release+0x10/0x10 [ 1234.600194] ? lock_acquire+0x32/0xc0 [ 1234.600783] ? up_write+0x1b0/0x520 [ 1234.601341] kernfs_new_node+0x97/0x120 [ 1234.601930] __kernfs_create_file+0x55/0x350 [ 1234.602572] sysfs_add_file_mode_ns+0x21c/0x440 [ 1234.603248] ? __pfx_slab_attr_store+0x10/0x10 [ 1234.603917] internal_create_group+0x322/0xb20 [ 1234.604595] ? __pfx_internal_create_group+0x10/0x10 [ 1234.605345] ? up_write+0x1b0/0x520 [ 1234.605934] sysfs_slab_add+0x18e/0x220 [ 1234.606549] __kmem_cache_create+0x461/0x5d0 [ 1234.607228] kmem_cache_create_usercopy+0x201/0x2f0 [ 1234.607980] p9_client_create+0xc89/0x1050 [ 1234.608655] ? __pfx_p9_client_create+0x10/0x10 [ 1234.609373] ? lock_is_held_type+0xdb/0x130 [ 1234.610027] ? lockdep_init_map_type+0x21e/0x7f0 [ 1234.610753] ? __raw_spin_lock_init+0x3a/0x110 [ 1234.611469] v9fs_session_init+0x1e1/0x1670 [ 1234.612121] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1234.612867] ? __pfx_lock_release+0x10/0x10 [ 1234.613530] ? __pfx_v9fs_session_init+0x10/0x10 [ 1234.614220] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1234.614871] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1234.615548] ? lock_is_held_type+0xdb/0x130 [ 1234.616143] v9fs_mount+0xbd/0xbd0 [ 1234.616636] ? __pfx_v9fs_mount+0x10/0x10 [ 1234.617187] ? cap_capable+0x1da/0x240 [ 1234.617721] ? __pfx_v9fs_mount+0x10/0x10 [ 1234.618266] legacy_get_tree+0x109/0x220 [ 1234.618813] vfs_get_tree+0x92/0x300 [ 1234.619324] path_mount+0x1314/0x1e30 [ 1234.619846] ? kasan_quarantine_put+0x8f/0x1f0 [ 1234.620462] ? __pfx_path_mount+0x10/0x10 [ 1234.621049] ? putname+0x102/0x140 [ 1234.621553] __x64_sys_mount+0x286/0x310 [ 1234.622107] ? __pfx___x64_sys_mount+0x10/0x10 [ 1234.622818] ? syscall_enter_from_user_mode+0x21/0x50 [ 1234.623608] do_syscall_64+0x3f/0x90 [ 1234.624197] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1234.624982] RIP: 0033:0x7f767b249b19 [ 1234.625538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.628110] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1234.629230] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1234.630260] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1234.631281] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1234.632309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.633331] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1234.634350] [ 1234.650218] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.653903] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1234.655081] CPU: 0 PID: 8325 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1234.656155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.657281] Call Trace: [ 1234.657650] [ 1234.657981] dump_stack_lvl+0x8f/0xb7 [ 1234.658553] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1234.659313] p9_client_create+0xc89/0x1050 [ 1234.659945] ? __pfx_p9_client_create+0x10/0x10 [ 1234.660631] ? lock_is_held_type+0xdb/0x130 [ 1234.661248] ? lockdep_init_map_type+0x21e/0x7f0 [ 1234.661946] ? __raw_spin_lock_init+0x3a/0x110 [ 1234.662629] v9fs_session_init+0x1e1/0x1670 [ 1234.663245] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1234.663948] ? __pfx_lock_release+0x10/0x10 [ 1234.664576] ? __pfx_v9fs_session_init+0x10/0x10 [ 1234.665240] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1234.665971] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1234.666706] ? lock_is_held_type+0xdb/0x130 [ 1234.667353] v9fs_mount+0xbd/0xbd0 [ 1234.667860] ? __pfx_v9fs_mount+0x10/0x10 [ 1234.668457] ? cap_capable+0x1da/0x240 [ 1234.669059] ? __pfx_v9fs_mount+0x10/0x10 [ 1234.669664] legacy_get_tree+0x109/0x220 [ 1234.670263] vfs_get_tree+0x92/0x300 [ 1234.670818] path_mount+0x1314/0x1e30 [ 1234.671383] ? kasan_quarantine_put+0x8f/0x1f0 [ 1234.672058] ? __pfx_path_mount+0x10/0x10 [ 1234.672683] ? putname+0x102/0x140 [ 1234.673223] __x64_sys_mount+0x286/0x310 [ 1234.673815] ? __pfx___x64_sys_mount+0x10/0x10 [ 1234.674487] ? syscall_enter_from_user_mode+0x21/0x50 [ 1234.675239] do_syscall_64+0x3f/0x90 [ 1234.675811] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1234.676575] RIP: 0033:0x7f767b249b19 [ 1234.677115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.679588] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1234.680656] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1234.681649] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1234.682628] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1234.683613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.684622] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1234.685652] [ 1234.692058] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.701586] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 23:50:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:35 executing program 2: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) [ 1234.946449] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1234.954536] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1235.004798] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:35 executing program 7: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r1, &(0x7f0000000000)='./file0\x00', 0x10301, 0xde5038d286866282) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x1) [ 1235.035507] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:49 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x242581, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/135) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create(0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x3d9, 0x0, r2}, &(0x7f0000f75000/0x4000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x8, 0x1010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x3, 0x0, 0x7fffffff, 0x0, 0x1}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000001}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 23:50:49 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b37, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:50:49 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)="2390c0c46cb48e561988f1c853542db23bfdbb13359f0181980137d55cc0c995f954597aec8aad9aab19f583933fce6b0e783de929159e46074bfe6360496c1bb924e2a018e15cdabc1e1e3245362a3ec7699399450edf5e087a58493f1a8d77e2a99fb7a39f7a1ba641bb42af5175ac17a497ea75c3c599e2acfbbdc8dae93cf4a2c69d7a8ea4056ee16293363c08f158519dc1a8fe4ed1243b1467ef38d84e1266964c4cdf32cc6e77dbc9e268edd06cc2ca", 0xb3}], 0x1, &(0x7f00000004c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x6, 0xa, "d49b77cb1aedac7a"}, {0x6, 0x12, "a6483e0d66a3683118044cd8c92e2d8a"}, {0x0, 0x10, "1e8c4baee716bbb305e1da9b8f47"}]}, @timestamp={0x44, 0x8, 0xf0, 0x0, 0x8, [0x0]}, @rr={0x7, 0x1f, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @rand_addr=0x64010100, @remote, @loopback, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x88}, 0x44000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000100080000e0f4655fe0f46576e0f4655f000000000000040040", 0x1d, 0x2400}, {0x0, 0x0, 0x2000000002480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af3010004", 0x2d, 0x2800}], 0x0, &(0x7f0000013e00)=ANY=[]) r4 = dup(r1) fchmodat(r4, &(0x7f0000000080)='./file0\x00', 0x92) 23:50:49 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000001d80)=""/236, 0xec}, {&(0x7f0000001e80)=""/83, 0x53}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x40) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4309}, r0, 0x9, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() process_vm_readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f00000005c0)=""/24, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/107, 0xa6}], 0x319, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000200)=0xc) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x40, 0x5, 0xc3, 0xbd, 0x0, 0x1, 0x20000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7e, 0x4, @perf_config_ext={0x8, 0x1}, 0x8, 0xe83, 0x80, 0x2, 0x101, 0xffffff8a, 0x548c, 0x0, 0xebb2446, 0x0, 0x4}, r3, 0x10, r1, 0x5) getpgrp(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) open$dir(&(0x7f0000000180)='./file1\x00', 0xd0041, 0xc1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x90288e51ef3a09ec, 0x8c) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) setpriority(0x0, 0x0, 0x3) syz_io_uring_setup(0x92e, &(0x7f0000000900)={0x0, 0x2, 0x20, 0x0, 0xd5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000008c0), &(0x7f0000000500)) lseek(0xffffffffffffffff, 0x2000005, 0x0) [ 1248.554696] EXT4-fs: 2 callbacks suppressed [ 1248.554711] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1248.559372] FAULT_INJECTION: forcing a failure. [ 1248.559372] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.560168] CPU: 1 PID: 8364 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1248.560727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.561294] Call Trace: [ 1248.561493] [ 1248.561668] dump_stack_lvl+0x8f/0xb7 23:50:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 23:50:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1248.561963] should_fail_ex.cold+0x5/0xa [ 1248.562491] ? __kernfs_new_node+0xd4/0x8c0 [ 1248.562805] should_failslab+0x9/0x20 [ 1248.563075] kmem_cache_alloc+0x5a/0x410 [ 1248.563378] __kernfs_new_node+0xd4/0x8c0 [ 1248.563675] ? lock_release+0x3b6/0x750 [ 1248.563963] ? __pfx___kernfs_new_node+0x10/0x10 [ 1248.564299] ? __pfx_lock_release+0x10/0x10 [ 1248.564599] ? lock_acquire+0x32/0xc0 [ 1248.564907] ? up_write+0x1b0/0x520 [ 1248.565187] kernfs_new_node+0x97/0x120 [ 1248.565488] __kernfs_create_file+0x55/0x350 [ 1248.565821] sysfs_add_file_mode_ns+0x21c/0x440 [ 1248.566170] ? __pfx_slab_attr_store+0x10/0x10 [ 1248.566523] internal_create_group+0x322/0xb20 [ 1248.566870] ? __pfx_internal_create_group+0x10/0x10 [ 1248.567246] ? up_write+0x1b0/0x520 [ 1248.567539] sysfs_slab_add+0x18e/0x220 [ 1248.567838] __kmem_cache_create+0x461/0x5d0 [ 1248.568167] kmem_cache_create_usercopy+0x201/0x2f0 [ 1248.568537] p9_client_create+0xc89/0x1050 [ 1248.568872] ? __pfx_p9_client_create+0x10/0x10 [ 1248.569224] ? lock_is_held_type+0xdb/0x130 [ 1248.569549] ? lockdep_init_map_type+0x21e/0x7f0 [ 1248.569904] ? __raw_spin_lock_init+0x3a/0x110 [ 1248.570257] v9fs_session_init+0x1e1/0x1670 [ 1248.570577] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1248.570941] ? __pfx_lock_release+0x10/0x10 [ 1248.571265] ? __pfx_v9fs_session_init+0x10/0x10 [ 1248.571617] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1248.571982] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1248.572362] ? lock_is_held_type+0xdb/0x130 [ 1248.572696] v9fs_mount+0xbd/0xbd0 [ 1248.572978] ? __pfx_v9fs_mount+0x10/0x10 [ 1248.573282] ? cap_capable+0x1da/0x240 [ 1248.573581] ? __pfx_v9fs_mount+0x10/0x10 [ 1248.573886] legacy_get_tree+0x109/0x220 [ 1248.574197] vfs_get_tree+0x92/0x300 [ 1248.574477] path_mount+0x1314/0x1e30 [ 1248.574764] ? kasan_quarantine_put+0x8f/0x1f0 [ 1248.575110] ? __pfx_path_mount+0x10/0x10 [ 1248.575418] ? putname+0x102/0x140 [ 1248.575697] __x64_sys_mount+0x286/0x310 [ 1248.576004] ? __pfx___x64_sys_mount+0x10/0x10 [ 1248.576354] ? syscall_enter_from_user_mode+0x21/0x50 [ 1248.576761] do_syscall_64+0x3f/0x90 [ 1248.577053] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1248.577442] RIP: 0033:0x7f767b249b19 [ 1248.577722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.578992] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1248.579536] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1248.580040] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1248.580557] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1248.581060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.581559] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1248.582085] [ 1248.587966] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1248.607619] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1248.613922] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1248.617962] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1248.627898] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1248.667794] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1248.668435] CPU: 1 PID: 8364 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1248.669001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.669563] Call Trace: [ 1248.669754] [ 1248.669924] dump_stack_lvl+0x8f/0xb7 [ 1248.670211] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1248.670598] p9_client_create+0xc89/0x1050 [ 1248.670916] ? __pfx_p9_client_create+0x10/0x10 [ 1248.671260] ? lock_is_held_type+0xdb/0x130 [ 1248.671577] ? lockdep_init_map_type+0x21e/0x7f0 [ 1248.671922] ? __raw_spin_lock_init+0x3a/0x110 [ 1248.672262] v9fs_session_init+0x1e1/0x1670 [ 1248.672569] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1248.672945] ? __pfx_lock_release+0x10/0x10 [ 1248.673256] ? __pfx_v9fs_session_init+0x10/0x10 [ 1248.673589] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1248.673952] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1248.674326] ? lock_is_held_type+0xdb/0x130 [ 1248.674649] v9fs_mount+0xbd/0xbd0 [ 1248.674911] ? __pfx_v9fs_mount+0x10/0x10 [ 1248.675203] ? cap_capable+0x1da/0x240 [ 1248.675501] ? __pfx_v9fs_mount+0x10/0x10 [ 1248.675792] legacy_get_tree+0x109/0x220 [ 1248.676089] vfs_get_tree+0x92/0x300 [ 1248.676358] path_mount+0x1314/0x1e30 [ 1248.676638] ? kasan_quarantine_put+0x8f/0x1f0 [ 1248.676971] ? __pfx_path_mount+0x10/0x10 [ 1248.677280] ? putname+0x102/0x140 [ 1248.677552] __x64_sys_mount+0x286/0x310 [ 1248.677860] ? __pfx___x64_sys_mount+0x10/0x10 [ 1248.678199] ? syscall_enter_from_user_mode+0x21/0x50 [ 1248.678579] do_syscall_64+0x3f/0x90 [ 1248.678866] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1248.679244] RIP: 0033:0x7f767b249b19 [ 1248.679537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.680805] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1248.681341] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1248.681845] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1248.682349] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1248.682851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.683355] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1248.683894] [ 1248.692141] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1248.705428] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) [ 1248.823060] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1248.827739] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:50:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:50:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4300, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1249.398838] Process accounting resumed [ 1251.393786] Process accounting resumed 23:51:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:09 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) pread64(r0, &(0x7f0000000440)=""/4096, 0x1000, 0x5) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f00000001c0)={0xe54, r1, 0x118, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfe1, 0x1, 0x5, 0x2, 0x11a2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x39d, 0x1, 0x80, 0x7, 0x6, 0x1ff, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xda, 0x8, 0x3ff, 0x0, 0x8, 0xe800, 0x6b98, 0x8]}}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x36, 0x9, 0x6c, 0x1]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfdf9, 0xba, 0x401, 0x0, 0x4, 0x3, 0x6, 0xfc01]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0xb, 0x4, 0x6]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x6, 0x16, 0x4, 0x48, 0x36, 0xa, 0xb, 0x24, 0x6, 0x36, 0x48, 0x9, 0x5, 0x12, 0xc, 0xc, 0xb, 0xb, 0x12, 0x2, 0x2, 0x18, 0x2, 0x6c, 0x16, 0x48, 0x36, 0x3, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x9}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x24, 0x6c, 0x24, 0x44, 0x1b, 0x5, 0x2, 0x9, 0x60, 0x36, 0x60, 0x24, 0x12, 0x5, 0x2d, 0x9, 0x30, 0x30, 0x4, 0x1, 0x12, 0x18, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x6}, {0x3, 0x7}, {0x5, 0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x7, 0x3}, {0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x5}, {0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {}, {0x4, 0x9}, {0x2, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x5}, {0x2}, {0x7, 0x5}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x60, 0x60, 0x9, 0x60, 0x16, 0x18, 0x36, 0x1, 0x4, 0x6c, 0x5, 0x3f, 0x1b, 0x9, 0xdec39904045af713, 0x36, 0x18, 0x3, 0xb, 0x3, 0x5, 0x30, 0x11, 0x6c, 0x18, 0x6c, 0xb, 0x6c, 0x12]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x16, 0x4b829f3acfd6beb8, 0x2, 0x5, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x2, 0x0, 0x1000, 0xfff8, 0x3, 0x65]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x0, 0x18, 0x2, 0x18, 0x60, 0x6d, 0x12, 0x2, 0x2, 0x1a, 0x12]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x16, 0x3, 0x1b, 0x7c, 0x36, 0x1, 0x6, 0x30]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x1ff, 0x8, 0x1b, 0x4, 0x401]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0x4}, {0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x6}, {0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x7}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a8, 0x5, 0x8, 0x0, 0x3, 0x4, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0xfff8, 0x2, 0x0, 0x762a, 0x100, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x9, 0x5, 0x36, 0x18]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x2}, {0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0x6}, {0x3, 0x4}, {0x7}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x8}]}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f32, 0x6, 0x9, 0x15d4, 0x3, 0x1, 0x80, 0xa7b]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x7}, {0x0, 0x6}, {0x3}, {0x7, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x6}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x3}, {0x1, 0xa}, {0x4}, {0x3}, {0x6, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x1}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {}, {0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x3, 0x40, 0x9, 0x2, 0x401, 0x4]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x7, 0x4}, {}, {0x4}, {0x6, 0x1}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0xa}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x5}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x3f, 0x1ff, 0x6, 0x0, 0x6, 0x7ff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x2, 0x3}, {0x6}, {0x3, 0x2}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x5}, {0x7}, {0x0, 0x9}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x4}, {0x5, 0x7}, {0x0, 0xa}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x2}, {0x1, 0x3}, {0x1, 0x11}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x3}, {0x6, 0x6}, {}, {0x5, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x3}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0xa}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x30, 0x24, 0x36, 0x36, 0x30, 0x30, 0x16, 0x9, 0x9, 0x24, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x9}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x5}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0x6}, {0x5, 0x9}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x2, 0x4}, {0x6, 0xa}, {0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0xa}, {0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x8}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x1ff, 0x4, 0x7, 0x5, 0x7]}}]}, @NL80211_BAND_5GHZ={0x12c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x6, 0x1b, 0x6, 0x16, 0x36, 0x3, 0x2, 0x36, 0x30, 0x30, 0x30, 0x60, 0xc, 0x60, 0x18, 0xb, 0x9, 0x12, 0x5, 0x30, 0x2, 0x48, 0x62, 0x60, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xfff9, 0x1, 0x745, 0x5, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x7}, {0x5}, {0x3, 0x9}, {0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x3, 0x7}, {0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0xa}, {0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x1}, {0x6, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x9}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x7}, {0x7, 0x1}, {0x2, 0xa}, {0x3}, {0x7}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x1}, {0x1, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x16, 0x4, 0x5, 0x18, 0x2, 0x5, 0xc, 0x60]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x3}, {0x6, 0x5}, {0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x6}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x2}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {}, {0x1, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x2}, {0x1, 0xf}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x5, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff9, 0x7b10, 0x56a, 0x8, 0x1000, 0x81, 0xced5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x200, 0xff, 0x8, 0xffff, 0x5, 0x7f]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x6c, 0x1, 0xb, 0x1b, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x26, 0x3, 0x5, 0x800, 0x6, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x6, 0x2, 0x6c, 0x9, 0x12]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x2, 0x69, 0x60, 0xdfd09705352724a5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x3b, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xfc00, 0xffd6, 0xc6, 0x1, 0xd4b, 0x3, 0x679]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x1, 0x30, 0x9, 0x2, 0xc, 0x4, 0x4, 0x5, 0x36, 0x1, 0x18, 0x6, 0x48, 0x18, 0x3, 0x16, 0x24, 0x1, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x4, 0x10, 0x8001, 0xfffa, 0x4, 0x6b]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {}, {0x4, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x60, 0x16, 0x4, 0xb, 0x1c, 0x12, 0x48, 0x3, 0x12, 0x4, 0x24]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3ff, 0x0, 0x9, 0x2, 0xb321]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x4, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x5}, {0x7}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0x6}, {0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x7}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {}, {0x6, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0x7}, {0x6}, {0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x1}, {0x5, 0x9}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x8}, {0x2, 0x1}, {0x5}, {0x3, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x60, 0x30, 0x60, 0x1, 0x60, 0x9, 0xb, 0x48, 0x12, 0x3, 0x1b, 0xf5, 0x24, 0x0, 0x5e, 0xc, 0x5, 0x18, 0xb, 0x24, 0x71, 0x27, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xf, 0x6, 0x48, 0x37, 0x6, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xb, 0x4, 0xb, 0x6c, 0x1, 0x60, 0x12, 0x4, 0x30, 0x836a2e0854d75e45, 0xb, 0x18]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x7}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x7, 0xb7a, 0x9, 0xb1, 0x7, 0x2a73, 0xfffa]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x2}, {0x5, 0xa}, {0x2, 0x8}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x5}, {0x7}, {0x6, 0x8}, {}, {0x6, 0x3}, {0x7, 0x3}, {0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x400, 0x2e00, 0xce, 0x9, 0x1, 0x1, 0x41c7]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x3, 0x6, 0x3, 0x1, 0x60, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x24, 0x18, 0x5, 0x1c, 0xb, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x76, 0x1, 0x1f, 0x101, 0x9, 0x1]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0xa}, {0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x5}, {0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x3}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x5}, {}, {0x3, 0x6}, {0x5, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x6, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x7}, {0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x18, 0x2, 0x3, 0x48, 0x44, 0x0, 0x24, 0x6, 0x24, 0x24, 0x1, 0x9b0c4a797c2c90be, 0x60, 0x30, 0x1, 0x18, 0x18, 0x30, 0x60, 0x9, 0x36, 0x1b, 0x24, 0xb839de71ad12eece, 0x2]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x1, 0x6c, 0x1b, 0xb, 0x60, 0x5, 0x9, 0x48, 0x6, 0x60, 0x0, 0x0, 0x18, 0x3, 0x60, 0x6, 0x3, 0x6c, 0x36, 0x16, 0x1, 0x1b, 0x3, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x368, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x48, 0x30, 0xadb3313e9ade2c81, 0x4, 0x2, 0x2, 0x9, 0x6, 0x9, 0x12, 0x30, 0x60, 0x9, 0x36, 0xc, 0x18]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4, 0x1, 0x78f0, 0x2, 0x0, 0x2, 0x67]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x36, 0x6c, 0x5, 0xb, 0x4, 0x3, 0xc, 0x37]}]}, @NL80211_BAND_60GHZ={0x11c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x4}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0xe}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x3}, {}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x3}, {0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0xa}, {}, {0x6, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x5, 0x1}, {0x6, 0x9}, {0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0xa}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x4}, {0x6, 0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x12, 0x36, 0x18, 0x1b, 0x36, 0x2, 0x5, 0x4, 0x30, 0x2, 0x16, 0x1b, 0x60, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b, 0x7fff, 0x8, 0x1f, 0x6, 0x7f, 0x1, 0x575d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2858, 0x5, 0x2, 0x4, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x5, 0x9, 0x30, 0x60, 0x6, 0x2, 0x12, 0x36, 0x24, 0x6c, 0x1b, 0x1b, 0xc, 0xb, 0x1, 0x60, 0x24, 0x12, 0x6, 0x3, 0x6, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x7}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x6c, 0x18, 0xb, 0x16, 0x1b, 0x22, 0x30, 0x16, 0x9, 0x2, 0x16]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x7}, {0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0x5}]}]}, @NL80211_BAND_60GHZ={0x114, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x401, 0x2, 0x4, 0xff, 0x1, 0x2d, 0x7fe5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x3}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x17}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0xa}, {0x2, 0x5}, {0x6}, {0x3, 0x6}, {0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x23, 0xfff, 0x8a9a, 0x6, 0x200, 0xa0, 0x3]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {}, {0x1, 0xa}, {0x7, 0x2}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {}, {0x7, 0x4}, {0x1}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x7}, {0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0xa}, {0x2}, {0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0xa}, {0x6}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x5}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x400, 0x3, 0x8, 0x101, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0x1, 0x8, 0x6, 0x8, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x6, 0x0, 0x9, 0x3, 0x31, 0x45375260b303973c, 0x6c, 0x5, 0x18, 0x12, 0x24, 0x12, 0x60, 0x1, 0x12, 0x6, 0x16, 0x1b, 0x16, 0x2, 0x36, 0x30, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x5, 0x1, 0x60, 0x6c, 0x2, 0xc, 0x5, 0x1, 0x5, 0x7a, 0x36, 0x30, 0x2, 0x9, 0x16, 0x4, 0x6c, 0x1b, 0x1b, 0x12, 0x9]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x6, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x4, 0x60, 0xc, 0x3, 0x6c, 0x1b, 0x0, 0x48, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x1}, {0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x5}, {0x7, 0x9}, {0x7, 0xa}, {0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x1}, {0x2, 0x3}, {0x7, 0xa}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x5}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x7}, {0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x4, 0x5}, {0x2}, {0x1}, {0x3, 0x3}, {0x7, 0x1}, {0x6}, {0x7, 0x5}, {}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x3, 0x5, 0x9, 0x21, 0x5, 0x60]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x6}, {0x1}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0xa}, {0x2}, {0x5, 0x3}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9a0, 0x3000, 0x8, 0x96, 0x4e3, 0x1, 0x4, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x2}, {0x3, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0x8001, 0x6, 0x7, 0x9, 0x9, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x46, 0x4, 0xfffa, 0x7, 0x9, 0x0, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xfff, 0x6, 0x0, 0x7, 0xfffe, 0x1d73]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xce75, 0x6, 0x3, 0x20, 0x76, 0x1, 0x1004]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x3, 0x1, 0x1, 0x6c, 0x8, 0x18, 0x5, 0x24, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x97d, 0x4, 0x800, 0xbe7a, 0x3, 0xff, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x88, 0x92d8, 0xee, 0x0, 0x9, 0x8318]}}]}]}]}, 0xe54}, 0x1, 0x0, 0x0, 0x40040}, 0x2404c810) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc0000000, {0x3, 0x7, 0x2, 0x9}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x2000c890) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) [ 1268.915723] EXT4-fs: 8 callbacks suppressed [ 1268.915736] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1268.923960] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 23:51:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x630b, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:09 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x0) fadvise64(r2, 0xfffffffffffffffd, 0x0, 0x4) fallocate(r2, 0x0, 0x100000000, 0x2000008800000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000100000018080000", @ANYRES32=r0, @ANYBLOB='\x00\x00_\x00\x00ck\x00.JfileB\x00']) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0x9) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c00)}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) pwrite64(r4, &(0x7f0000000040)="49b2a2a7e7b1d98fdc8101239b8afe504355b5d4bdd068d6a844df09792e090dced6988d581107010af2695462da9f0cd76fb4f20a605bdecc442569f270d6", 0x3f, 0x7e18) fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x90a}], 0x1) 23:51:09 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b3a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x101000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r1}, 0x0, 0x26, @unused=[0xd69, 0xfffffffffffffffb, 0x3, 0x20], @name="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"}) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x40000, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000200)={0x6, 'veth0_to_bridge\x00', {0x84}, 0x55b3}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/218, 0xda}], 0x4, 0xf8e, 0x200) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x51a}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x40}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000400}, 0x4000070) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23:51:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1268.966632] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1268.980529] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1268.982582] FAULT_INJECTION: forcing a failure. [ 1268.982582] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.983365] CPU: 0 PID: 8431 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1268.983917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.984485] Call Trace: [ 1268.984676] [ 1268.984843] dump_stack_lvl+0x8f/0xb7 [ 1268.985145] should_fail_ex.cold+0x5/0xa [ 1268.985446] ? __kernfs_new_node+0xd4/0x8c0 [ 1268.985763] should_failslab+0x9/0x20 [ 1268.986045] kmem_cache_alloc+0x5a/0x410 [ 1268.986349] __kernfs_new_node+0xd4/0x8c0 [ 1268.986647] ? lock_release+0x3b6/0x750 [ 1268.986946] ? __pfx___kernfs_new_node+0x10/0x10 [ 1268.987287] ? __pfx_lock_release+0x10/0x10 [ 1268.987596] ? lock_acquire+0x32/0xc0 [ 1268.987886] ? up_write+0x1b0/0x520 [ 1268.988172] kernfs_new_node+0x97/0x120 [ 1268.988472] __kernfs_create_file+0x55/0x350 [ 1268.988793] sysfs_add_file_mode_ns+0x21c/0x440 [ 1268.989131] ? __pfx_slab_attr_store+0x10/0x10 [ 1268.989471] internal_create_group+0x322/0xb20 [ 1268.989806] ? __pfx_internal_create_group+0x10/0x10 [ 1268.990288] ? up_write+0x1b0/0x520 [ 1268.990323] sysfs_slab_add+0x18e/0x220 [ 1268.990352] __kmem_cache_create+0x461/0x5d0 [ 1268.990378] kmem_cache_create_usercopy+0x201/0x2f0 [ 1268.990405] p9_client_create+0xc89/0x1050 [ 1268.990438] ? __pfx_p9_client_create+0x10/0x10 [ 1268.990463] ? lock_is_held_type+0xdb/0x130 [ 1268.990487] ? lockdep_init_map_type+0x21e/0x7f0 [ 1268.990513] ? __raw_spin_lock_init+0x3a/0x110 [ 1268.990544] v9fs_session_init+0x1e1/0x1670 [ 1268.990567] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1268.990588] ? __pfx_lock_release+0x10/0x10 [ 1268.990613] ? __pfx_v9fs_session_init+0x10/0x10 [ 1268.990629] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1268.990650] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1268.990676] ? lock_is_held_type+0xdb/0x130 [ 1268.990709] v9fs_mount+0xbd/0xbd0 [ 1268.990730] ? __pfx_v9fs_mount+0x10/0x10 [ 1268.990749] ? cap_capable+0x1da/0x240 [ 1268.990775] ? __pfx_v9fs_mount+0x10/0x10 [ 1268.990794] legacy_get_tree+0x109/0x220 [ 1268.990819] vfs_get_tree+0x92/0x300 [ 1268.990842] path_mount+0x1314/0x1e30 [ 1268.997929] ? kasan_quarantine_put+0x8f/0x1f0 [ 1268.997955] ? __pfx_path_mount+0x10/0x10 [ 1268.997981] ? putname+0x102/0x140 [ 1268.998010] __x64_sys_mount+0x286/0x310 [ 1268.998033] ? __pfx___x64_sys_mount+0x10/0x10 [ 1268.998057] ? syscall_enter_from_user_mode+0x21/0x50 [ 1268.998087] do_syscall_64+0x3f/0x90 [ 1268.998113] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1268.998141] RIP: 0033:0x7f767b249b19 [ 1268.998153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.998169] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1268.998186] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1268.998197] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1268.998208] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1268.998219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.998229] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1268.998257] [ 1269.005912] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe501, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1269.042922] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1269.047561] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1269.048057] CPU: 0 PID: 8431 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1269.048612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1269.049181] Call Trace: [ 1269.049364] [ 1269.049528] dump_stack_lvl+0x8f/0xb7 [ 1269.049815] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1269.050202] p9_client_create+0xc89/0x1050 [ 1269.050518] ? __pfx_p9_client_create+0x10/0x10 [ 1269.050856] ? lock_is_held_type+0xdb/0x130 [ 1269.051168] ? lockdep_init_map_type+0x21e/0x7f0 [ 1269.051513] ? __raw_spin_lock_init+0x3a/0x110 [ 1269.051848] v9fs_session_init+0x1e1/0x1670 [ 1269.052167] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1269.052517] ? __pfx_lock_release+0x10/0x10 [ 1269.052827] ? __pfx_v9fs_session_init+0x10/0x10 [ 1269.053168] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1269.053525] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1269.053888] ? lock_is_held_type+0xdb/0x130 [ 1269.054213] v9fs_mount+0xbd/0xbd0 [ 1269.054476] ? __pfx_v9fs_mount+0x10/0x10 [ 1269.054770] ? cap_capable+0x1da/0x240 [ 1269.055060] ? __pfx_v9fs_mount+0x10/0x10 [ 1269.055363] legacy_get_tree+0x109/0x220 [ 1269.055663] vfs_get_tree+0x92/0x300 [ 1269.055936] path_mount+0x1314/0x1e30 [ 1269.056214] ? kasan_quarantine_put+0x8f/0x1f0 [ 1269.056536] ? __pfx_path_mount+0x10/0x10 [ 1269.056844] ? putname+0x102/0x140 [ 1269.057120] __x64_sys_mount+0x286/0x310 [ 1269.057422] ? __pfx___x64_sys_mount+0x10/0x10 [ 1269.057766] ? syscall_enter_from_user_mode+0x21/0x50 [ 1269.058153] do_syscall_64+0x3f/0x90 [ 1269.058437] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1269.058820] RIP: 0033:0x7f767b249b19 [ 1269.059096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.060365] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1269.060906] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1269.061427] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1269.061923] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1269.062431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.062934] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1269.063469] [ 1269.067673] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1269.071728] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1269.116441] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:09 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) [ 1269.127623] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:09 executing program 7: r0 = syz_io_uring_setup(0xfa3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000d00)=[{0x0}], 0x1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "fd50a70ad273da568f2d3156767ad6ea697adc2b28f091bc721198a5082ad92c1ebbcacdd0ac79f97f8a5e2b04dc9068e02ad15cef8a5df25616cdbadeebbb8e3dbe5c25d82d9a8f898e45ba244302200db41fa9a247e36f91d4eb549dbeabf0d10baf8afed73e42d49b9980291c1acf3417cc1d089dd3d9d7e514c9f1ce1b33fd41dcba48a918bd99765a5c8c30a8705c3053e518dd275e6c437ac9a65e09469636160fae9bddafe01fe6599977c4f495710e9a080a08e992ede79e3eb48cec57ef1745eaee0f3babf8ad7a5c631cb0eed5aace15592947c78435882e47daf310b4790eadfd34e623042d9faa4683313a70a3ce2ce8e854f96326fb375a5cc65c068e4bcc3d4ca95786e8babce89feeb2f0ef04848aa49e083cca1b0d82e990e4a170387bcab66b87cb81aff4e4efb369bc94eb30db633775f7332646190c6d9e46afb9d480cf5fcb77725eff3d1c17239744a629c57a2e793fae44f21b027e7baf084ff6e19cd33f6b17dea0af7f103da8ec13791883976340498a2b0286499eb3e2e2d217e0b3687fa12e067e67dcd9831881380972921e9b09e857ac5e67ccd1500f4c332837f1b9a58ef91931cf83f4ac33154afbc498e035400e49f0949e54a7197eed697a5e6a7a4b51f0af93c8994ebf0cda0e50a6e34f0c9988c32f153918e0c5dc0aff9a47c89725b05896a918c36dacd1094310a7ebf18567abac554e256e7e6d2ec1ef33f5be6265c6481279e91044af70dfc82aa655c4fd2682571df84cb0b06fc4c231e215424dc9818a7d4d8ca977c010e9bd2df077755437be63b2c536cf2daebb2f1c397d807570dd5efd1139dd72658f0c2b17d79d331a68caa11719031b095caa9625bec8056bf857da313f879d0fe4d81020087adb9dcb0875bcbff2110322c26c4d66bc6a66737010d16d2f0937ca35398019c10da49a36a8f1afd398fb2163552d2b5acc6b1beb7af3562fa3ba0cdd0e424ca50a02da327eab0a538ccf6032615f5c281825ac6a71afb752c7415f73346b1a6c24acd4a45497692598a7c6003fdb3c41f8205f681f30bded3b774315116ff52ff7eeccbf2871088980e963f70085694a5b401e64e82e788656c0afd6d23372ee521e382abfd4ff54eb1cd875a503b8e0ae145701eb0ea6daf73649f7b9105d1c40da36048bfb8add5ee414165cd836fba68fa76132deae1e232611e12b5394d946d2766caac94f8687c9ec77c6e700778ce50b58cf25a1bda2244627c5a3a7a859ea0d689056fbf6f324da66870505f82e445a60f3a698232a87fb56e8b367722a08ac222ae5523c8fd5ae3d9438bd36d9303bdfdcd1b62901113bcfa848492ed8481a243a71d4f303e22624bbaef1cbb547aac745f8c38eebf010a9bd8c61e372b7d98e4d43c798062fc001a13bea8148fe30ed258ca0dbb7b643cfe997889ba9c5f2b0776b64e6252d31e8a30a8927fe7ae278f23dbc034e19c999380ece59def994c67d671ce100b52a2a22232422811ab786eacbae0da591ff27813e8c7c10c34e6fe2b1eab0d9917e128fdfc0b5b3e9f2f97138cc93216f8c0008e23fe2a8fcddcdcfb04bdcdf125a069f8db95a22594b607def79bf6650f493cd8be526f9e30303a57fd510826555283d08f0712ae3675af43acdbc06dce20856ff7a592feca80c262975c5d1e6b6178f6633dce30867aa3464c3c4a21ee1da546cd6f05142fbdcf6f5d5d2335ebcd1f466104e9ad19ff5567af87102e7ba3645c428cd69814f208405ebd5910eb27cf72349cc49e528e960ba73d1cfd065f982bbfcf725e335d8dfd56038d6d81999fd15f25506c4b06da3ce9b07a1320a3f2aefaf9329d9ac6124fd9148d3ae4c2af89437e77f8b64067535b9e32260285e963c8f49cf56bf0b1d53f146b56b923e03be80849d702c6ea0a09e26281da68f81840fb8a47fa81a6b7ac14d7c84668c85712c9b22c660c5fb4837a29c8fe82c3a127b0b785a830a347c4464db3ec59997866c943b51e5ee114b5acd47cb5d0f389a25314b60e7f3557e172ca11af23ee08dfb21e8d74ddaebd44799ece3c7e16b233f79ae5974127483eb4a8d8f96a8c155e362d65c9bca0297b378f7798682759c0f6939a7392f4b5270ec96dd4e423c4abc5712c3e143c71d28165c8d649b2f5e9673d5f60852cfb2f703a77e0ef9323ff1d62760c211aa96fe614a11a8c1e14643cb9d21e9ebde77c19ee9c756c6ee1cbb65dbd4a1f25ae78b7d39e35709b75a77aa9e5819b14a3dcec012e262c99a80bdd847ff44e598bd2fa8fdf93b7bd68c5929498f20a4d90487c35459054a9a0aab0e3287f89b58277e0f67451d9e9b54cb0b95b78dde2c17293857c7b90b505f35fc252fe16ed6e38ae9f6da6647d823027c588ac1c89ffcfc335ec5ddeceff950d81a3e5a592b2212399b2d1afb20206fa31ec6a41d8b37b127ab47e9676e247d62d3f9baf101ed43519a82236433a77bdd46d960404ad8a836dd4ca1c38a660d394ca0012e69190f76c878e5a442b6a4eb43bbd0076d3de3fafc12a5f301633b7a7c3da03cb792779a228858636609304319233db907806931c006e39c28f195dd9c3d163f65d7e9c386a4fe9c8a17e924e62bf526f745bd1d8beb5f4f2d0027c190c741796cbd0e9e9078dce4859677e3bc7cd823baf8f6058117933991c8e160eefafcc473750b28f55f98303a4a9ed5e8dfe91c98ea7051bdb3701633d33b4a96f9be0213e6fb4c9980265047e0a80453e43bffc2c72a405588196a0658a8a0ec85f861683e23245105545f71feb1f458c358c5d3ed6f8ebd02baa06c4dbb926a7e8ca065c2d94eb79474247ae92ff6bd5704ef6e46521e90601bbaea9f3bb72e2cc8718ca4a6ef013a5cda5daf97599a349457ad8145b091bbb7c5323dd88dc39095bbdcb5d6cfddc3f3101741dde9d4f04f14c0a2dc052ab9311ab8496b079fb4ed4051bbf860ab46885939385bce84d66d6291d5c380a1d4e63ae7466efce8c76ebc43205b19aaf0878faec474fcb7981a102c63c1b51c9f720e24776d9f447f8e82bab85a401729d9757fd4947f82d7e5db3c3414f5ef4c25864cf5af79a989d143042467a93415bd2770ab7edaa2b0ab0840e2a60e2efb4ac0d005b9f00397c9d3bdf16f273a9104f0f66082f22f0d2ad265ef01777d564fee6a1d0ce47c505fb1ed51fcd6d4daa156f43858504af75cb8b78efa3115719fc483afe655269ec5dad2f92f48f9f6a8f4dded1c9441eff4686e89d805b4df274bd4ae87b297f58dbf7abfbae1deabb6d8e5a1e1f65467ad21f28ddd8116c72b623495a4b0e38ee2510203f477874d1d65c13427b2e1fff53719f9f1d6ac4d0912bf4672a86e8604d77ba04c8bf9867929f18c32b1b7b8cfdcfa261a582b4fe389f2e93ef03958d5d1a3a3fee33e7502d81755ba86c28138960323ea1a46fac6026614b130bc99174bb226f89a99ede9b09e361a95a49eafc989c241f3959364ea28976d0ea1e42a18c64e8037860be0cf5748e8756cdcba84cbb3f6f13ecdca95b8d8c070ec2cd29d477117f7d71687893908f2f4c3656df79b5ea3ba8a44f0d42a2f82ef4a08fa709fb2da93b13cc1e6a52bb3393a619e87a1fd3984d11361ae4c868d09193a505ca691ad290a093e984986a2df75f0ba61ade94d78e3984c2325a1344b75e00712e4cbdb94158beba54c648b6107e87d5197542284d8a3080705fdeb55dea97181dcbfe9f311082767c2579f0ddc03deb258c151dd46b04cab66c91af6424d73ab91d0f6f71b1f60fbcad0d312e1886c967380a8289d7090ba22835c593bb0c28a51fb839561cf53ff3ac2e3360729fba92175a6996f8027d1f60c32035c135bf3eae5dbece31d2312af9d9424a7bbf5567b87049cd6f81a0446c5e72df5fb5f743c25f40e1a174249694d574348d2070ed15c660744fc9dd37fe8819c7e95a8721c0308d7cf476c6180a809259ff6103b5245c0098ffcfc92ec5e1bb7d104355b7911247315d503570ecf78bc17430cb64ca8092b805af8a8b5566a1e30d4a1a8b3a9c0225284ee405b7ef17e43d199bfa1defdf105b44f6e5433bab200cdc2504ac79d1b7a8097e6f521912d45d312df0ab4c49ed33854fb16490937026ac2587213a22f89fd88324d47c06e5ef06e66396f520dbe468295906e80b7a1c4da6e9968f73076bad552ee49363e5930e7db8443d230e36be11346ac6a52bd0c0077496d00a020e9a9185d29bee9bb2cef551a043d073bc7a616fced8ecd7d7c8c98fa7a6b4312d9d03259014baaae2e91629827403a08e019a95e1b7e13dc601db935caf700f42dac3b09997d263b2e5f32345df69e6b343294f9edb6ab0aca0ed689d27d46146fcb53dad5d488938b88000e70026341e06bbc30cf4064e9e9e05427649fe04107e431b1a84a2e849ecc3d0656644b6643591870de6d3c863e4238727c72af2dc79bf49a086df4149e55634d844b6e2edc2ee46c822bab679530b871b8ddcea711d09d81b8297f27bdcc6f42bf8b86c7d520aed38293364e6603523215036898aaeccefa1cd0879f1f1571c3bbecd0d37ec2da4fda9e15e8cbb2c49a6d36e3390ad3a36ae6b946559bbe59389b4b47506d9510e2771f00362fd8812610fc59279cc270e6cf007056e9120018a3a208b3a394f2b6b65b875a70b8e35e1bbda10a5cdf546b4252853dd8093e2edc6366801cfea3473c9cda39972149171049d9bb8e47e2328d125d66ff218a5e8e6f543f2f741219c202c984f300c526027e1c7b8329d50987128836f0f8b2b08d6be4dddeda63193244c8c42c10e8400f2e3393d2a4d9c17a040d329679947e328502ab29598853b6c03ef949face7572f8614431333db3e43f42ee734c7c607ae35d299fba86f3ecd75a54c9657f1903e2de0ab6167c2cc500d707e725a4312f06091de8194102b4ced154616f603861d767506b64b7fce107e3e8faaabc785e0b091c8d06e9ed741dbbb118f4306ddbcad445d99fe358a3e57df0a59511f0781ebba0a93152df6686a2343058ac6910d319c388f5823becf4b4b7424c3c26304ca00ceb702601d5940f913d4f52ac2f7c84502a345ccd0526580629ed3b4e551785a161a543d0c05a8fdaf3981b04c9d1822d0f61ce13646db1f8155598ec663d86fd952d88f0879beee854aa2d7ca78d60118919e4fd965980f6245f454637ad9968c5679dc677250ed7406d0367fb799a72767d345d273e54ca824a083e77d63941afed640cf349282bcfc773e1005a24640dd06c2e3e1b5bf820066cd67d4e482163cf865a990286164a209721a4de34d1b8dcb4496fa9e270a9c5bde484d005437f4fd03a278c6f7918b21c74562db31bec2b88a217f344797d8836f0f96192aa66887365ecd933e4f3"}) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 23:51:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa4080000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:09 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x0, 0x7, "f743e9dd67b8dd0d97ab984be711b6d89307b3", 0x3, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x8, 0x3, 0x3, 0x0, 0x859, 0x80206, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x7ff, 0x9}, 0x4, 0x8, 0x3ff, 0x7, 0x0, 0x55, 0x2, 0x0, 0x8001, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x8) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x4, r2}], {}, [{0x8, 0x7, r3}, {0x8, 0x3, r3}, {0x8, 0x0, r3}, {0x8, 0x1, r3}, {0x8, 0x4, r3}, {0x8, 0x5, r3}, {0x8, 0x0, r4}, {0x8, 0x7, r3}, {0x8, 0x4, r5}], {0x10, 0x3}, {0x20, 0x2b0c92841f389a12}}, 0x74, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setregid(r6, r3) r7 = open(&(0x7f0000000380)='./file0\x00', 0x705a00, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000003c0)={0x8, 0x7ff, 0x6, 0x9, 0x8, "dc6b9e99ae7856ab510e8670da3556d77074b4", 0x0, 0x1000}) ioctl$sock_netdev_private(r7, 0x89f9, &(0x7f0000000400)="db918805cc963046ccd89d2bf5a3862be93e94c83d0730797600ed0f6a219ec27a51352bc02883d9877517d4319ee9bc91759483081a2f2d7480ff53da3f140c42ab2a16939016b2e7c8fc32f8fbcc9bf464ba165bebedb1266244e4d53125b3b321e336c9962f42e916fef2149ce063daf95ca3dab20119b758d4301c82fd28dfb5960cb6ec3164eb1c5274193d8833c86f2758e6e966d9b3cf817c4093729f1f6cca19583dd93a048df33245") getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x10, &(0x7f0000000700)={[{@huge_within_size}, {@huge_within_size}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x74, 0x35, 0x31, 0x38, 0x30, 0x32]}}, {@huge_never}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x65dcd79e632a783b, 0x33, 0x31, 0x71, 0x6b]}}, {@mode={'mode', 0x3d, 0x9}}], [{@euid_eq={'euid', 0x3d, r8}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@euid_gt={'euid>', r9}}]}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) symlinkat(&(0x7f0000000880)='./file0/file0\x00', r10, &(0x7f0000000900)='./file0\x00') r11 = fsopen(&(0x7f0000000940)='mqueue\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000000980)='user_u', &(0x7f00000009c0)='./file0/file0\x00', 0xffffffffffffffff) 23:51:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc0, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 23:51:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x800000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x5000000) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:51:27 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b3b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:27 executing program 2: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0xff, 0x6, 0x20, 0x80, 0x6}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010018bd70dffcdbdf252e000200361cfa646dab4f619624010400000000000084a8458393a86ff24f22376ec1ae8de7d4de52c7105947c033ba63f410a803b65be617407186668c4b574d59ea12b019d197e4a2ae1491ca7792d0f998d27f8de820d19d5452d77d4789ca2327b579e6d78e2e75c04b90510cc94687c695b11011d964d06ba7c42f", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x40010) epoll_create(0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf25210000000c009900070000004e0000000a00f500ffffffffffff00000800dc000000000027d759b71ce263c7251a163c358942f578a95974c519e306005ee7148b456a8629ac3533639663c200962f018a74938dd4a9ef5d11bd4946c8f502a65a68b65d281b10"], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0xc881) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:51:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = add_key$fscrypt_provisioning(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, &(0x7f0000000280)=ANY=[], 0x48, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x101, 0x400, 0x2, 0x7fffffff, 0x4}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) request_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0xfffffffffffffffd) syz_read_part_table(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 23:51:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1286.857465] EXT4-fs: 10 callbacks suppressed [ 1286.857480] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1286.863846] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 23:51:27 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x12}) r0 = inotify_init1(0x80800) fcntl$setflags(r0, 0x2, 0x0) 23:51:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe70b0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1286.892734] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1286.904674] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1286.911443] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:27 executing program 7: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xfffffffa, 0x4) [ 1286.926652] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1286.936858] FAULT_INJECTION: forcing a failure. [ 1286.936858] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.938483] CPU: 1 PID: 8500 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1286.939514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.940562] Call Trace: [ 1286.940899] [ 1286.941219] dump_stack_lvl+0x8f/0xb7 [ 1286.941741] should_fail_ex.cold+0x5/0xa [ 1286.942277] ? __kernfs_new_node+0xd4/0x8c0 [ 1286.942847] should_failslab+0x9/0x20 [ 1286.943356] kmem_cache_alloc+0x5a/0x410 [ 1286.943905] __kernfs_new_node+0xd4/0x8c0 [ 1286.944464] ? lock_release+0x3b6/0x750 [ 1286.945011] ? __pfx___kernfs_new_node+0x10/0x10 [ 1286.945657] ? __pfx_lock_release+0x10/0x10 [ 1286.946228] ? lock_acquire+0x32/0xc0 [ 1286.946784] ? up_write+0x1b0/0x520 [ 1286.947302] kernfs_new_node+0x97/0x120 [ 1286.947858] __kernfs_create_file+0x55/0x350 [ 1286.948457] sysfs_add_file_mode_ns+0x21c/0x440 [ 1286.949082] ? __pfx_slab_attr_store+0x10/0x10 [ 1286.949728] internal_create_group+0x322/0xb20 [ 1286.950361] ? __pfx_internal_create_group+0x10/0x10 [ 1286.951056] ? up_write+0x1b0/0x520 [ 1286.951581] sysfs_slab_add+0x18e/0x220 [ 1286.952134] __kmem_cache_create+0x461/0x5d0 [ 1286.952736] kmem_cache_create_usercopy+0x201/0x2f0 [ 1286.953423] p9_client_create+0xc89/0x1050 [ 1286.953998] ? __pfx_p9_client_create+0x10/0x10 [ 1286.954614] ? lock_is_held_type+0xdb/0x130 [ 1286.955197] ? lockdep_init_map_type+0x21e/0x7f0 [ 1286.955843] ? __raw_spin_lock_init+0x3a/0x110 [ 1286.956484] v9fs_session_init+0x1e1/0x1670 [ 1286.957076] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1286.957749] ? __pfx_lock_release+0x10/0x10 [ 1286.958333] ? __pfx_v9fs_session_init+0x10/0x10 [ 1286.958957] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1286.959609] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1286.960294] ? lock_is_held_type+0xdb/0x130 [ 1286.960882] v9fs_mount+0xbd/0xbd0 [ 1286.961388] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.961945] ? cap_capable+0x1da/0x240 [ 1286.962482] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.963037] legacy_get_tree+0x109/0x220 [ 1286.963585] vfs_get_tree+0x92/0x300 [ 1286.964093] path_mount+0x1314/0x1e30 [ 1286.964629] ? kasan_quarantine_put+0x8f/0x1f0 [ 1286.965257] ? __pfx_path_mount+0x10/0x10 [ 1286.965845] ? putname+0x102/0x140 [ 1286.966350] __x64_sys_mount+0x286/0x310 [ 1286.966906] ? __pfx___x64_sys_mount+0x10/0x10 [ 1286.967529] ? syscall_enter_from_user_mode+0x21/0x50 [ 1286.968230] do_syscall_64+0x3f/0x90 [ 1286.968754] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1286.969466] RIP: 0033:0x7f767b249b19 [ 1286.969970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.972305] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1286.973304] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1286.974236] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1286.975172] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1286.976049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.976921] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1286.977874] 23:51:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe0ffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1287.081798] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1287.094955] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1287.096004] CPU: 1 PID: 8500 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1287.097036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.098070] Call Trace: [ 1287.098406] [ 1287.098707] dump_stack_lvl+0x8f/0xb7 [ 1287.099233] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1287.099930] p9_client_create+0xc89/0x1050 [ 1287.100506] ? __pfx_p9_client_create+0x10/0x10 [ 1287.101129] ? lock_is_held_type+0xdb/0x130 [ 1287.101711] ? lockdep_init_map_type+0x21e/0x7f0 [ 1287.102348] ? __raw_spin_lock_init+0x3a/0x110 [ 1287.102964] v9fs_session_init+0x1e1/0x1670 [ 1287.103344] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1287.103522] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1287.105174] ? __pfx_lock_release+0x10/0x10 [ 1287.105808] ? __pfx_v9fs_session_init+0x10/0x10 [ 1287.106448] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1287.107131] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1287.107843] ? lock_is_held_type+0xdb/0x130 [ 1287.108445] v9fs_mount+0xbd/0xbd0 [ 1287.108927] ? __pfx_v9fs_mount+0x10/0x10 [ 1287.109506] ? cap_capable+0x1da/0x240 [ 1287.110060] ? __pfx_v9fs_mount+0x10/0x10 [ 1287.110613] legacy_get_tree+0x109/0x220 [ 1287.111174] vfs_get_tree+0x92/0x300 [ 1287.111689] path_mount+0x1314/0x1e30 [ 1287.112208] ? kasan_quarantine_put+0x8f/0x1f0 [ 1287.112835] ? __pfx_path_mount+0x10/0x10 [ 1287.113423] ? putname+0x102/0x140 [ 1287.113942] __x64_sys_mount+0x286/0x310 [ 1287.114509] ? __pfx___x64_sys_mount+0x10/0x10 [ 1287.115141] ? syscall_enter_from_user_mode+0x21/0x50 [ 1287.115844] do_syscall_64+0x3f/0x90 [ 1287.116365] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1287.117078] RIP: 0033:0x7f767b249b19 [ 1287.117594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.119882] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1287.120855] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1287.121768] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1287.122707] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1287.123650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.124576] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1287.125559] [ 1287.152709] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1287.172106] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:46 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x60, 0x80, 0x3, 0x7, 0x0, 0x7f, 0x4000, 0x1b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x52100, 0x8a9, 0x7f, 0x1, 0x2, 0x9e200000, 0x3f, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) 23:51:46 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000480)=""/241, &(0x7f0000000580)=0xf1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x1b, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3}}}}, 0x108) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0xa0, 0x32, 0x0, 0xee00}, {0x1000, 0x2, 0x0, 0x3f, 0x1, 0xfffffffffffffffe, 0x4, 0x7}, {0x5, 0x2d4c0ba3, 0x0, 0x3f}, 0x9, 0x6e6bb4, 0x0, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in6=@mcast1, 0x3505, 0x2, 0x2, 0x6, 0x54}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000005c0)={{0x0, @multicast1, 0x4e24, 0x0, 'sed\x00', 0x32, 0x7, 0x7e}, {@multicast1, 0x4e21, 0x4, 0x1, 0x1000, 0x3}}, 0x44) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000200)={0x7, 0x4, 0x7}) r1 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) r3 = getpgrp(r1) ptrace$getsig(0x4202, r3, 0x9, &(0x7f0000000640)) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r4, 0x2, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x71, 0x7, 0xdb, 0xff, 0x0, 0x7fffffff, 0x80001, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x14220, 0x6, 0x9, 0x3, 0x200000000080, 0x3, 0x7, 0x0, 0x5, 0x0, 0x16db9d4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 23:51:46 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b3c, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = mq_open(&(0x7f0000001680)='A\x10Q}\x1b\x9e\xfcF\xd6\xb9\xbb\x93~\x01\xdd\xd3\x058x9\xb2io\x88\xe4\xba\x8a;\x9a\x1d:C\v(\xc3v\xb7\x1f\x95rE\xd7\x9d\x9bR\xb9\xc8n\xa0\xeb[\x9bqx\xcf\xcb\x97\x13L\xbe\xe3\xd4r\x90\xab?\x1b\x89\xfcJ\x86\x0e\xb5K;\xad\xab\xd8\xdf\\\x8cF\xcf\xa4\xa7p0\x0f\xce\x15\x03p)\xc0C\xba\xb0&0\xf2\xfb\xf6\'\xe1M\x0ery_vzZ\x88\x15\xf5K\xda\x94q\x98\xa3\xc9@\xa7y\xc2C~\xfcS\x98\xb9\xa4\xda\x1f\f\xff\xb7\xdc,?\x0ez\xf6!\xf7\x14d\xaa\x93\\N!\\]ma\x00%\xd2ehdk4\xc7\xff\xc8^\xa5\xc6\xce\x9b\xb5\x1f|\xd0\xab\xc3^\xb40\xc0\xa6G\f\x0f+\xe1\xbd\xbeq\xe3', 0x882, 0x100, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000500)={{}, r3, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000), 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbc648620b040bea8aaaabb08728820001c000000000011112c36659ac3fffb481bc9757505e078"], 0x0) fstat(r1, &(0x7f0000000180)) 23:51:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 23:51:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1305.725654] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1305.750124] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1305.780467] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1305.789959] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1305.803734] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1305.818623] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:46 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x200017e}) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) open_by_handle_at(r0, &(0x7f0000000180)=@ocfs2_parent={0x18, 0x2, {{0x18c541a1, 0x0, 0x7ff}, {0x2, 0x401, 0xfffffffa}}}, 0x408000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) 23:51:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) [ 1306.015084] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r1, 0x10, 0x3fc, 0x7e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x5, 0x8000, 0x2}) [ 1306.034359] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1306.059534] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1306.070740] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:51:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:51:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffe000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 23:52:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="0100009c7bda66fb605075191e84000100000018000000", @ANYRES32=r1, @ANYBLOB="12100000000900000080000000653000d37e8b6c22d9df12795e911895c2fad7d5f6b758a0d202924afcd3ae44284bffe5ec9106d8ce3bdec4a243d55415669fb9e8b756e95e38ffff0e60c511f68186c9049af979bcc4c78798ebbf37d1d625ad5f8d92f766d0193f4eb0dcf41df99c"]) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001180)='numa_maps\x00') mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x100012, r2, 0x13) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r5, &(0x7f00000000c0)=""/74, 0x4a, 0x7fff) creat(&(0x7f0000000000)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 23:52:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b3d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:52:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') unlink(&(0x7f0000000440)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file0\x00') stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r1}, 0x18, 0x0) mount(&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='nfs4\x00', 0x2000000, &(0x7f0000000540)='\x06\xf3\xa1\x9dP\xf7\b\x00\x00\x00\x00\x00\x00\x00@qR6\xd9\xfc\x1a\x16\xe5\xad\b\xbd%\x1c3fQP\xa4\x16\xa7\x1bW\x90\xac\xf6+H\xa7\v\x84\xe7\xcf\xe6H\x18h\xdb\xb9\x02R[Z\x05\x8dE\x9e6\xf5\x00'/74) pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6467762f2c6f6f7030000d1ed4fc2ec56eb50e440553d8ac85f3a1"], &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x0, &(0x7f0000000940)='system.posix_acl_access\x00') mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000bc0)={'trans=unix,', {[{@access_uid={'access', 0x3d, r2}}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@version_u}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'environ\x00r\x16\\\xd4y\xfa\xf7\xf7\xad\xac\x80\xff|3\x19ss\xb3\x17$y\xa4a\x95\x1e\xe49U\x00\x14\x95E\xd7\xfb\xd8i\x92\xe5\xc5\xeff\x89C\xda\x8a\xe8\xda\x1c7\x95\xf7\xe8\x8e\xc6,\xd2\xa0\x0e\xebRD+\xe0\xf6\x0e\xf9\xcc\x97\xf7\xc9\xc4v@\x10\xf4\";~\xb3\xef\r\x9d\xb8\xdat\x8e\xb3\xe2\x86\x03d^\r\xb3\x94l&\x1d\xd0a\xc2ig`\x88\xbbT'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000deff040000000000000000000002000000437db65e7125908bde40be18e8d3412665a75913898655de2340e125cb416d71781ed902168be75fa23f2be02e0157af3992996db87a1ccde10ece8d5543382bc0cdc320c85e71edfd61f32fa7bdf1f18fb97d6c3851b68d0081c994b848da346abbec90e2724d4700d8bb5aad753f6cf7aadf189a2ca0776baa4fd85fd8233985fd19bbb9b75764ba9cde4f94336fd5b00a5002019403b6346ab4e8a25f1b84e3f75332cb2ebe4d26f0308093b83e4d1fbd696ad8a013fcc39655e282b4fc668f67868549fc8f8bfa419691264a24143fb2fb1c06e6a60756ac190e2f4163e7660fcdd53c", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0xd0002006}) 23:52:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14}, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) ftruncate(r0, 0xff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$getflags(r0, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x40, 0x7fffffff, 0x100, 0xffff}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xff, 0xfe, 0x0, 0x0, 0x2, 0x3880a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x40100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000240)='./file1\x00', 0x119) [ 1333.618050] EXT4-fs: 8 callbacks suppressed [ 1333.618068] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.628813] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.639354] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.644937] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.657464] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.660765] FAULT_INJECTION: forcing a failure. [ 1333.660765] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.662386] CPU: 1 PID: 8593 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1333.663416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.664445] Call Trace: [ 1333.664788] [ 1333.665093] dump_stack_lvl+0x8f/0xb7 [ 1333.665630] should_fail_ex.cold+0x5/0xa [ 1333.666202] ? __kernfs_new_node+0xd4/0x8c0 [ 1333.666783] should_failslab+0x9/0x20 [ 1333.667321] kmem_cache_alloc+0x5a/0x410 [ 1333.667897] __kernfs_new_node+0xd4/0x8c0 [ 1333.668475] ? lock_release+0x3b6/0x750 [ 1333.669025] ? __pfx___kernfs_new_node+0x10/0x10 [ 1333.669689] ? __pfx_lock_release+0x10/0x10 [ 1333.670306] ? lock_acquire+0x32/0xc0 [ 1333.670892] ? up_write+0x1b0/0x520 [ 1333.671532] kernfs_new_node+0x97/0x120 [ 1333.672233] __kernfs_create_file+0x55/0x350 [ 1333.672996] sysfs_add_file_mode_ns+0x21c/0x440 [ 1333.673797] ? __pfx_slab_attr_store+0x10/0x10 [ 1333.674599] internal_create_group+0x322/0xb20 [ 1333.675389] ? __pfx_internal_create_group+0x10/0x10 [ 1333.676253] ? up_write+0x1b0/0x520 [ 1333.676909] sysfs_slab_add+0x18e/0x220 [ 1333.677698] __kmem_cache_create+0x461/0x5d0 [ 1333.678666] kmem_cache_create_usercopy+0x201/0x2f0 [ 1333.679744] p9_client_create+0xc89/0x1050 [ 1333.680687] ? __pfx_p9_client_create+0x10/0x10 [ 1333.681697] ? lock_is_held_type+0xdb/0x130 [ 1333.682631] ? lockdep_init_map_type+0x21e/0x7f0 [ 1333.683510] ? __raw_spin_lock_init+0x3a/0x110 [ 1333.684324] v9fs_session_init+0x1e1/0x1670 [ 1333.685093] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1333.685959] ? __pfx_lock_release+0x10/0x10 [ 1333.686736] ? __pfx_v9fs_session_init+0x10/0x10 [ 1333.687549] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1333.688416] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1333.689294] ? lock_is_held_type+0xdb/0x130 [ 1333.690086] v9fs_mount+0xbd/0xbd0 [ 1333.690744] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.691453] ? cap_capable+0x1da/0x240 [ 1333.692146] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.692864] legacy_get_tree+0x109/0x220 [ 1333.693583] vfs_get_tree+0x92/0x300 [ 1333.694258] path_mount+0x1314/0x1e30 [ 1333.694966] ? kasan_quarantine_put+0x8f/0x1f0 [ 1333.695777] ? __pfx_path_mount+0x10/0x10 [ 1333.696500] ? putname+0x102/0x140 [ 1333.697162] __x64_sys_mount+0x286/0x310 [ 1333.697925] ? __pfx___x64_sys_mount+0x10/0x10 [ 1333.698724] ? syscall_enter_from_user_mode+0x21/0x50 [ 1333.699642] do_syscall_64+0x3f/0x90 [ 1333.700296] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1333.701202] RIP: 0033:0x7f767b249b19 [ 1333.701851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.704821] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.706087] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1333.707255] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1333.708431] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1333.709654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.710856] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1333.712067] 23:52:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1333.731850] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1333.733122] CPU: 1 PID: 8593 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1333.734349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.735588] Call Trace: [ 1333.735997] [ 1333.736367] dump_stack_lvl+0x8f/0xb7 [ 1333.736997] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1333.737847] p9_client_create+0xc89/0x1050 [ 1333.738544] ? __pfx_p9_client_create+0x10/0x10 [ 1333.739287] ? lock_is_held_type+0xdb/0x130 [ 1333.739979] ? lockdep_init_map_type+0x21e/0x7f0 [ 1333.740745] ? __raw_spin_lock_init+0x3a/0x110 [ 1333.741536] v9fs_session_init+0x1e1/0x1670 [ 1333.742283] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1333.743113] ? __pfx_lock_release+0x10/0x10 [ 1333.743845] ? __pfx_v9fs_session_init+0x10/0x10 [ 1333.744618] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1333.745455] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1333.746312] ? lock_is_held_type+0xdb/0x130 [ 1333.747069] v9fs_mount+0xbd/0xbd0 [ 1333.747677] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.748370] ? cap_capable+0x1da/0x240 [ 1333.749064] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.749755] legacy_get_tree+0x109/0x220 [ 1333.750475] vfs_get_tree+0x92/0x300 [ 1333.751110] path_mount+0x1314/0x1e30 [ 1333.751751] ? kasan_quarantine_put+0x8f/0x1f0 [ 1333.752556] ? __pfx_path_mount+0x10/0x10 [ 1333.753383] ? putname+0x102/0x140 [ 1333.754038] __x64_sys_mount+0x286/0x310 [ 1333.754730] ? __pfx___x64_sys_mount+0x10/0x10 [ 1333.755498] ? syscall_enter_from_user_mode+0x21/0x50 [ 1333.756367] do_syscall_64+0x3f/0x90 [ 1333.757003] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1333.757870] RIP: 0033:0x7f767b249b19 [ 1333.758490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.761367] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.762585] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1333.763729] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1333.764859] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1333.766015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.767135] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1333.768307] [ 1333.870421] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) 23:52:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1333.993285] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1333.999571] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) 23:52:14 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x4032c}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66697889dbbad5d09d06e30c6905ab6249f4325ba02de7f283d50f80a91d90caf594f2a2092853d070c903f9b162269f022ea2ae94b654b5db23a20a50f5acd5f80d116af0960a7d3fabb24bb4917e393d96f4ccb95de07c31b52b208dbb01937be6ebfb3c42e041ef3e1c8b2970f789c0e009e4e6b2c1dd7973debe7111e6dcfa401d2085"]) lsetxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@md5={0x1, "ade65761b1295e404c1a55f517dde1bc"}, 0x11, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x8}) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$int_out(r1, 0x2, &(0x7f00000000c0)) r6 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x302e1cec00cdaec6, 0x0) [ 1334.025668] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1334.034851] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:14 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = clone3(&(0x7f00000001c0)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000580)='./file1\x00', 0x4, 0x709000, 0x12345}, 0xcd6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) fork() pidfd_open(0x0, 0x0) getpgid(r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x7, 'geneve1\x00', {0x1}, 0x93}) ioctl(r0, 0xf79, &(0x7f0000000540)="203f28e832c5be0cc8ba65d75d1c8d2e474115bffbcda5e277009b79d3a9b4807eba8710fa97ee9ddf6be99b175c") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'ipvlan1\x00', 0xffff}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x52}, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r2 = fork() r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x14a00, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3, 0x1, 0x0, 0x2, 0x0, 0x7, 0x18800, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x928, 0x1, @perf_bp={&(0x7f0000000340), 0xd}, 0xa440, 0xe8, 0x0, 0x8, 0x7, 0x7, 0xfff, 0x0, 0xc7, 0x0, 0x8}, r2, 0x10, r3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) [ 1334.166898] FAULT_INJECTION: forcing a failure. [ 1334.166898] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.168624] CPU: 1 PID: 8624 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1334.169779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.170959] Call Trace: [ 1334.171351] [ 1334.171700] dump_stack_lvl+0x8f/0xb7 [ 1334.172302] should_fail_ex.cold+0x5/0xa [ 1334.172920] ? __kernfs_new_node+0xd4/0x8c0 [ 1334.173573] should_failslab+0x9/0x20 [ 1334.174175] kmem_cache_alloc+0x5a/0x410 [ 1334.174800] __kernfs_new_node+0xd4/0x8c0 [ 1334.175430] ? lock_release+0x3b6/0x750 [ 1334.176066] ? __pfx___kernfs_new_node+0x10/0x10 [ 1334.176828] ? __pfx_lock_release+0x10/0x10 [ 1334.177521] ? lock_acquire+0x32/0xc0 [ 1334.178193] ? up_write+0x1b0/0x520 [ 1334.178820] kernfs_new_node+0x97/0x120 [ 1334.179499] __kernfs_create_file+0x55/0x350 [ 1334.180220] sysfs_add_file_mode_ns+0x21c/0x440 [ 1334.180973] ? __pfx_slab_attr_store+0x10/0x10 [ 1334.181728] internal_create_group+0x322/0xb20 [ 1334.182504] ? __pfx_internal_create_group+0x10/0x10 [ 1334.183316] ? up_write+0x1b0/0x520 [ 1334.183944] sysfs_slab_add+0x18e/0x220 [ 1334.184613] __kmem_cache_create+0x461/0x5d0 [ 1334.185309] kmem_cache_create_usercopy+0x201/0x2f0 [ 1334.186124] p9_client_create+0xc89/0x1050 [ 1334.186829] ? __pfx_p9_client_create+0x10/0x10 [ 1334.187565] ? lock_is_held_type+0xdb/0x130 [ 1334.188266] ? lockdep_init_map_type+0x21e/0x7f0 [ 1334.189036] ? __raw_spin_lock_init+0x3a/0x110 [ 1334.189949] v9fs_session_init+0x1e1/0x1670 [ 1334.190802] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.191900] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.192992] ? lockdep_hardirqs_on+0x7d/0x100 [ 1334.193930] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.194935] ? __pfx_v9fs_session_init+0x10/0x10 [ 1334.195724] ? lock_is_held_type+0xdb/0x130 [ 1334.196436] v9fs_mount+0xbd/0xbd0 [ 1334.197030] ? __pfx_v9fs_mount+0x10/0x10 [ 1334.197706] ? cap_capable+0x1da/0x240 [ 1334.198370] ? __pfx_v9fs_mount+0x10/0x10 [ 1334.199066] legacy_get_tree+0x109/0x220 [ 1334.199749] vfs_get_tree+0x92/0x300 [ 1334.200358] path_mount+0x1314/0x1e30 [ 1334.201071] ? kasan_quarantine_put+0x8f/0x1f0 [ 1334.201832] ? __pfx_path_mount+0x10/0x10 [ 1334.202522] ? putname+0x102/0x140 [ 1334.203121] __x64_sys_mount+0x286/0x310 [ 1334.203771] ? __pfx___x64_sys_mount+0x10/0x10 [ 1334.204520] ? syscall_enter_from_user_mode+0x21/0x50 [ 1334.205335] do_syscall_64+0x3f/0x90 [ 1334.205956] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1334.206760] RIP: 0033:0x7f767b249b19 [ 1334.207333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.210060] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1334.211234] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1334.212298] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1334.213374] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1334.214444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.215519] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1334.216610] 23:52:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) dup2(r2, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) eventfd2(0xfffff116, 0x40800) r5 = dup(0xffffffffffffffff) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) [ 1334.273680] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1334.274841] CPU: 1 PID: 8624 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1334.275915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.277023] Call Trace: [ 1334.277400] [ 1334.277741] dump_stack_lvl+0x8f/0xb7 [ 1334.278336] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1334.279103] p9_client_create+0xc89/0x1050 [ 1334.279710] ? __pfx_p9_client_create+0x10/0x10 [ 1334.280364] ? lock_is_held_type+0xdb/0x130 [ 1334.280958] ? lockdep_init_map_type+0x21e/0x7f0 [ 1334.281628] ? __raw_spin_lock_init+0x3a/0x110 [ 1334.282299] v9fs_session_init+0x1e1/0x1670 [ 1334.282891] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.283645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.284439] ? lockdep_hardirqs_on+0x7d/0x100 [ 1334.285108] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.285877] ? __pfx_v9fs_session_init+0x10/0x10 [ 1334.286546] ? lock_is_held_type+0xdb/0x130 [ 1334.287171] v9fs_mount+0xbd/0xbd0 [ 1334.287676] ? __pfx_v9fs_mount+0x10/0x10 [ 1334.288254] ? cap_capable+0x1da/0x240 [ 1334.288834] ? __pfx_v9fs_mount+0x10/0x10 [ 1334.289429] legacy_get_tree+0x109/0x220 [ 1334.290051] vfs_get_tree+0x92/0x300 [ 1334.290609] path_mount+0x1314/0x1e30 [ 1334.291177] ? kasan_quarantine_put+0x8f/0x1f0 [ 1334.291915] ? __pfx_path_mount+0x10/0x10 [ 1334.292737] ? putname+0x102/0x140 [ 1334.293463] __x64_sys_mount+0x286/0x310 [ 1334.294254] ? __pfx___x64_sys_mount+0x10/0x10 [ 1334.295119] ? syscall_enter_from_user_mode+0x21/0x50 [ 1334.296115] do_syscall_64+0x3f/0x90 [ 1334.296819] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1334.297600] RIP: 0033:0x7f767b249b19 [ 1334.298171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.300708] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1334.301803] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1334.302831] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1334.303849] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1334.304871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.305910] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1334.306952] 23:52:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:31 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000200)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 23:52:31 executing program 7: r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x9) r2 = perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r4 = accept$unix(r3, 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x1) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x5, 0x9, 0x29, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x0, 0x8}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000b80)={@rand_addr=' \x01\x00', 0x4, r5}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r6, 0xe, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x51c4, &(0x7f0000000140)={0x0, 0x66a0, 0x0, 0x1, 0x187, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) write$binfmt_aout(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1694], 0x69e) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x5) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x3, 0x1, 0x99, 0x0, 0x8, 0x85020, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x1f}, 0x14020, 0x9, 0x5, 0x2, 0xfff, 0x90da, 0x9, 0x0, 0xb4a80000, 0x0, 0x81}, r6, 0x4, r2, 0x6) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000a80)={0x2, 0x7ffffeff, 0x5, 0x0, 0x3, 0x9}) 23:52:31 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b40, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:52:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) 23:52:31 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "7d3e7089ad984b532235afac4e09ed101db213534511df295fd4477cc2f8f8052f085d7a74a2a059d892660ea17358b0d38dc86a072251baf810151316d78d92", 0x26}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)=@keyring) keyctl$read(0xb, 0x0, &(0x7f0000000200)=""/164, 0xa4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f0000000300)='syz') add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfe, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 23:52:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1351.200364] EXT4-fs: 6 callbacks suppressed [ 1351.200378] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.212686] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.227034] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.239531] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1351.380924] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) [ 1351.484439] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.520156] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.527512] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:32 executing program 2: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000100)) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x8, 0x2, 0x20, 0x0, 0x0, 0x3, 0x40, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x400, 0x8, 0x9, 0x10000, 0x3, 0xff, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xd, r0, 0x18) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/62) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 23:52:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1351.538991] FAULT_INJECTION: forcing a failure. [ 1351.538991] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.539918] CPU: 1 PID: 8676 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1351.540496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1351.541081] Call Trace: [ 1351.541278] [ 1351.541454] dump_stack_lvl+0x8f/0xb7 [ 1351.541769] should_fail_ex.cold+0x5/0xa [ 1351.542094] ? __kernfs_new_node+0xd4/0x8c0 [ 1351.542423] should_failslab+0x9/0x20 [ 1351.542720] kmem_cache_alloc+0x5a/0x410 [ 1351.543042] __kernfs_new_node+0xd4/0x8c0 [ 1351.543361] ? lock_release+0x3b6/0x750 [ 1351.543671] ? __pfx___kernfs_new_node+0x10/0x10 [ 1351.544023] ? __pfx_lock_release+0x10/0x10 [ 1351.544352] ? lock_acquire+0x32/0xc0 [ 1351.544655] ? up_write+0x1b0/0x520 [ 1351.544947] kernfs_new_node+0x97/0x120 [ 1351.545268] __kernfs_create_file+0x55/0x350 [ 1351.545607] sysfs_add_file_mode_ns+0x21c/0x440 [ 1351.545964] ? __pfx_slab_attr_store+0x10/0x10 [ 1351.546332] internal_create_group+0x322/0xb20 [ 1351.546690] ? __pfx_internal_create_group+0x10/0x10 [ 1351.547073] ? up_write+0x1b0/0x520 [ 1351.547370] sysfs_slab_add+0x18e/0x220 [ 1351.547682] __kmem_cache_create+0x461/0x5d0 [ 1351.548021] kmem_cache_create_usercopy+0x201/0x2f0 [ 1351.548407] p9_client_create+0xc89/0x1050 [ 1351.548739] ? __pfx_p9_client_create+0x10/0x10 [ 1351.549101] ? lock_is_held_type+0xdb/0x130 [ 1351.549429] ? lockdep_init_map_type+0x21e/0x7f0 [ 1351.549791] ? __raw_spin_lock_init+0x3a/0x110 [ 1351.550153] v9fs_session_init+0x1e1/0x1670 [ 1351.550475] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1351.550842] ? __pfx_lock_release+0x10/0x10 [ 1351.551170] ? __pfx_v9fs_session_init+0x10/0x10 [ 1351.551525] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1351.551912] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1351.552315] ? lock_is_held_type+0xdb/0x130 [ 1351.552657] v9fs_mount+0xbd/0xbd0 [ 1351.552932] ? __pfx_v9fs_mount+0x10/0x10 [ 1351.553247] ? cap_capable+0x1da/0x240 [ 1351.553550] ? __pfx_v9fs_mount+0x10/0x10 [ 1351.553860] legacy_get_tree+0x109/0x220 [ 1351.554178] vfs_get_tree+0x92/0x300 [ 1351.554463] path_mount+0x1314/0x1e30 [ 1351.554764] ? kasan_quarantine_put+0x8f/0x1f0 [ 1351.555109] ? __pfx_path_mount+0x10/0x10 [ 1351.555427] ? putname+0x102/0x140 [ 1351.555712] __x64_sys_mount+0x286/0x310 [ 1351.556033] ? __pfx___x64_sys_mount+0x10/0x10 [ 1351.556394] ? syscall_enter_from_user_mode+0x21/0x50 [ 1351.556800] do_syscall_64+0x3f/0x90 [ 1351.557089] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1351.557484] RIP: 0033:0x7f767b249b19 [ 1351.557772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.559064] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1351.559616] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1351.560128] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1351.560649] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1351.561181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.561698] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1351.562224] [ 1351.562984] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1351.585662] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1351.586219] CPU: 1 PID: 8676 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1351.586797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1351.587382] Call Trace: [ 1351.587576] [ 1351.587752] dump_stack_lvl+0x8f/0xb7 [ 1351.588051] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1351.588458] p9_client_create+0xc89/0x1050 [ 1351.588789] ? __pfx_p9_client_create+0x10/0x10 [ 1351.589144] ? lock_is_held_type+0xdb/0x130 [ 1351.589470] ? lockdep_init_map_type+0x21e/0x7f0 [ 1351.589831] ? __raw_spin_lock_init+0x3a/0x110 [ 1351.590200] v9fs_session_init+0x1e1/0x1670 [ 1351.590535] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1351.590902] ? __pfx_lock_release+0x10/0x10 [ 1351.591330] ? __pfx_v9fs_session_init+0x10/0x10 [ 1351.591875] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1351.592309] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1351.592689] ? lock_is_held_type+0xdb/0x130 [ 1351.593024] v9fs_mount+0xbd/0xbd0 [ 1351.593299] ? __pfx_v9fs_mount+0x10/0x10 [ 1351.593611] ? cap_capable+0x1da/0x240 [ 1351.593918] ? __pfx_v9fs_mount+0x10/0x10 [ 1351.594231] legacy_get_tree+0x109/0x220 [ 1351.594539] vfs_get_tree+0x92/0x300 [ 1351.594838] path_mount+0x1314/0x1e30 [ 1351.595121] ? kasan_quarantine_put+0x8f/0x1f0 [ 1351.595459] ? __pfx_path_mount+0x10/0x10 [ 1351.595765] ? putname+0x102/0x140 [ 1351.596041] __x64_sys_mount+0x286/0x310 [ 1351.596342] ? __pfx___x64_sys_mount+0x10/0x10 [ 1351.596691] ? syscall_enter_from_user_mode+0x21/0x50 [ 1351.597072] do_syscall_64+0x3f/0x90 [ 1351.597357] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1351.597731] RIP: 0033:0x7f767b249b19 [ 1351.597996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.599247] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1351.599773] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1351.600260] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1351.600756] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1351.601249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.601738] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1351.602287] [ 1351.656391] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:48 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b41, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:52:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xfffc, 0x0, "b36cc4", 0xfe}) signalfd4(r0, &(0x7f0000000100)={[0x102795c2]}, 0x8, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='environ\x00') clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0xbca4609746e51130, r2, 0xffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1367.270332] EXT4-fs: 1 callbacks suppressed [ 1367.270347] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) 23:52:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:48 executing program 7: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0431"], 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x4) eventfd2(0xae, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40091) fallocate(r2, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:52:48 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r0 = epoll_create(0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0xa2, 0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x80908, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x51c4}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = dup(0xffffffffffffffff) getsockopt$bt_hci(r2, 0x0, 0x14, 0x0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x90000009}) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x3f, r1, &(0x7f00000001c0)=0xfffffffffffff000, 0x7, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1367.276381] Bluetooth: hci5: unexpected event 0x31 length: 7 > 6 [ 1367.286998] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1367.314691] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1367.333888] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:52:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) [ 1367.363357] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1367.378890] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1367.404741] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1367.419595] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:52:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1367.429034] FAULT_INJECTION: forcing a failure. [ 1367.429034] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.430086] CPU: 1 PID: 8713 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1367.430684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.431262] Call Trace: [ 1367.431450] [ 1367.431617] dump_stack_lvl+0x8f/0xb7 [ 1367.431916] should_fail_ex.cold+0x5/0xa [ 1367.432227] ? __kernfs_new_node+0xd4/0x8c0 [ 1367.432556] should_failslab+0x9/0x20 [ 1367.432839] kmem_cache_alloc+0x5a/0x410 [ 1367.433158] __kernfs_new_node+0xd4/0x8c0 [ 1367.433477] ? lock_release+0x3b6/0x750 [ 1367.433777] ? __pfx___kernfs_new_node+0x10/0x10 [ 1367.434133] ? __pfx_lock_release+0x10/0x10 [ 1367.434460] ? lock_acquire+0x32/0xc0 [ 1367.434780] ? up_write+0x1b0/0x520 [ 1367.435080] kernfs_new_node+0x97/0x120 [ 1367.435397] __kernfs_create_file+0x55/0x350 [ 1367.435728] sysfs_add_file_mode_ns+0x21c/0x440 [ 1367.436073] ? __pfx_slab_attr_store+0x10/0x10 [ 1367.436434] internal_create_group+0x322/0xb20 [ 1367.436798] ? __pfx_internal_create_group+0x10/0x10 [ 1367.437192] ? up_write+0x1b0/0x520 [ 1367.437502] sysfs_slab_add+0x18e/0x220 [ 1367.437818] __kmem_cache_create+0x461/0x5d0 [ 1367.438158] kmem_cache_create_usercopy+0x201/0x2f0 [ 1367.438558] p9_client_create+0xc89/0x1050 [ 1367.438889] ? __pfx_p9_client_create+0x10/0x10 [ 1367.439250] ? lock_is_held_type+0xdb/0x130 [ 1367.439579] ? lockdep_init_map_type+0x21e/0x7f0 [ 1367.439941] ? __raw_spin_lock_init+0x3a/0x110 [ 1367.440306] v9fs_session_init+0x1e1/0x1670 [ 1367.440646] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1367.441027] ? __pfx_lock_release+0x10/0x10 [ 1367.441362] ? __pfx_v9fs_session_init+0x10/0x10 [ 1367.441712] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1367.442093] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1367.442488] ? lock_is_held_type+0xdb/0x130 [ 1367.442827] v9fs_mount+0xbd/0xbd0 [ 1367.443105] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.443426] ? cap_capable+0x1da/0x240 [ 1367.443744] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.444070] legacy_get_tree+0x109/0x220 [ 1367.444381] vfs_get_tree+0x92/0x300 [ 1367.444669] path_mount+0x1314/0x1e30 [ 1367.444958] ? kasan_quarantine_put+0x8f/0x1f0 [ 1367.445310] ? __pfx_path_mount+0x10/0x10 [ 1367.445634] ? putname+0x102/0x140 [ 1367.445920] __x64_sys_mount+0x286/0x310 [ 1367.446249] ? __pfx___x64_sys_mount+0x10/0x10 [ 1367.446607] ? syscall_enter_from_user_mode+0x21/0x50 [ 1367.446997] do_syscall_64+0x3f/0x90 [ 1367.447292] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1367.447690] RIP: 0033:0x7f767b249b19 [ 1367.447974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.449291] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1367.449862] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1367.450395] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1367.450914] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1367.451425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.451933] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1367.452469] 23:52:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1367.513703] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1367.514289] CPU: 1 PID: 8713 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1367.514859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.515444] Call Trace: [ 1367.515629] [ 1367.515799] dump_stack_lvl+0x8f/0xb7 [ 1367.516108] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1367.516530] p9_client_create+0xc89/0x1050 [ 1367.516874] ? __pfx_p9_client_create+0x10/0x10 [ 1367.517229] ? lock_is_held_type+0xdb/0x130 [ 1367.517560] ? lockdep_init_map_type+0x21e/0x7f0 [ 1367.517924] ? __raw_spin_lock_init+0x3a/0x110 [ 1367.518292] v9fs_session_init+0x1e1/0x1670 [ 1367.518622] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1367.518986] ? __pfx_lock_release+0x10/0x10 [ 1367.519316] ? __pfx_v9fs_session_init+0x10/0x10 [ 1367.519670] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1367.520047] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1367.520427] ? lock_is_held_type+0xdb/0x130 [ 1367.520759] v9fs_mount+0xbd/0xbd0 [ 1367.521034] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.521348] ? cap_capable+0x1da/0x240 [ 1367.521649] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.521971] legacy_get_tree+0x109/0x220 [ 1367.522328] vfs_get_tree+0x92/0x300 [ 1367.522626] path_mount+0x1314/0x1e30 [ 1367.522924] ? kasan_quarantine_put+0x8f/0x1f0 [ 1367.523280] ? __pfx_path_mount+0x10/0x10 [ 1367.523608] ? putname+0x102/0x140 [ 1367.523902] __x64_sys_mount+0x286/0x310 [ 1367.524215] ? __pfx___x64_sys_mount+0x10/0x10 [ 1367.524565] ? syscall_enter_from_user_mode+0x21/0x50 [ 1367.524956] do_syscall_64+0x3f/0x90 [ 1367.525250] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1367.525639] RIP: 0033:0x7f767b249b19 [ 1367.525917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.527201] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1367.527751] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1367.528262] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1367.528776] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1367.529287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.529807] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1367.530355] [ 1367.530696] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1367.538929] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = getpid() perf_event_open(0x0, r2, 0xb, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1500000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) 23:53:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x46, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x589400, 0x0) pread64(r1, &(0x7f0000000140)=""/208, 0xd0, 0x7) 23:53:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x2, 0x87, 0x6, 0x0, 0xfffffffffffffffd, 0xb280, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000140), 0x5}, 0x12060, 0x1, 0x12, 0x64caf6616621df1c, 0x7, 0x8, 0x9, 0x0, 0x8}, 0x0, 0x3, r0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x131c00, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffdef) eventfd2(0x2, 0x801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002ac0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffdef) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x3, &(0x7f0000000600)=[{&(0x7f00000003c0)="8edca5c30678162dfb564829b83ef0c72d51e832553232e13213d52fc5547a7a9840c876ef17853648e1246103e0eaa7a1e4ad9d1c56b75fcd70e3dd44411823c3315d909177350b043b4357a8fd589ac7003a01999b1560ef56210ef688fbaa5542c8f197eb5c0d534d6913630e8cc122cdaca878ce96a40e4ff25585f3fb2e9d26b35dd0968763d6a9ed12ece3c72ce74ebbf4c6cf0e52d77d4dff7f723229cf747aefc1de4ca7c7b7d9dd5ce3943ef67d604e6da454393009cfb616f6", 0xbe, 0x1}, {&(0x7f0000000480)="e5adee7f127e1bd83561e658685c8813cb74a4df0b857d471116f10908a85002f7e4ad17208678bf18324491c1f4894a2a038477af8315b9a56e943a35544f28b519f90fa76af4faaf0b3e9219eb0d5ee44edcf8b896d62a6580d2e4117f8d29d22a7f128a519a5befea48f1909553", 0x6f, 0xffffffffffff7a3b}, {&(0x7f0000000500)="8c239fb2118535109f20026b340dd3d00811458dc7016607a481e497b83d3c78561880c08b12d63f6cad7a45036fd0533a7df8ec85ad115fae038b810b81fdb5427f5c0e4acbe00e1f7a49ffc5f7bb85e3a30db119f8eaa0329180ba339e4d033527e303165bf83e8bc36d3f1beab95bcdd36825030ae0aaf9a16f0534610d0df99bf47622b4fe8840b615477e914f65f5a9ef3f7e934f1b2034ec6918456bb2be75bea31e8972980ebca64d01fe74854d5edfcf8a7e86ee0fede5311cfeec6661d9bf46fcf1", 0xc6, 0x7}], 0x0, &(0x7f0000000680)={[{@nodots}, {@fat=@debug}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@uid}, {}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}) 23:53:02 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b44, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1368.078225] Bluetooth: hci5: unexpected event 0x31 length: 7 > 6 [ 1381.793104] EXT4-fs: 4 callbacks suppressed [ 1381.793128] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1381.808221] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:02 executing program 0: alarm(0x2) alarm(0x0) alarm(0x101) alarm(0x800000000000000b) alarm(0x16) [ 1381.823412] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1381.830975] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1381.839033] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1381.844941] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1381.897611] raw_sendmsg: syz-executor.7 forgot to set AF_INET. Fix it! 23:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb010000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1489}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x2b]}, 0xfffffffffffffe5a, 0x180800) r5 = syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r5, 0x58df, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000380)={0x0, 0x0, [0x3ff, 0x240000000000000, 0x1, 0x5, 0x4, 0x8]}) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) open_tree(r4, &(0x7f00000001c0)='./file1\x00', 0x8100) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_ivalue}) syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x36cc, 0x0, 0x1000000, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000400)=0x2) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @auto="0059685263ded7d1b41834e2062127e6"}}) openat2(r0, &(0x7f0000000480)='./file1\x00', &(0x7f0000000240)={0x102281, 0x9b, 0x1}, 0x18) 23:53:02 executing program 0: r0 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "7d3e7089ad984b532235afac4e09ed101db213534511df295fd4477cc2f8f8052f085d7a74a2a059d892660ea17358b0d38dc86a072251baf810151316d78d92", 0x26}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="d1540c0bbbb6b7863d00633aee51df136790b3d19c9729854338b1e57c49039ce8e17c5ef7db9397f37790f0698e2b046e9c1621850d9cc4f4e8fb0f7982b4e82fc843571c44514db2440d45601d87c8a88dd36f38cfffa9bdf0752546019d9c964be104b253ae918faae4946c3215338705f0a7c80c8e41b001b1318bcc501350a5216a3cceb6d6027e5fa1b3c4e253851e249e49357a034be25280e754c302bbc3808a3ae44a1fab38ba6aea5f22ac35df387cb189eb37e440bb45de59785ab4e35786a5f7261fdec083150f63c2b7", 0xd0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfe, 0x0, 0x0, 0x0, 0x2000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) 23:53:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) [ 1382.004593] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1382.018403] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x2000, @local}, {0x2, 0x4e20, @broadcast}, 0x193, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="9ce54f3c", @ANYRES16=r1, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a0008021100000000000a0006000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x20000010) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 1382.041932] FAULT_INJECTION: forcing a failure. [ 1382.041932] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.042852] CPU: 1 PID: 8773 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1382.043407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.043960] Call Trace: [ 1382.044145] [ 1382.044320] dump_stack_lvl+0x8f/0xb7 [ 1382.044612] should_fail_ex.cold+0x5/0xa [ 1382.044912] ? __kernfs_new_node+0xd4/0x8c0 [ 1382.045233] should_failslab+0x9/0x20 [ 1382.045521] kmem_cache_alloc+0x5a/0x410 [ 1382.045822] __kernfs_new_node+0xd4/0x8c0 [ 1382.046128] ? lock_release+0x3b6/0x750 [ 1382.046418] ? __pfx___kernfs_new_node+0x10/0x10 [ 1382.046775] ? __pfx_lock_release+0x10/0x10 [ 1382.047085] ? lock_acquire+0x32/0xc0 [ 1382.047400] ? up_write+0x1b0/0x520 [ 1382.047686] kernfs_new_node+0x97/0x120 [ 1382.047989] __kernfs_create_file+0x55/0x350 [ 1382.048312] sysfs_add_file_mode_ns+0x21c/0x440 [ 1382.048499] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1382.048643] ? __pfx_slab_attr_store+0x10/0x10 [ 1382.049949] internal_create_group+0x322/0xb20 [ 1382.050297] ? __pfx_internal_create_group+0x10/0x10 [ 1382.050696] ? up_write+0x1b0/0x520 [ 1382.050981] sysfs_slab_add+0x18e/0x220 [ 1382.051287] __kmem_cache_create+0x461/0x5d0 [ 1382.051612] kmem_cache_create_usercopy+0x201/0x2f0 [ 1382.051982] p9_client_create+0xc89/0x1050 [ 1382.052300] ? __pfx_p9_client_create+0x10/0x10 [ 1382.052638] ? lock_is_held_type+0xdb/0x130 [ 1382.052950] ? lockdep_init_map_type+0x21e/0x7f0 [ 1382.053318] ? __raw_spin_lock_init+0x3a/0x110 [ 1382.053682] v9fs_session_init+0x1e1/0x1670 [ 1382.054023] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1382.054394] ? __pfx_lock_release+0x10/0x10 [ 1382.054732] ? __pfx_v9fs_session_init+0x10/0x10 [ 1382.055091] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.055476] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.055852] ? lock_is_held_type+0xdb/0x130 [ 1382.056192] v9fs_mount+0xbd/0xbd0 [ 1382.056466] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.056777] ? cap_capable+0x1da/0x240 [ 1382.057096] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.057418] legacy_get_tree+0x109/0x220 [ 1382.057738] vfs_get_tree+0x92/0x300 [ 1382.058025] path_mount+0x1314/0x1e30 [ 1382.058327] ? kasan_quarantine_put+0x8f/0x1f0 [ 1382.058691] ? __pfx_path_mount+0x10/0x10 [ 1382.059016] ? putname+0x102/0x140 [ 1382.059305] __x64_sys_mount+0x286/0x310 [ 1382.059628] ? __pfx___x64_sys_mount+0x10/0x10 [ 1382.059994] ? syscall_enter_from_user_mode+0x21/0x50 [ 1382.060398] do_syscall_64+0x3f/0x90 [ 1382.060688] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1382.061068] RIP: 0033:0x7f767b249b19 [ 1382.061348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.062592] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1382.063151] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1382.063658] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1382.064192] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1382.064694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1382.065206] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1382.065744] [ 1382.077488] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1382.175039] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1382.175610] CPU: 1 PID: 8773 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1382.176164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.176735] Call Trace: [ 1382.176921] [ 1382.177099] dump_stack_lvl+0x8f/0xb7 [ 1382.177390] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1382.177782] p9_client_create+0xc89/0x1050 [ 1382.178098] ? __pfx_p9_client_create+0x10/0x10 [ 1382.178447] ? lock_is_held_type+0xdb/0x130 [ 1382.178763] ? lockdep_init_map_type+0x21e/0x7f0 [ 1382.179111] ? __raw_spin_lock_init+0x3a/0x110 [ 1382.179456] v9fs_session_init+0x1e1/0x1670 [ 1382.179784] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1382.180150] ? __pfx_lock_release+0x10/0x10 [ 1382.180489] ? __pfx_v9fs_session_init+0x10/0x10 [ 1382.180820] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.181179] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.181673] ? lock_is_held_type+0xdb/0x130 [ 1382.182160] v9fs_mount+0xbd/0xbd0 [ 1382.182574] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.182870] ? cap_capable+0x1da/0x240 [ 1382.183158] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.183449] legacy_get_tree+0x109/0x220 [ 1382.183757] vfs_get_tree+0x92/0x300 [ 1382.184036] path_mount+0x1314/0x1e30 [ 1382.184326] ? kasan_quarantine_put+0x8f/0x1f0 [ 1382.184668] ? __pfx_path_mount+0x10/0x10 [ 1382.184983] ? putname+0x102/0x140 [ 1382.185268] __x64_sys_mount+0x286/0x310 [ 1382.185570] ? __pfx___x64_sys_mount+0x10/0x10 [ 1382.185917] ? syscall_enter_from_user_mode+0x21/0x50 [ 1382.186311] do_syscall_64+0x3f/0x90 [ 1382.186615] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1382.187004] RIP: 0033:0x7f767b249b19 [ 1382.187279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.188528] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1382.189053] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1382.189566] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1382.190067] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1382.190581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1382.191087] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1382.191595] 23:53:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 98) 23:53:03 executing program 0: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ee10b6", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, @private2, {[@dstopts={0x88}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "12117b", 0x0, 0x0, 0x0, @private0, @local}}}}}}}, 0x0) 23:53:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1382.358007] FAULT_INJECTION: forcing a failure. [ 1382.358007] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.359001] CPU: 1 PID: 8798 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1382.359563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.360145] Call Trace: [ 1382.360338] [ 1382.360511] dump_stack_lvl+0x8f/0xb7 [ 1382.360817] should_fail_ex.cold+0x5/0xa [ 1382.361127] ? __kernfs_new_node+0xd4/0x8c0 [ 1382.361458] should_failslab+0x9/0x20 [ 1382.361759] kmem_cache_alloc+0x5a/0x410 [ 1382.362076] __kernfs_new_node+0xd4/0x8c0 [ 1382.362392] ? lock_release+0x3b6/0x750 [ 1382.362710] ? __pfx___kernfs_new_node+0x10/0x10 [ 1382.363068] ? __pfx_lock_release+0x10/0x10 [ 1382.363389] ? lock_acquire+0x32/0xc0 [ 1382.363697] ? up_write+0x1b0/0x520 [ 1382.363999] kernfs_new_node+0x97/0x120 [ 1382.364319] __kernfs_create_file+0x55/0x350 [ 1382.364670] sysfs_add_file_mode_ns+0x21c/0x440 [ 1382.365037] ? __pfx_slab_attr_store+0x10/0x10 [ 1382.365392] internal_create_group+0x322/0xb20 [ 1382.365744] ? __pfx_internal_create_group+0x10/0x10 [ 1382.366133] ? up_write+0x1b0/0x520 [ 1382.366434] sysfs_slab_add+0x18e/0x220 [ 1382.366746] __kmem_cache_create+0x461/0x5d0 [ 1382.367087] kmem_cache_create_usercopy+0x201/0x2f0 [ 1382.367471] p9_client_create+0xc89/0x1050 [ 1382.367810] ? __pfx_p9_client_create+0x10/0x10 [ 1382.368166] ? lock_is_held_type+0xdb/0x130 [ 1382.368494] ? lockdep_init_map_type+0x21e/0x7f0 [ 1382.368854] ? __raw_spin_lock_init+0x3a/0x110 [ 1382.369205] v9fs_session_init+0x1e1/0x1670 [ 1382.369526] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1382.369892] ? __pfx_lock_release+0x10/0x10 [ 1382.370222] ? __pfx_v9fs_session_init+0x10/0x10 [ 1382.370598] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.370984] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.371376] ? lock_is_held_type+0xdb/0x130 [ 1382.371725] v9fs_mount+0xbd/0xbd0 [ 1382.372009] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.372319] ? cap_capable+0x1da/0x240 [ 1382.372624] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.372938] legacy_get_tree+0x109/0x220 [ 1382.373254] vfs_get_tree+0x92/0x300 [ 1382.373545] path_mount+0x1314/0x1e30 [ 1382.373833] ? kasan_quarantine_put+0x8f/0x1f0 [ 1382.374182] ? __pfx_path_mount+0x10/0x10 [ 1382.374509] ? putname+0x102/0x140 [ 1382.374789] __x64_sys_mount+0x286/0x310 [ 1382.375096] ? __pfx___x64_sys_mount+0x10/0x10 [ 1382.375444] ? syscall_enter_from_user_mode+0x21/0x50 [ 1382.375842] do_syscall_64+0x3f/0x90 [ 1382.376132] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1382.376519] RIP: 0033:0x7f767b249b19 [ 1382.376795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.378059] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1382.378617] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1382.379125] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1382.379635] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1382.380152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1382.380677] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1382.381214] [ 1382.384820] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1382.385380] CPU: 1 PID: 8798 Comm: syz-executor.1 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1382.385956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.386547] Call Trace: [ 1382.386740] [ 1382.386911] dump_stack_lvl+0x8f/0xb7 [ 1382.387208] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1382.387613] p9_client_create+0xc89/0x1050 [ 1382.387936] ? __pfx_p9_client_create+0x10/0x10 [ 1382.388297] ? lock_is_held_type+0xdb/0x130 [ 1382.388634] ? lockdep_init_map_type+0x21e/0x7f0 [ 1382.389001] ? __raw_spin_lock_init+0x3a/0x110 [ 1382.389355] v9fs_session_init+0x1e1/0x1670 [ 1382.389677] ? __kmem_cache_alloc_node+0x25b/0x400 [ 1382.390044] ? __pfx_lock_release+0x10/0x10 [ 1382.390368] ? __pfx_v9fs_session_init+0x10/0x10 [ 1382.390727] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.391100] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 1382.391484] ? lock_is_held_type+0xdb/0x130 [ 1382.391820] v9fs_mount+0xbd/0xbd0 [ 1382.392095] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.392406] ? cap_capable+0x1da/0x240 [ 1382.392701] ? __pfx_v9fs_mount+0x10/0x10 [ 1382.393005] legacy_get_tree+0x109/0x220 [ 1382.393314] vfs_get_tree+0x92/0x300 [ 1382.393597] path_mount+0x1314/0x1e30 [ 1382.393888] ? kasan_quarantine_put+0x8f/0x1f0 [ 1382.394240] ? __pfx_path_mount+0x10/0x10 [ 1382.394570] ? putname+0x102/0x140 [ 1382.394847] __x64_sys_mount+0x286/0x310 [ 1382.395154] ? __pfx___x64_sys_mount+0x10/0x10 [ 1382.395506] ? syscall_enter_from_user_mode+0x21/0x50 [ 1382.395905] do_syscall_64+0x3f/0x90 [ 1382.396188] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1382.396558] RIP: 0033:0x7f767b249b19 [ 1382.396822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.398025] RSP: 002b:00007f76787bf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1382.398549] RAX: ffffffffffffffda RBX: 00007f767b35cf60 RCX: 00007f767b249b19 [ 1382.399035] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1382.399516] RBP: 00007f76787bf1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1382.400000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1382.400485] R13: 00007ffd3f2fa9cf R14: 00007f76787bf300 R15: 0000000000022000 [ 1382.400996] 23:53:19 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b45, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1398.463037] EXT4-fs: 10 callbacks suppressed [ 1398.463051] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d24201001203b2", 0x67, 0x400}], 0x0, &(0x7f0000014100)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 23:53:19 executing program 2: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250700ff040800050004771440b100028008000900008000000800040001800000080008003a0f000006000e004e220000600001800c0007000800000002000000080008000200100008000b0073697000080008003100000008000b0073697000090006006c626c63004d0000060002006700000014000310fed39e6d52cf4bd04c000000000000bb060004004e2200001c00028006000e004e22000005000d00005100000800050004000000147382c79285"], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x10, 0x3ff, 0x6) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)={0x19d, {{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x1, 0x2, [{{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @empty}}]}, 0x190) 23:53:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x15000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4300000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:19 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d000020000000a66bd32c00"/23, 0x17}, {0x0, 0x0, 0x82800}], 0x1002, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0xa015000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file1\x00'}) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file2\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) openat(r3, &(0x7f0000000040)='./file1\x00', 0x23a000, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9975, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8a}, 0x0, 0x0, 0x3, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) sendfile(r3, r1, 0x0, 0xfffffdef) 23:53:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 99) [ 1398.476263] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1398.503074] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x24000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1398.532909] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1398.550662] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8011}, 0x20040050) [ 1398.571932] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_destroy(r0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x7f, 0x2, 0x0, 0xfc4a, 0x1600, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ef, 0x1, @perf_config_ext={0x9afe, 0x5}, 0x802, 0x65af, 0x8800000, 0x8, 0x1, 0x401, 0x9, 0x0, 0x2, 0x0, 0x800}, r1, 0x5, 0xffffffffffffffff, 0xc) 23:53:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 100) [ 1398.771652] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1398.804712] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1398.928899] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1398.960750] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:38 executing program 7: socket$inet(0x2, 0x800, 0x8a) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 23:53:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0xa1600, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x3, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x1, 0x1, 0x401, 0x0, 0xfffffffb, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r0, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x2, 0x56, 0x5, 0x0, 0x2, 0x29896, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x100000000, 0x80}, 0x908, 0x3, 0xfffffff7, 0x5229d628f713c4dd, 0x7f, 0x9, 0x8, 0x0, 0x3f, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 23:53:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) sendfile(r2, r4, &(0x7f0000000240), 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x44b43, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x140, 0x8}, 0x18) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @c}, 0x1, 0x0, '\x00', @auto=[0x28]}) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x6) 23:53:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b46, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:53:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1417.524262] EXT4-fs: 2 callbacks suppressed [ 1417.524276] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.564674] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.597341] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.607452] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.615737] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.618452] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1417.731155] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.739830] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x43000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1417.808251] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1417.846103] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xa0001, 0x5) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 23:53:38 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="0c5b6bbf1ff2d5da79accdb8c4a9439602676b21", @ANYBLOB]) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x7fff, 0x5}, {0x5}, 0x5}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xa6, 0x6, 0x5d, 0x1, 0x0, 0x0, 0x64, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x3f, 0x8000}, 0x44, 0x1, 0x7f, 0x3, 0x8001, 0x0, 0x1ff, 0x0, 0xfff, 0x0, 0xffffffffffffff7f}, 0x0, 0x3, r0, 0xa) 23:53:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:53:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x280243, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000007c0)={0x0, 0x2, 0x0, [0x4, 0x3, 0x7, 0x7, 0x3], [0x8, 0x2, 0x1, 0x8319, 0x3, 0x9, 0x2, 0xa883, 0x7fff, 0x0, 0x2, 0x5, 0x5, 0x3, 0xa8, 0x6, 0x1, 0x1000, 0x69, 0x7f, 0x200, 0x1, 0x1000, 0xde, 0x7, 0x7, 0x5, 0x70, 0x400, 0x9, 0x200, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x2e, 0x8, 0x3f, 0x7fffffff, 0x9, 0x7, 0x6, 0x1, 0xfffffffffffffffc, 0x3, 0x0, 0xfffffffffffffff7, 0x492c, 0x0, 0x7, 0x1f, 0x80000001, 0x5, 0xe55f, 0x7, 0x6, 0xfffffffffffff947, 0x5347, 0xdd, 0x1, 0x8, 0x0, 0x7, 0x8, 0x7, 0x6, 0x80000001, 0x9, 0x6, 0x7, 0x0, 0x0, 0x5, 0xe530, 0x4, 0x1ff, 0x3, 0x5, 0x3, 0x101, 0x3ff, 0x4, 0x60f, 0x1, 0x6, 0x4, 0x9ac, 0x81, 0x0, 0x1, 0x4c, 0x0, 0xe6, 0xf32, 0x32b6, 0xc65d, 0x5a, 0x8, 0x7fff, 0x5, 0x5, 0x8, 0x10000, 0xe1, 0x7ff, 0x1, 0x7, 0x2, 0x35c, 0x6, 0x7fff, 0x0, 0x6, 0x4, 0x100000000, 0x5, 0x8, 0x2, 0x9c, 0x5, 0x7]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000c00)={0x2, 0x2, @start={r5, 0x0, "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", "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"}, [0x1fffffffe0000000, 0x5b, 0x4, 0x8, 0x100, 0x401, 0xfffffffffffffff9, 0x4, 0x3, 0x2, 0x7ff, 0x9, 0x16, 0x10001, 0x0, 0x9594943, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0x7, 0x1f, 0x5, 0x1, 0xfffffffffffffffa, 0x6d7, 0xeefa, 0x10001, 0xd116, 0x3f, 0x1, 0xfffffffffffffe01, 0x7, 0x5, 0x40, 0x4, 0x5ca24d93, 0x1, 0x1, 0x40, 0x1, 0x10001, 0x50c, 0x3, 0x5, 0x0, 0x3, 0x2, 0x2, 0x9, 0x9, 0x8, 0x100000000, 0x3f, 0x1, 0x2, 0x8, 0x10001, 0x10001, 0x0, 0x5, 0x8, 0xc7d]}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="6fb9da03727da88278fb1a30fac698fa281a4e0dd23a2406f4bc6d102bce6cd8d87d2c4a35963ebdc9f77d7bbd3f91ab7a10275b62ef7d83642990651a6c3e92de4f4833c3128c501642534aaae5a3499780bd093fdee6f6f2d56820", 0x5c}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @broadcast}}}], 0x20}, 0x0) 23:53:55 executing program 7: syz_emit_ethernet(0x60, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3c8f04", 0x2a, 0x0, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, {[], "aee13abcea93be885c1e38f8f2fa38a1a66c8f3a571cace2b2a2aa7b6fd967ce5e09c05a464dbfce7466"}}}}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) fstat(r3, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x29, 0xfe, 0x3, 0x7fff, 0x4c, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8, 0x1000, 0x9}}) 23:53:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) close(r0) fcntl$setlease(r0, 0x400, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f00000002c0)=@manufact={0x4, 0x0, 0x800, "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"}) 23:53:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x603000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:53:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b47, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:53:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x630b0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1434.624453] EXT4-fs: 6 callbacks suppressed [ 1434.624468] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYRES32, @ANYBLOB="72a49852f744b66aaa6c881b90b275a3a600"/31], 0x24}}, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r3, 0x2, 0xffffffffffffffff, 0x9) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xf7, 0x4, 0x0, 0x0, 0x247c, 0x2000, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xb0c}, 0x10004, 0x1, 0x4, 0x0, 0x80000001, 0xfffeffff, 0x1, 0x0, 0xffffffe1, 0x0, 0x7}, r3, 0x9, r4, 0x2) r6 = clone3(&(0x7f0000000480)={0x20000400, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0), {0x2}, &(0x7f0000000380)=""/108, 0x6c, &(0x7f0000000400)=""/17, &(0x7f0000000440)=[r3, r5, r3], 0x3, {r4}}, 0x58) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x90800, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x5, 0x8, 0x1f, 0x0, 0x9, 0x34, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x8}, 0x20, 0x9, 0x5, 0x9, 0xe5, 0x8, 0x3, 0x0, 0x0, 0x0, 0x7}, r6, 0xb, r7, 0x0) [ 1434.645870] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.649830] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.655339] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.662752] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) io_uring_enter(0xffffffffffffffff, 0x58df, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x180, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0x27e, 0x0, 0x0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000400)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x14b03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="feeb8935efa40300361902cacacafc29b23403af13201e013a73c00a03632b91f1809e1f9f56b2240b0066f263abb7b968828151a6242b08111799da96ef9617e82cc7b4edeffd26b339510528ba584b8d7e019bd38a1edfcbb3ea0000000088000000000816a1334ab12ec6ed4eacfa01e0e0117838ebf529c3963020d28f02cf8fb4955be9534b382861e92930cd3732bb61b7008a0b8f3196680c611630f41ae2bcd7e2b8bdeffb37074419e41600985a17fc2fb538847cdad6411b077a3769e070bc68b16b"]) [ 1434.670555] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:53:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:53:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x630b0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1434.758991] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.776495] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.794915] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1434.801427] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:53:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b48, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:54:10 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x10ba02, 0x0) sendfile(r0, r0, 0x0, 0xc) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x3fa, 0x300, 0x870bd2d, 0x25dfdbff, {0x1, 0x3, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c4}, 0x24040050) 23:54:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:54:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x64, 0xa6, 0x2, 0x3, 0x0, 0x87, 0x20000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x3, 0x8}, 0x2, 0xfffffffffffffffd, 0x80000000, 0x5, 0x0, 0xf8000000, 0x8, 0x0, 0xfd90, 0x0, 0x5}, 0x0, 0x2, r2, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 23:54:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:10 executing program 0: pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240)}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="5f056f96f872fe55e6efe81ba8d1ac35ff50f6e4d3783ec7ed8b6c6f43a60bf61e9ce89604be592835ec817d0fea9a70e4440901782a899da489d1", 0x3b, 0x9}, {&(0x7f00000001c0)="4c109c84c6d0525f84174cf7d9205ce343b2730dc8", 0x15, 0x3}], 0x1, &(0x7f0000000400)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000001}}, {@data_err_abort}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!'}}]}) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x7b, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(r2) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x4bfa, &(0x7f0000000040)) close_range(r1, r3, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './cgroup/cgroup.procs', [{0x20, '!\''}, {0x20, '\xbb$){]'}, {0x20, 'data_err=abort'}, {0x20, '&@'}, {0x20, '#&'}], 0xa, "1b89939e24b180a25b5e1a500ccadaa2405f35a8c31dd94a4a3e4b6d1bad9ae7563a77a8143fb32104fb6546064c2bdee95bf7da12a1b94a01619be2a50a478d4eb920c091f15deb2eb3859541770a94bdf79c8c7e02018c96ee18431f488b2cb50aba1167cc93c6e0905647d6f82bb1687c04a99bb1027e40911ba1294f1df64bea9c762698e529fdb296ef445c51ee742bdc7eb4fb710f72b6347b5c2f519858e6bb93411176bdfdeeaf686e348967d544a2693a135fc483aad6d982b368888501"}, 0xf9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) [ 1450.015816] EXT4-fs: 5 callbacks suppressed [ 1450.015831] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1450.024662] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1450.050167] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1450.059379] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1450.088455] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:10 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20004, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="410000000100", @ANYRES32=r0, @ANYBLOB]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 23:54:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe5010000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1450.113931] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:54:10 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x8, 0x0, 0x0, 0x1f}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f0000000080)=""/115, 0x73}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000680)=""/248, 0xf8}], 0x9) r2 = inotify_init1(0x100000) r3 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x6, 0x101000) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000940)={'batadv0\x00', @ifru_map}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000900)={0x2008}) dup2(r0, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000840)) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40000020) [ 1450.167135] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1450.174967] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1450.196165] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1450.202907] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1472.980754] EXT4-fs: 4 callbacks suppressed [ 1472.980768] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x2e, 0x711, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @local}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:54:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:33 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b49, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:54:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:54:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:33 executing program 2: r0 = clone3(&(0x7f0000000280)={0x0, &(0x7f0000000340)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x38}, &(0x7f00000000c0)=""/241, 0xf1, &(0x7f00000001c0)=""/111, 0x0}, 0x58) close_range(r1, r1, 0x0) sched_rr_get_interval(r0, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000003c0)={0x2, 0x0, 0x10}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) sendfile(r3, r4, &(0x7f0000000380)=0x6, 0x0) pwritev(r2, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x801, 0x0) 23:54:33 executing program 7: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20000, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x10) mount$cgroup(0x0, &(0x7f0000001400)='./file1\x00', &(0x7f0000001440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc76\xa5\x9f\xdf\x0e\xc3\x12\x97mW\xc8\xf3fB\xf8\xf1\xbf3\xc7\b\x06\x9aqq\x97\x0fH\xe0\xfa9\xb1\xb7;HZ\n\xddNF\xbc(\x80\x02R\x00\xe3\xd5\xd0\xbd/\xb60h\xcd\xf7t\xc0\xab\x96\x84\xa7\xc6\x12z\xd5\x03\x02(\x85\xa4\xe4\v\xaet\x8dJ\xed\x98!\x04\x81\\3B\xda\v\x82W\x062\xbf5\xa9\xa7G\xadK\xb0b\xb4\xe1Z\x1a0%H'}}]}) [ 1472.997627] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1473.019281] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1500000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1473.048770] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1473.064576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1473.071659] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1473.091059] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1473.101634] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1473.119881] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fedbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff7de6773dfba1463f020a00000000ffffffff00000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000b80)={r6, r7/1000+10000}, 0x10) r8 = dup3(r0, r2, 0x0) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x40) read$hiddev(r3, &(0x7f0000001400)=""/105, 0x69) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x4156, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'team_slave_1\x00'}, 0x18) fork() 23:54:33 executing program 7: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x3, 0x1, 0x99, 0x0, 0x8, 0x85020, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x1f}, 0x14020, 0x9, 0x5, 0x2, 0xfff, 0x90da, 0x9, 0x0, 0xb4a80000, 0x0, 0x81}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) close(r3) sendfile(r1, r2, 0x0, 0x40100000284) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/130, 0x82}], 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xc5, 0x80, 0x20, 0xb6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2400000, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x4200, 0x2, 0x7, 0x3, 0x8, 0x7fffffff, 0x9, 0x0, 0x8, 0x0, 0x1}, r4, 0x0, r0, 0x1) openat(r2, &(0x7f0000000100)='./file1\x00', 0x480000, 0x91) 23:54:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1473.221713] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1473.244794] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2400000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffe000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:49 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b4a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:54:49 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x73, 0x45, 0x8, 0x54, 0x0, 0x1, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x2}, 0x1080, 0x8, 0x2, 0x0, 0x2, 0x200, 0x8000, 0x0, 0x1d7, 0x0, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r2 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x0, 0x408000) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000006c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x855}, 0x20044801) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x25, 0x1, 0x0, 0x7, 0x0, 0x1f, 0x1020, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x4240, 0xa23, 0xfffffff9, 0x9, 0x13, 0x1, 0x7f, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000440), 0x4) ioctl$FIONCLEX(r1, 0x5450) 23:54:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:49 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x49ca, 0x5, &(0x7f0000001440)=[{&(0x7f0000000180)="390b540a9de4b713a73b386b687eb6982bd8d8f908c8", 0x16, 0x1}, {&(0x7f00000001c0)="9fabceafc6dab41ac22971c6735e56eda1420c30aba886438bff1b318cb2de2dc1cfd31749602473621bde8d5c1dbd250affe1176a8374135df7e5fdc455fea652232cb1fb78399a955967017fbd50bf5d0bb79ba30a5b135f1ed1411b820aa23a93a56f52e1fc16ce27b8f7ab94ca6f648c8a39587e279f7cfc6b1a89aced51742b022d471e825e9f1f62db41230be3f17a4a8bd6ad717b3ee4249a950a0efd126a8c9386e20bc1ccc36957b8fe89a8279d779e7389e06b7f91c99554e7c91ee209eed62c5a9c542a4956857b6677c7e627672b1a183b9caaf3f9348e", 0xdd, 0xa2e}, {&(0x7f00000002c0)="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", 0x1000, 0x6}, {&(0x7f00000012c0)="a731802ccd1530ed9993c2eaa41afa4547798850c6bca781cdfaa697680307cfb3d405dcfd04113fd6f3ffdc303a77e908a36a37907288660659d8731daf5a5cfb8f2bf8ccfcb6b6fe51e751bd6c016c36733d785d6f5c24c84e863fb70665db8f9d0aa68676c72a7d12e8be3110915b0d9b5802c114b73897995ef216735556ecd00223a161331bfc12595561b5a1c38fe3fd6ebeb465ab6796c17ce0461047350f1075291c5814c81e8aebf4fb1b43e5fed7cf590353262db3494f10358c8ddc182452a4e9d739e1947565c63e45c9b417b64bee0f5f8ba65b7b0ba7", 0xdd, 0xafa1}, {&(0x7f00000013c0)="76a3577d10647841946354e11230680408b4e0664f2679932fafe2e0e5b6bc733ed63d808a310bb4b8a29f72631b89ad702ce4665da75e498615888b88a3a38fc55abae4917d1c3acd91671aec1985b5702e5a535ea25335227bfaa7d1991d853457", 0x62, 0x4}], 0x80, &(0x7f0000001580)={[{@lazytime}], [{@euid_gt={'euid>', r0}}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, ',-\\\'\''}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:54:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:49 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x788, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x58df, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_ivalue}) syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd=r3, 0x2, 0x9a, 0x5, 0x6, 0x0, {0x1}}, 0xcc1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @auto="0059685263ded7d1b41834e2062127e6"}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x250300, 0x0) pidfd_getfd(r4, r5, 0x0) r6 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1000, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000001c0)={0x10001, 0xfffffffffffffffb, 0x3, 0xb4, 0x1, [0x1ff, 0x91, 0x9cc6, 0x2c04baf0]}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000180)=[r7], 0x1) 23:54:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x9, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1488.585007] EXT4-fs: 8 callbacks suppressed [ 1488.585022] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.593087] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.612055] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.644668] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.661453] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup3(r1, r3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="25000000000000000000005d1cfbfaf94958adbfcb29003faff30c00"]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x40) fallocate(r5, 0x0, 0x0, 0x87ffffc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00020000000000002e2f66696c653100"]) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8050, r4, 0x7ff) openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, 0x80) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x8, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x5, 0xc9, 0xfb, 0x0, 0x9, 0x402, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x3, 0x5}, 0x10, 0x7, 0x2, 0x2, 0x27, 0x4, 0xf0, 0x0, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x7fff, 0xffffffffffffffff, 0x9) write(r6, &(0x7f0000000080)="1d", 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) syncfs(r7) [ 1488.683915] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:54:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:54:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xa, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1488.854086] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.884401] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.901264] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1488.921472] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:05 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b4b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:55:05 executing program 7: pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {}, {0x0}], 0x3, 0x8001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) r2 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', &(0x7f00000008c0)={0x109443, 0x8c, 0xf}, 0x18) openat(r2, &(0x7f0000000900)='./file1\x00', 0x140400, 0x101) r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r4, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) syz_io_uring_setup(0x7d8a, &(0x7f00000007c0)={0x0, 0xb5f1, 0x34, 0x6, 0x2001b1, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000840)=0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x64f1, &(0x7f0000000180)={0x0, 0xb83a, 0x0, 0x2, 0x3f}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0xff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x8000}, 0x0, {0x0, r7}}, 0x2a8) sendfile(r0, r0, 0x0, 0x100000) 23:55:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4300000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xb, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:55:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000001900)=ANY=[@ANYBLOB], 0x24, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cf6, 0x1746085d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x200000e, 0x4d031, 0xffffffffffffffff, 0x0) 23:55:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1505.194946] EXT4-fs: 2 callbacks suppressed [ 1505.194963] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.206147] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.243059] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.249455] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1505.258945] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.279096] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.337599] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.345132] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:55:06 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x2, 0x100000001, 0xc8, &(0x7f0000000000)=""/200}) 23:55:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x15, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) [ 1505.422123] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1505.434894] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r0, &(0x7f0000000300)=""/138, 0x8a, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "b36cc4", 0xfe}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x1) 23:55:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x24, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 7: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x41) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f6, &(0x7f0000000480)="72566d51741e7be52520d8524745b578ac30192a331e42817f9bfc033de1b8ff4ffdb587557ec530b2a898b7c8b943f7740cbb06e1cf6f104b7201090e781bef38cc126db3ea2d0ae26546dc100014e114483a0df4ec94e611f692ecfd48d17aca651c38cf48d4039c6ec31de306f975e75f593066741f95bd58f972df744d99943a86b323758547f50406ef8f26d951dd0d15f85ebc5052d1db52ec1f3a9a6d0c28fe13ee085953b61cc5609ff9400bed1cc241bc3c712eb7779c2ae35e718c954ca67b368edc5efff40c3acbf3e8fc24aa") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_create(0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a1c00, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r3, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="fcf3071eae01f619c5823ce556875cc475885fddc4bd03cd5cb24ff9ac6eddea5e9e3c7d389d5fc12c2415bd8ee6f3d7cb6a5a919f35e6a1752d5566ab40fc63002e970251a7d891f55762968eb162d244280e921510d65b75f289e417c5c4a2fb758b947f7feb7867f8bd9fb72a113d9ab3626127fdeaea158f50c31c9dc71fd10a1ffd74562dd80ff82318eaaad2471ac74580e44febe4ee696b5c98ffad908ddf384f051b0797a9eb19ce91777703f075f5206ac8d45f4259c66e9dc61c"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0xc881) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x40010, r0, 0xfbce3000) 23:55:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 2: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) io_uring_enter(0xffffffffffffffff, 0x1eb1, 0x41d5, 0x2, &(0x7f0000000440)={[0x81]}, 0x8) r4 = syz_io_uring_setup(0x0, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x0, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x5486, 0x8223, 0x3, &(0x7f0000000400)={[0xfff]}, 0x8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r5, r6], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000300)=0xc) r8 = signalfd(r4, &(0x7f0000000340)={[0x4e2a]}, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x3f, 0x8, 0x7, 0x0, 0x35a, 0x40400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, @perf_bp={&(0x7f0000000140)}, 0xc830, 0x23, 0x7, 0x4, 0x6f, 0x1000, 0x0, 0x0, 0x5, 0x0, 0x7}, r7, 0x10, r8, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x6, 0x0, 0x1, {0x2}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 23:55:21 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b4c, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:55:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1520.682314] EXT4-fs: 8 callbacks suppressed [ 1520.682340] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.711870] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.718569] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.726534] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.731591] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.743971] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:21 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8100, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x2}, 0x800, 0x4, 0x101, 0x2, 0xfffffffffffffffd, 0x4, 0x200, 0x0, 0x800, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0xc, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f00000027c0)=""/4105, 0x1009}, {&(0x7f0000001600)=""/73, 0x49}, {&(0x7f0000001680)=""/187, 0xbb}, {&(0x7f0000000240)=""/3, 0x3}], 0x8, &(0x7f00000017c0)=""/201, 0xc9}, 0x10000}, {{&(0x7f00000025c0)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/150, 0x96}, {&(0x7f0000001a00)=""/239, 0xef}, {&(0x7f0000000200)}, {&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000001c00)=""/68, 0x44}, {&(0x7f0000000040)=""/12, 0xc}], 0x6, &(0x7f0000001d40)=""/160, 0xa0}, 0x8000}, {{&(0x7f0000001e00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e80)=""/6, 0x6}], 0x1}, 0x3}, {{&(0x7f0000001f00)=@hci, 0x80, &(0x7f0000002300)}, 0xac1d}], 0x4, 0x102, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x166e1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast1, 0x9, 0x2, 0x8, 0x500, 0x3, 0x41080004}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='cpuset\x00') 23:55:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x43, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa408000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:55:21 executing program 2: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x1]}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x400, @loopback, 0x2}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000000280)="9f3f46fe6c14f934355636aeac4bc617c62193bbb6c8000c53fd49bf53cd640dcf4a640256dc110d0917e0764dbaf2e7e2319e8766d4", 0x36}, {&(0x7f0000000300)="980fd3b23d09464dcac7987377390c92b8875b44ff1fb82812917c29aa84452e71d2abf6b11ba2d9a8976d123cbfc54a439a472a2a7361f655e73e6d4a8e913e42cf6cdca402634ade26dde3c68ab405e729abe294e1c444febff557e1649ffbd1e97d02d99d124aeb66fe7bdcf8f437a23a801c53f16e214b8c6e477f3288a60888883d9ece2522b85fe552096a3222c19a51eac5281b93d6814cfff530b252024f17a15da53807132d920de20c84816d27", 0xb2}, {&(0x7f00000003c0)="494d7ee39a759f180d6782101c37bb9c9b012a67b01b74e48ce9c96aec3ee22f6892862423030d9faf0f0fb41d6540d29dc5df790e8ece28b635ae6c", 0x3c}, {&(0x7f0000000400)="4e3bb53dbaf8851b66d2cadd8803fdf3b8b7e1fd49937aabef1d8d46321db80ada3bf461c6a28d4734c36bd8b4e10973530421973bce0c16061913530e740d2a35987915aaacd0513f3314fd9f8fdfa81f14b002ad7d4b534924957f3e780d882d0feb2dca4514fb8f2aff7728f67a54afa307f8cc899c6a859514b73f96d5f92ae0", 0x82}, {&(0x7f0000000640)="89172689d55a9c720897640718a310c0d0e0d3d5e95822b5a64ba92ec46c26d6212a016ee6406f56b31f822c2651bcd4a2ef78d550abc69f77090e9b3699e948ae785726eec59ef6371f5aa9f0d2fb89bccbfe1a42245a2448bd84b2deebb32e46bd355d52309883348ab47e2200f5fdd7c451aefe55bec9650036e542c3ec3ff174fb03c074f16b882f1133e9f7f0cf5c411ebecf20fead139eb1fc22d684313467c6283989bbbd570a142f10", 0xad}, {&(0x7f0000000700)="c40fa14168f9c20e638e553a6acb432af684d417126c109ccdc7da8e4367c47aac03ad624c3c2cde15dc9a9a07f6e1a035e320d9a0d62d8f122a4b91735cb6f463b98c359cbdb7ff833b797468cb1a8949b247efcbc4868aeb8d8715cdb9fa2f1a9b54e54f209e37b932c1d8690ff8f7ff3e2b6267289af22183efac910e4a4cb304f18b23eb28990295b463f16a4f7bc9fad0dd744c7db01d7ae2acae80854f462a55501a2667", 0xa7}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000004c0)="74e7c1c0d649798a1f0911dc812b82f9be756175e610c164c9edf1a47ab574582fd3cd585aaa4e95032e400a54411a8b5dda2175c73ad576abd52003f1ecf5c9e2fcb0d0af7bbed48f52c2498d0446bcca9d84829a24a39bcbcc567e3ff7599a2b30014484474823ab57406f164a96b9e15bf33b1c744e82df", 0x79}], 0x9, &(0x7f0000002880)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}}, {{&(0x7f00000028c0)={0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002900)="6198675826be5b0e1dcf1599c0a52ebb707fafed504fbaf7d618b935bf9962b94ddc6b0b3485b552a1d5acb8a2218a5cd9f71e77284407871e1f8f0ba8af8c68c3d5671d4cbca46718e3d5aeb8be95606f0074718f84eef05fffbec1d84334796ad19908af609840f5f826e8ee7badf3e2f6fb711354f0cef79ffa05dd25314272212b8e26ef6ea4ae0ebf92b6dce64530741ed3e54a3a6ba7da0eb6a68c87948aa581a9d4dce454d522ea5c36d31307f3846af5b165f42a33206e71e612159aef36aa3c373339c95a6383e95cd2", 0xce}, {&(0x7f0000002a00)="fa0e333341691228bc5ae92c8fe9e808a621fc14489e048badb5e3aa8056df2b0ea4", 0x22}, {&(0x7f0000002a40)="9ab2eeb51e5ce9e129abb48bb91dbaff14b8cf324017a8674102456bfa852d8a25e8e80d995ba000149209dc2e2f25ed9b6abd4f44392bc4735c979c7f0bd6c8ca68add422bb4cbe9351bdcd29eac86afc683ecba929ba0c3a4ea85de2945be25cb5c90caeb445ee475b9bfa9d49eacc2f8338462b7417e85bf666c5796a2d58d0ab81b6e7c6277e5beeaad8e196533f1975", 0x92}, {&(0x7f0000002b00)="8164ba7135c22e8312dccc56c543a40fdebf1da5914d2d8a2e1563a26b677cbdbcce840ceea964bb4b728b3b82944f96d21ef7a95c807ea374078ee620ad2cdfe4d25bf9265c53ff982ddcadee3db39257b7b52d51ecb7fe3d733e95ab2cb31a340ba25724bd7f52f71c173a8afa558fb1947b2fd19dff9df6f9c51f9ff8ab80bbe06c7c4e4e4f578574393e0c126a5d7019edec894b", 0x96}, {&(0x7f0000002bc0)="c59da16f7fa1eef54fdb1c89e18bbb16d839f4e0e12922cc6283880ac09818768b1fa58ce77c50c5bb1ade102ba9917edbd42b6088b757e11d1adb9be70fb50853b6f07985dfa66f5a74a9b8da4ae7ee98", 0x51}], 0x5, &(0x7f0000002cc0)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts={{0xf8, 0x29, 0x37, {0x21, 0x1b, '\x00', [@pad1, @generic={0x3, 0xda, "34e6c84f0adb5bc63794b3b83e30f122340b2a4cd0cf80336fa81852c79c557d1592c19f19b20354016b263e96ff02fe77c0436c6bab0acc307bbb37854dcbea8b537cefb7c8f75cdec0a731bc0a039d6b4887e225879b805cfdfd4649339dfa5ec50a8be387adaa3d853b69c1c09236e1c93f2827d3016c10ade4b1c685a782235508f54f5beef052c0671c66cef6066b84f98b8fb8ad02996f9553ba43c08b0e83599b4b932eafca2cd98b1b8538c325300288d05f773e808d960ccd4cb963b41864ce940925d1934206d939a7e4c5929ce4c74b7df08cfb93"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x5c, 0x10, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, @empty]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x2, 0x0, 0x0, [@empty]}}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x3c, 0x2d, '\x00', [@generic={0x1, 0x8d, "48969a557e5bf9643c3aad99c37cb54ee762815e03a9b99464351243f6e26d818b572896777b39609acc9abef1de60c3010cdb0567d92f488b4f39a047291911b943f73845cc81e045858b9ab20f84005f44b6d0be2e0403a1f97dfddd420e9d7f9f4cefc2c71c62bf8391b86b669c404d01ec0a6f701177c581960e8a28dadc7e460e97bddc5d81a482faa4e8"}, @pad1, @pad1, @generic={0x8, 0x7c, "8a01b4b65ac85928c4ca3fc3c2baa5243213e1f3693c84bcfd9e65f039e8ed34e867891f33598034e81e7a751589228cf8e83e501f5346d013f1aa76ad8f2b378c96d25dc868c61b4633d49668a5d6268c2e42938d8eeca0384cbc5b1ffb8c260727da47f5135ea3a5bcdb22c6280c5f9c8a64f71ea32eaae6237fc3"}, @generic={0x2, 0x36, "0de89d7c6dee357c56ec6a10dede9f5db43fed9ebd1a02354396598799af448be79c693f254d08dc53d4775be4eec10a2b69eba49b2b"}, @jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x10000}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x3}]}}}], 0x358}}], 0x2, 0x4004) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000008480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x401, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="208799f8a401ee539e3511cdbe95ec878318f9d5411957513038e8ea782c2dfb1754b043961ba82caa62f38f239cb5cfe23ccdb758eb1e33bc70b85c56542860e783f2dd39ec32de906e18343b6e390aed8350c2bcaae2ea79a9a98a112c24dd901b0d063bbae1a7d9f4f78d1d99", 0x6e}, {&(0x7f0000000100)="319fe66b0878f99d1f7261584826dee3c1f7440d987a6ed056d54e097c759b5dacdfaab7162e1abc1a205ee0cfe80023198af71621fd1a4940aad32158a31ea3ed6c", 0x42}, {&(0x7f0000000180)="a2b58a9968f5bc9e2d95f309952daa57a97eee6887fad5c45ebf68f68ac17ecefd4639835c102cdb87b56ac45dfb66f049eecb6fd06ceb6550b91f0787036bffcb1446c1d124785b7b8175511726cdd076cc8d34a6bd0036ced4b9394f80a2153e2700ed5a7190", 0x67}, {&(0x7f0000000540)="bbb723f0f05898df0097b13ae85f41cb3a6ffc3a2b1dfe7f506a9eb2861be04732dc5bb44d8fed17a3ae8fddc5e6ce318c2a452ea4f9fb6078925f9d91a1c0dfd85a9b5d6d7ceac8b2bf6427c70145986993dd735ee6f22e8d8afd1bd46ae6e8c42b6fd91e8a858ebcf6ea461c6b845a4d43ca910a2d7fbcafabadfb1aa72b55b0ccf1e94a9a9c3831395087f466bfe2b5c6c7df41542068a942a3df62a5b8e528e14855aa890e5a715432569a3c30702f7bf6705ea37a02f907e6932dca03d0bd01ccdbbe5f7f5ee001b3df970bf9c3095d70f55e936d66453d780f275a0a912dc136c6bb9e7cf1045b94170547d3fad270c642fe", 0xf5}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11c8}}], 0x2, 0x0) [ 1520.928601] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.945864] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.954728] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1520.974268] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x300, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xe70b000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x81, 0x7, 0xa8, 0x8, 0x0, 0x7ff, 0x20200, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x226c4da5}, 0xa100, 0x1, 0x2, 0x1, 0x2, 0x200, 0x8, 0x0, 0x2ae, 0x0, 0x100000001}, 0x0, 0x6, r0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) r1 = syz_open_dev$loop(&(0x7f00000007c0), 0x6, 0x10800) sync_file_range(r1, 0x8, 0x0, 0x3) unlink(&(0x7f0000000440)='./file0\x00') mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f6e75b35a26bcf9"], &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='affs\x00', 0x20, &(0x7f0000000640)='[-%+\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x3, 0x9}]}, 0xc, 0x1) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"/277], &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)='nfs4\x00', 0x2000000, &(0x7f0000000540)='\x06\xf3\xa1\x9dP\xf7\b\x00\x00\x00\x00\x00\x00\x00@qR6\xd9\xfc\x1a\x16\xe5\xad\b\xbd%\x1c3fQP\xa4\x16\xa7\x1bW\x90\xac\xf6+H\xa7\v\x84\xe7\xcf\xe6H\x18h\xdb\xb9\x02R[Z\x05\x8dE\x9e6\xf5\x00'/74) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0xd0002006}) openat(r3, &(0x7f0000000680)='./file2\x00', 0x1, 0x142) 23:55:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38383037323533333400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000713aa3a4ba984e5d8a0373c06ca5ba29010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004000200", 0x1e, 0x1500}], 0x0, &(0x7f0000012800)) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file1\x00', 0x26) 23:55:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0xde8, 0x0, 0x0, 0x0, 0x0) 23:55:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:55:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1) ioctl$TCSETS2(r0, 0x4b4d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "70d5d6c2982080ccf3d6ebf7e4d421a5fd08eb"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1539.756971] EXT4-fs: 8 callbacks suppressed [ 1539.756994] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1539.769501] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1539.778455] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1539.786446] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1539.792583] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1539.798574] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x199002, 0x100}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x147c03, 0x40) 23:55:40 executing program 7: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_config_ext, 0x40082, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5d93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = socket(0x33, 0x2, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)=0x1) pipe2(&(0x7f00000001c0), 0x84800) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) 23:55:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x900, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0xa8, &(0x7f00000000c0)={[{@journal_async_commit}]}) 23:55:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1540.001259] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) close(r0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1540.030713] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode 23:55:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x17, 0x0}}], 0x2, 0x0) [ 1540.116799] [ 1540.117048] ====================================================== [ 1540.117818] WARNING: possible circular locking dependency detected [ 1540.118599] 6.2.0-rc1-next-20221226 #1 Not tainted [ 1540.119211] ------------------------------------------------------ [ 1540.119969] syz-executor.7/9291 is trying to acquire lock: [ 1540.120657] ffff88800b520400 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_bmap+0x52/0x470 [ 1540.121803] [ 1540.121803] but task is already holding lock: [ 1540.122520] ffff88800b32e3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48f/0xc10 [ 1540.123741] [ 1540.123741] which lock already depends on the new lock. [ 1540.123741] [ 1540.124735] [ 1540.124735] the existing dependency chain (in reverse order) is: [ 1540.125644] [ 1540.125644] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1540.126567] mutex_lock_io_nested+0x14c/0x1330 [ 1540.127214] jbd2_journal_flush+0x19e/0xc10 [ 1540.131811] ext4_change_inode_journal_flag+0x39d/0x550 [ 1540.132579] ext4_fileattr_set+0x14fa/0x19f0 [ 1540.133205] vfs_fileattr_set+0x780/0xb90 [ 1540.133798] do_vfs_ioctl+0xfa6/0x15d0 [ 1540.134364] __x64_sys_ioctl+0x110/0x210 [ 1540.134951] do_syscall_64+0x3f/0x90 [ 1540.135506] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1540.136241] [ 1540.136241] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 1540.137092] __mutex_lock+0x136/0x14e0 [ 1540.137665] jbd2_journal_lock_updates+0x162/0x310 [ 1540.138355] ext4_change_inode_journal_flag+0x187/0x550 [ 1540.139091] ext4_fileattr_set+0x14fa/0x19f0 [ 1540.139719] vfs_fileattr_set+0x780/0xb90 [ 1540.140313] do_vfs_ioctl+0xfa6/0x15d0 [ 1540.140891] __x64_sys_ioctl+0x110/0x210 [ 1540.141473] do_syscall_64+0x3f/0x90 [ 1540.142025] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1540.142740] [ 1540.142740] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1540.143627] percpu_down_write+0x51/0x350 [ 1540.144229] ext4_ind_migrate+0x23b/0x840 [ 1540.144859] ext4_fileattr_set+0x1521/0x19f0 [ 1540.145490] vfs_fileattr_set+0x780/0xb90 [ 1540.146079] do_vfs_ioctl+0xfa6/0x15d0 [ 1540.146648] __x64_sys_ioctl+0x110/0x210 [ 1540.147232] do_syscall_64+0x3f/0x90 [ 1540.147789] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1540.148517] [ 1540.148517] -> #0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 1540.149424] __lock_acquire+0x2a02/0x5e70 [ 1540.150025] lock_acquire.part.0+0x11e/0x340 [ 1540.150648] down_read+0x9c/0x450 [ 1540.151165] ext4_bmap+0x52/0x470 [ 1540.151687] bmap+0xb0/0x130 [ 1540.152154] jbd2_journal_bmap+0xac/0x190 [ 1540.152780] jbd2_journal_flush+0x857/0xc10 [ 1540.153385] __ext4_ioctl+0x9db/0x43b0 [ 1540.153951] __x64_sys_ioctl+0x19e/0x210 [ 1540.154545] do_syscall_64+0x3f/0x90 [ 1540.155093] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1540.155804] [ 1540.155804] other info that might help us debug this: [ 1540.155804] [ 1540.156782] Chain exists of: [ 1540.156782] &sb->s_type->i_mutex_key#6 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 1540.156782] [ 1540.158407] Possible unsafe locking scenario: [ 1540.158407] [ 1540.159136] CPU0 CPU1 [ 1540.159694] ---- ---- [ 1540.160260] lock(&journal->j_checkpoint_mutex); [ 1540.160884] lock(&journal->j_barrier); [ 1540.161689] lock(&journal->j_checkpoint_mutex); [ 1540.162574] lock(&sb->s_type->i_mutex_key#6); [ 1540.163168] [ 1540.163168] *** DEADLOCK *** [ 1540.163168] [ 1540.163903] 2 locks held by syz-executor.7/9291: [ 1540.164501] #0: ffff88800b32e170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310 [ 1540.165785] #1: ffff88800b32e3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48f/0xc10 [ 1540.167067] [ 1540.167067] stack backtrace: [ 1540.167626] CPU: 1 PID: 9291 Comm: syz-executor.7 Not tainted 6.2.0-rc1-next-20221226 #1 [ 1540.168626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.169634] Call Trace: [ 1540.169968] [ 1540.170263] dump_stack_lvl+0x8f/0xb7 [ 1540.170772] check_noncircular+0x263/0x2e0 [ 1540.171320] ? __pfx_check_noncircular+0x10/0x10 [ 1540.171928] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1540.172568] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1540.173150] __lock_acquire+0x2a02/0x5e70 [ 1540.173698] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1540.174394] ? __pfx___lock_acquire+0x10/0x10 [ 1540.174973] ? perf_trace_lock_acquire+0xfd/0x530 [ 1540.175613] lock_acquire.part.0+0x11e/0x340 [ 1540.176187] ? ext4_bmap+0x52/0x470 [ 1540.176687] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1540.177328] ? rcu_read_lock_sched_held+0x42/0x80 [ 1540.177957] ? trace_lock_acquire+0x14c/0x1c0 [ 1540.178543] ? ext4_bmap+0x52/0x470 [ 1540.179042] ? lock_acquire+0x32/0xc0 [ 1540.179539] ? ext4_bmap+0x52/0x470 [ 1540.180029] down_read+0x9c/0x450 [ 1540.180506] ? ext4_bmap+0x52/0x470 [ 1540.180992] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1540.181702] ? __pfx_down_read+0x10/0x10 [ 1540.182236] ? lockdep_hardirqs_on+0x7d/0x100 [ 1540.182824] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1540.183540] ext4_bmap+0x52/0x470 [ 1540.184003] ? bmap+0x17/0x130 [ 1540.184442] ? __pfx_ext4_bmap+0x10/0x10 [ 1540.184993] bmap+0xb0/0x130 [ 1540.185405] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1540.186026] jbd2_journal_bmap+0xac/0x190 [ 1540.186563] ? __pfx_jbd2_journal_bmap+0x10/0x10 [ 1540.187174] ? _raw_write_unlock+0x28/0x50 [ 1540.187722] ? jbd2_mark_journal_empty+0x309/0x3f0 [ 1540.188379] jbd2_journal_flush+0x857/0xc10 [ 1540.188942] ? cap_capable+0x1da/0x240 [ 1540.189463] ? __pfx_jbd2_journal_flush+0x10/0x10 [ 1540.190079] ? security_capable+0x99/0xc0 [ 1540.190619] __ext4_ioctl+0x9db/0x43b0 [ 1540.191122] ? lock_is_held_type+0xdb/0x130 [ 1540.191682] ? irqentry_enter+0x2a/0x60 [ 1540.192207] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1540.192914] ? __pfx___ext4_ioctl+0x10/0x10 [ 1540.193480] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1540.194179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1540.194851] ? do_vfs_ioctl+0x132/0x15d0 [ 1540.195378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1540.195931] ? ioctl_has_perm.constprop.0.isra.0+0x2d9/0x410 [ 1540.196680] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 1540.197402] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1540.198172] ? __pfx_lock_release+0x10/0x10 [ 1540.198722] ? trace_lock_acquire+0x14c/0x1c0 [ 1540.199308] ? __pfx___fget_files+0x10/0x10 [ 1540.199857] ? lock_acquire+0x32/0xc0 [ 1540.200364] ? selinux_file_ioctl+0xb5/0x260 [ 1540.200935] ? __pfx_ext4_ioctl+0x10/0x10 [ 1540.201472] __x64_sys_ioctl+0x19e/0x210 [ 1540.202000] do_syscall_64+0x3f/0x90 [ 1540.202503] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1540.203171] RIP: 0033:0x7f1756accb19 [ 1540.203645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.205882] RSP: 002b:00007f1754042188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.206813] RAX: ffffffffffffffda RBX: 00007f1756bdff60 RCX: 00007f1756accb19 [ 1540.207689] RDX: 0000000020000340 RSI: 000000004004662b RDI: 0000000000000005 [ 1540.208573] RBP: 00007f1756b26f6d R08: 0000000000000000 R09: 0000000000000000 [ 1540.209457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.210336] R13: 00007ffed626882f R14: 00007f1754042300 R15: 0000000000022000 [ 1540.211224] VM DIAGNOSIS: 23:55:41 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=1ffff1100d9c12ce RSI=ffffffff817c86e1 RDI=ffff88806ce09670 RBP=ffff88806ce09708 RSP=ffff88806ce095f0 R8 =ffffffff860f18ca R9 =ffffffff860f18ce R10=ffffed100d9c12db R11=ffff88806ce096b0 R12=ffff88806ce09738 R13=0000000000000000 R14=ffff88806ce09670 R15=00000000000000f0 RIP=ffffffff8112ac19 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe141a336000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe141a334000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055edf32b3010 CR3=000000000ecd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824796f5 RDI=ffffffff87dc65e0 RBP=ffffffff87dc65a0 RSP=ffff8880348a70e0 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=ffffffff87dc65a0 R14=0000000000000010 R15=ffffffff824796e0 RIP=ffffffff8247974d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1754042700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe2b91ef3000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe2b91ef1000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555cffc58 CR3=000000003a5de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000